Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
File: kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft (raw, json)
Hash identifier: bHL62GyK7brsiRHC6IB0vxHukoRHkeShKVsC9/grfSs=
Subject key identifier: 79:71:BC:E0:9D:7C:CC:20:E2:DC:4F:46:A1:C3:3D:9C:A8:3B:22:7C
Authority key identifier: 91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
Certificate issuer: /CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Certificate serial: 019CAB6B33C4C241B588C285F2DAF601387A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
Manifest number: 0F2B
Signing time: Sun 01 Mar 2026 22:00:55 +0000
Manifest this update: Sun 01 Mar 2026 22:00:55 +0000
Manifest next update: Mon 02 Mar 2026 22:00:55 +0000
Files and hashes: 1: kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl (hash: pMMzMoB68h/qDcPvwwXB69DztRBH726PvCEBwusaAqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:33:c4:c2:41:b5:88:c2:85:f2:da:f6:01:38:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Validity
Not Before: Mar 1 22:00:55 2026 GMT
Not After : Mar 2 22:00:55 2026 GMT
Subject: CN=7971bce09d7ccc20e2dc4f46a1c33d9ca83b227c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5b:39:8b:dc:cb:ab:eb:18:23:c0:2e:ca:1d:
3b:54:23:d3:e6:da:f7:4c:74:14:07:73:80:26:e5:
a0:3c:16:01:4c:70:06:c3:a3:88:de:d7:f3:8b:dc:
9b:86:93:1c:c5:01:94:e9:52:86:69:e9:90:c5:15:
71:e0:53:80:fc:3a:44:5b:56:50:22:cf:0b:54:3a:
ed:5b:b1:99:3a:ce:eb:23:18:08:c7:bc:43:7e:bd:
e3:b1:c9:23:68:46:40:4e:98:fb:bc:ce:8e:fb:b8:
3e:1c:a5:92:d5:5b:3e:fe:21:f6:bc:32:58:b7:23:
9e:eb:ea:54:1d:64:71:2a:23:c1:11:fe:36:0a:71:
f2:53:02:b9:42:95:40:37:02:f4:b5:e5:c3:ee:c7:
c8:61:0f:db:4d:63:26:58:df:98:d8:75:82:cf:50:
86:83:75:b4:a4:59:5d:4b:f0:5d:cf:b9:0d:46:e0:
3f:2c:be:50:0e:00:03:36:8c:71:da:cc:5d:52:10:
05:7b:63:58:ba:c7:39:ac:82:43:64:af:c8:2a:08:
d0:0e:13:a0:d5:13:b7:b7:50:e5:a3:95:f1:08:be:
f6:49:05:9f:cf:05:14:81:4f:11:4e:7e:a6:46:8f:
a0:f1:bc:78:eb:50:93:a2:ce:05:8b:dc:24:77:9f:
65:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:71:BC:E0:9D:7C:CC:20:E2:DC:4F:46:A1:C3:3D:9C:A8:3B:22:7C
X509v3 Authority Key Identifier:
keyid:91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1e:7e:c8:d5:28:cf:67:f0:d1:13:1f:d9:6c:af:16:49:37:
1f:8a:6c:1e:71:80:62:90:7a:d3:3b:86:14:72:4b:38:35:c2:
81:66:51:6d:84:fc:b2:cc:6d:c7:a5:ea:da:72:a9:4c:26:89:
3c:90:98:39:08:d8:68:4a:fe:88:3f:1b:fd:19:13:9e:41:03:
14:a8:94:9b:91:45:49:1b:eb:9e:34:ed:86:7b:ef:d7:6a:3c:
0a:ee:24:a7:c0:68:bc:7a:8a:ef:3d:57:e9:84:e8:43:a0:10:
39:fe:6b:41:66:37:49:c5:4c:2e:55:32:92:30:f0:04:53:a2:
3e:ff:ce:7c:c0:5d:1b:59:4d:bb:69:bb:b8:2c:54:23:ff:03:
9b:01:7d:0d:d7:92:58:4b:bd:ee:96:98:be:93:cb:61:77:11:
54:c3:6d:a5:52:d9:0e:a5:52:27:93:2f:35:92:bb:0e:c0:f2:
97:31:4b:65:ae:9f:04:02:25:41:3d:e4:2a:dc:42:a5:9c:6c:
2f:b2:d6:14:1f:61:a4:40:94:6e:62:a3:5e:cf:00:81:30:c8:
59:56:0f:9b:e5:96:9a:26:3a:f4:e9:a4:d9:a3:6e:2b:57:8e:
0f:b7:02:18:03:bb:34:12:7f:d1:3f:2b:41:00:62:46:63:45:
e4:54:ed:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:07 2026 by rpki-client