Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
File: kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft (raw, json)
Hash identifier: EeH2Seg+Dy9aFkhyELletECkSz3i7GiVE00OKlhDr9E=
Subject key identifier: 9D:77:42:CF:B4:F8:C8:8D:AD:FB:AC:14:C2:22:B5:CA:FA:D2:64:57
Authority key identifier: 91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
Certificate issuer: /CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Certificate serial: 019DA48B6FD7275E2C6A68FA836FDF4B842E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
Manifest number: 0FAC
Signing time: Sun 19 Apr 2026 07:01:34 +0000
Manifest this update: Sun 19 Apr 2026 07:01:34 +0000
Manifest next update: Mon 20 Apr 2026 07:01:34 +0000
Files and hashes: 1: kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl (hash: ap3eZ7+Dtkc//do2vQX/NtpUKeoDPbtySMYp/S5nHOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:6f:d7:27:5e:2c:6a:68:fa:83:6f:df:4b:84:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Validity
Not Before: Apr 19 07:01:34 2026 GMT
Not After : Apr 20 07:01:34 2026 GMT
Subject: CN=9d7742cfb4f8c88dadfbac14c222b5cafad26457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:05:17:8d:f6:26:e9:ac:ad:16:84:19:b8:
18:0a:41:30:aa:4d:e2:d9:17:42:ab:68:ae:9a:0f:
14:e1:52:d7:60:52:77:f4:a4:ac:4f:df:d3:6c:4d:
69:ec:8f:19:fb:e0:c0:83:8b:52:09:f7:12:3d:66:
ba:26:f9:75:1a:8a:61:bd:7a:bd:b0:65:63:67:43:
06:53:55:61:16:4c:72:7a:0b:76:8f:0f:db:22:87:
13:b1:f5:e1:02:09:44:4b:42:e5:e3:90:cc:8a:5f:
52:64:1d:67:76:e0:61:26:5c:04:2b:97:25:76:c1:
e8:ce:dd:a5:f6:f9:b1:7b:a1:47:27:95:85:e4:72:
74:c1:6e:7d:ef:f9:13:67:b5:9c:04:6a:0f:2a:37:
ea:22:40:db:72:52:35:ef:9e:94:b9:cc:02:2c:ef:
35:9f:17:b9:68:b4:a1:13:6d:d1:4e:2f:c0:cd:88:
c2:da:b9:b2:c5:b7:5c:24:0d:40:81:cb:34:22:78:
41:ba:81:48:c3:ff:b8:db:c1:0d:35:f6:63:2f:95:
94:c2:22:22:3d:cd:40:34:ff:6b:16:95:13:69:27:
ab:a0:2e:e6:1e:c5:ca:bb:4f:35:3d:d0:17:d8:99:
9f:4f:17:12:e0:70:3c:af:20:e1:d1:52:19:8f:8b:
29:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:77:42:CF:B4:F8:C8:8D:AD:FB:AC:14:C2:22:B5:CA:FA:D2:64:57
X509v3 Authority Key Identifier:
keyid:91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f6:38:43:08:35:7f:51:29:d2:ae:4e:49:9c:3e:fc:56:18:
50:c0:ad:a5:51:bb:2b:3d:23:9c:aa:3f:bc:70:11:93:65:1c:
36:88:d4:d8:cd:0a:9b:a6:1e:9a:20:85:f8:b1:39:81:3a:8d:
e1:e5:b2:c3:ae:5a:f4:12:b6:e7:b2:ac:16:78:f9:c4:98:35:
63:44:f0:64:b3:92:3b:9f:51:95:27:67:fe:8d:20:8c:42:79:
4e:74:00:34:a6:ac:0c:f9:73:f4:bd:ce:64:0e:c7:a4:86:fb:
19:17:bc:22:7e:fe:fe:cd:22:1e:6c:a9:6e:6b:2d:13:f2:95:
25:6c:68:9f:75:1c:f3:97:a5:65:21:a6:b8:e4:c3:64:e4:ea:
8f:fe:a0:fe:5c:24:c6:c7:e9:28:74:b7:8e:11:c0:90:39:cf:
89:3b:7b:8b:ec:55:b1:34:9e:66:f2:d1:28:d5:31:86:d1:dd:
df:a7:66:e5:03:b8:b5:13:e8:6a:31:13:09:47:30:cf:a0:0c:
47:2c:e9:48:ea:2b:00:cb:2c:d5:1f:7c:12:0c:86:25:b6:4f:
f4:70:73:fe:ca:14:5a:98:98:94:dd:bf:aa:57:9a:79:16:b7:
9c:81:2a:f6:67:2e:fc:00:cc:a6:d5:82:aa:3a:2e:85:02:1e:
73:26:3f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:16:26 2026 by rpki-client