Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
File: Uw4xZLFq4JEmhPqpDkORTeH91aU.mft (raw, json)
Hash identifier: oRIXovrsJnVxJ1k/Ci3ZSt0npick412JKb8caGji7f0=
Subject key identifier: 31:CB:04:CC:59:DD:37:BC:0A:DA:7C:E2:A5:A9:1E:18:FE:99:F2:7B
Authority key identifier: 53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5
Certificate issuer: /CN=530e3164b16ae0912684faa90e43914de1fdd5a5
Certificate serial: 019CAB6B13EA15BFC9E4F4C506A2F41C440F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
Manifest number: 10F9
Signing time: Sun 01 Mar 2026 22:00:47 +0000
Manifest this update: Sun 01 Mar 2026 22:00:47 +0000
Manifest next update: Mon 02 Mar 2026 22:00:47 +0000
Files and hashes: 1: Uw4xZLFq4JEmhPqpDkORTeH91aU.crl (hash: soNCcgl31++Xw/ve6LyRWns5D0vI1DDeivI84pySeF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:13:ea:15:bf:c9:e4:f4:c5:06:a2:f4:1c:44:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=530e3164b16ae0912684faa90e43914de1fdd5a5
Validity
Not Before: Mar 1 22:00:47 2026 GMT
Not After : Mar 2 22:00:47 2026 GMT
Subject: CN=31cb04cc59dd37bc0ada7ce2a5a91e18fe99f27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6b:9c:f8:b1:7c:bc:ba:be:97:b8:08:18:e3:
64:66:e7:8f:24:4c:1d:6c:fb:60:69:bd:5c:55:a0:
68:67:96:f1:01:4b:a8:44:c5:df:72:78:20:28:f3:
b4:b1:76:98:68:8a:4f:a2:20:b8:b3:b6:37:22:51:
f1:03:81:99:8f:a2:cc:47:aa:34:70:23:dd:1b:97:
53:0a:8d:5a:45:8d:41:1c:73:e4:fe:16:ea:66:af:
39:7f:fd:45:33:89:14:9b:00:f2:76:de:5c:7a:16:
c2:69:71:0e:00:d4:e1:e4:66:79:b4:e0:29:96:d2:
4c:00:1c:b6:81:c2:4d:d4:aa:bc:cf:b1:97:c7:9d:
f4:12:e7:b6:98:dd:7f:b5:61:43:4c:e9:54:82:39:
19:f3:e5:cd:65:f7:27:17:d1:49:22:e3:82:dc:ea:
65:8c:f1:dd:ae:b1:b3:4d:ca:1e:00:54:4b:0a:e9:
91:b4:14:31:9b:c4:49:9b:56:b2:7a:ed:20:48:81:
15:38:12:9f:2a:2d:6c:f0:f3:0f:6c:03:3b:bf:33:
f4:89:0e:d8:49:15:52:40:e3:1a:0d:9d:1b:e8:1a:
dc:0f:f7:f3:08:d2:f2:bc:de:a3:bb:b0:ec:b9:63:
ac:ff:50:d2:e0:c8:96:1c:05:e2:d0:3b:86:72:42:
5b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CB:04:CC:59:DD:37:BC:0A:DA:7C:E2:A5:A9:1E:18:FE:99:F2:7B
X509v3 Authority Key Identifier:
keyid:53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:38:3b:4d:11:80:9a:bb:c9:67:5b:0e:e0:a6:1a:b9:0a:c1:
26:b7:f1:cc:8e:70:03:f7:d8:60:e4:8e:47:0d:dd:4c:2c:78:
3a:7e:4f:21:12:0a:c0:af:55:ce:b0:48:0e:34:84:56:9f:b9:
5f:6d:68:21:4a:08:49:b7:1e:1c:22:f1:86:cb:24:05:ec:62:
d3:62:7d:7a:7e:0e:c6:46:c1:43:58:77:62:54:62:68:cc:f5:
f2:4d:be:39:4e:2d:e1:1e:89:63:9a:75:ac:46:71:36:9f:7d:
ea:0c:50:be:28:55:c5:e5:42:ab:4a:d1:d8:1b:9a:cd:b6:5c:
b5:c1:4e:d0:6a:a6:d5:bd:23:6e:a0:80:da:7d:36:e3:34:02:
e6:41:c7:bd:bc:aa:5d:29:2f:7a:f5:fd:7b:8c:df:84:f4:ab:
01:ea:d5:0d:45:ee:0c:98:2a:03:99:52:df:89:b8:8c:26:dd:
40:aa:e6:a0:54:e1:ef:63:6b:fa:b1:31:c7:47:fd:89:cf:cd:
0f:2b:79:6f:f1:3d:7a:95:1f:20:05:34:d6:f5:62:6f:65:bb:
a0:85:26:a3:c2:7d:ed:20:d1:6e:ea:df:a1:31:c3:a1:91:ed:
d3:41:40:b7:cd:26:c0:f3:18:40:9d:62:db:80:87:68:ce:26:
ba:a3:28:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:46 2026 by rpki-client