Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft
File: Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft (raw, json)
Hash identifier: brfQ/VFpoymRz4hA2vAOftg6ySw5cYvfSMeFLPdIW0c=
Subject key identifier: 7A:5E:FD:39:4D:AD:77:20:2D:02:FA:6C:5C:4A:ED:48:33:93:60:41
Authority key identifier: 52:EF:F3:85:D4:B4:82:15:D8:05:B5:88:A2:70:58:29:D4:62:11:71
Certificate issuer: /CN=52eff385d4b48215d805b588a2705829d4621171
Certificate serial: 019CAB6B89B3E4F9643446F47E2536E2C50C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft
Manifest number: 0BEF
Signing time: Sun 01 Mar 2026 22:01:17 +0000
Manifest this update: Sun 01 Mar 2026 22:01:17 +0000
Manifest next update: Mon 02 Mar 2026 22:01:17 +0000
Files and hashes: 1: Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl (hash: bjaEWmmb7wBjNEOqaJZkZsao8aKiBaHg9denFOfOCUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:89:b3:e4:f9:64:34:46:f4:7e:25:36:e2:c5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52eff385d4b48215d805b588a2705829d4621171
Validity
Not Before: Mar 1 22:01:17 2026 GMT
Not After : Mar 2 22:01:17 2026 GMT
Subject: CN=7a5efd394dad77202d02fa6c5c4aed4833936041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a9:b6:16:2f:e3:35:58:e3:c8:9f:f6:b9:9e:
c6:78:b4:20:1b:89:0b:f6:45:9a:d0:e4:5f:c8:71:
ad:c5:41:39:0e:cd:53:02:6c:37:2b:34:09:51:6b:
74:c9:47:d8:b3:fa:6c:ed:92:69:f5:8f:7e:71:a6:
93:33:30:99:62:68:99:17:a1:15:ae:20:81:38:d9:
c0:60:a1:c9:f0:b1:fe:76:cd:f1:b0:1b:d9:42:43:
5b:b9:ef:86:98:52:16:57:f3:07:92:b8:c8:35:c7:
1f:20:12:b4:7b:3a:1f:49:36:be:4a:93:0c:4e:94:
5a:6c:d1:55:95:db:a5:e7:cb:62:80:2c:7d:c4:99:
16:ed:21:bd:5a:99:51:60:f2:6a:3f:10:83:4e:b0:
4f:80:4a:26:33:cb:f8:0e:a0:00:ae:4b:f3:49:ea:
7e:cc:51:9f:be:28:ea:fb:5d:3d:1a:7b:b4:1b:32:
9c:74:b4:6f:bd:05:3d:8e:3f:00:87:81:6f:6f:15:
d9:b5:8b:9f:78:44:21:0a:91:0b:6d:e5:81:7c:31:
58:c5:b9:d8:8f:b0:5c:45:8a:19:ae:55:04:e2:82:
3e:3d:b2:fb:fa:2e:d9:33:e4:35:5e:b3:e3:bc:10:
42:aa:16:f8:03:ee:d9:c2:53:8a:95:82:9d:58:fe:
e3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5E:FD:39:4D:AD:77:20:2D:02:FA:6C:5C:4A:ED:48:33:93:60:41
X509v3 Authority Key Identifier:
keyid:52:EF:F3:85:D4:B4:82:15:D8:05:B5:88:A2:70:58:29:D4:62:11:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f8:c3:5f:99:68:6b:a0:22:5b:90:51:8d:24:9a:86:a9:a9:
39:e4:36:de:5b:f9:5e:e9:9d:0e:08:ce:32:96:49:2c:5b:e9:
62:b6:ee:0f:f0:85:0e:6d:c9:3b:58:6f:ab:77:76:62:a9:bc:
4a:7d:a2:cf:53:a4:4d:7c:6a:88:e0:c4:c6:fb:e2:07:54:51:
4a:ac:00:a1:bc:1c:6f:a2:f2:09:f1:88:43:6a:c4:03:21:ab:
09:c8:c1:d6:14:8a:d1:2e:57:b8:91:fb:eb:d3:4d:f6:bf:8c:
de:88:01:54:e7:53:c2:98:25:08:22:d6:3b:20:fc:3e:95:2c:
60:5f:41:33:51:dc:2e:06:54:a0:99:cf:50:10:3d:2e:d2:55:
f7:1e:1f:b9:55:aa:b9:32:21:f5:97:42:62:3f:5a:83:30:f4:
21:bf:52:68:4b:09:10:59:74:01:e7:59:5d:13:3d:ce:34:5d:
7a:b3:62:00:9b:8e:a2:be:5d:96:9b:9c:50:0c:9a:f9:0f:07:
7e:f2:42:08:cb:15:1e:f0:3b:97:bb:8b:d5:e8:e7:6a:a5:dd:
32:f6:ab:56:a4:70:57:da:73:d9:b8:bf:05:f0:77:bd:e6:ac:
c0:3c:1b:fb:9c:e2:19:ed:7e:be:e4:75:7d:19:e2:25:d2:66:
24:2b:07:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:47:22 2026 by rpki-client