Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
File: uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft (raw, json)
Hash identifier: xSySDDA7KX1if42lu0IAuq8Vo0xztTnOm+F4CvLxkbk=
Subject key identifier: 4A:51:77:8E:EB:F3:0B:07:5E:F4:D0:7D:43:A5:60:B8:A5:54:0C:58
Authority key identifier: B9:1F:8D:B0:2E:2E:97:1D:54:F9:0E:EF:10:70:90:39:8F:CC:3D:92
Certificate issuer: /CN=b91f8db02e2e971d54f90eef107090398fcc3d92
Certificate serial: 019CAD5942A22383F47DEAD457DCB18D9C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
Manifest number: 0A89
Signing time: Mon 02 Mar 2026 07:00:33 +0000
Manifest this update: Mon 02 Mar 2026 07:00:33 +0000
Manifest next update: Tue 03 Mar 2026 07:00:33 +0000
Files and hashes: 1: uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl (hash: TeiCmcbjzm0PsrPoiwkj9jYpxiEFpRQ+YQfwIW56zE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:42:a2:23:83:f4:7d:ea:d4:57:dc:b1:8d:9c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91f8db02e2e971d54f90eef107090398fcc3d92
Validity
Not Before: Mar 2 07:00:33 2026 GMT
Not After : Mar 3 07:00:33 2026 GMT
Subject: CN=4a51778eebf30b075ef4d07d43a560b8a5540c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b1:8e:ca:e8:37:d6:2a:cf:ae:3f:73:c2:82:
4a:4a:de:b9:d5:01:74:08:92:fe:c7:6d:28:5e:71:
9c:d5:a4:68:de:64:9a:25:94:98:6f:81:ef:bc:7d:
42:0d:fe:a0:78:74:0c:4b:5a:06:e2:2f:7b:95:4c:
3a:66:86:69:80:17:00:96:ce:d5:2b:b3:c1:61:73:
1c:71:60:5b:0c:b6:e0:6d:81:3c:fe:a0:cf:32:57:
97:59:89:e2:16:1d:a2:1a:f6:f5:ec:68:46:69:f4:
3d:45:27:c9:98:35:73:01:b1:62:48:83:7e:14:89:
fa:05:9e:c7:a6:36:25:db:02:97:2a:42:34:e9:bf:
b8:af:c0:74:f5:9d:a5:55:d2:4c:d7:11:c3:80:44:
e0:04:03:84:85:c6:00:9b:a2:f9:65:b3:20:9a:38:
fb:f3:8f:1b:c0:ba:58:94:57:da:d6:c4:8a:d4:92:
e1:22:00:50:86:74:d5:b4:ee:ba:7c:c0:da:fb:49:
39:24:6b:0c:97:df:a6:3f:b0:b0:35:54:7c:29:09:
8b:cb:8b:46:9a:c5:86:63:7e:3c:13:53:97:33:14:
23:f3:72:30:5b:f9:b0:06:21:99:d0:b2:ed:b5:5a:
7c:82:2a:b3:b1:2f:9f:34:bf:1e:1e:fe:ec:87:63:
07:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:51:77:8E:EB:F3:0B:07:5E:F4:D0:7D:43:A5:60:B8:A5:54:0C:58
X509v3 Authority Key Identifier:
keyid:B9:1F:8D:B0:2E:2E:97:1D:54:F9:0E:EF:10:70:90:39:8F:CC:3D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:42:0e:84:47:2b:33:c6:02:a2:a5:b4:97:5b:7c:72:bf:28:
6d:83:74:eb:55:d5:18:6e:20:f3:96:30:6c:50:c8:04:f2:75:
4c:1f:41:de:cc:63:58:2e:22:9c:59:c0:e1:4f:7e:fc:0d:10:
6d:74:08:36:bc:7a:f9:f4:77:16:52:bb:49:7a:a2:78:1b:57:
f8:21:11:ad:32:f9:19:79:32:78:28:53:72:8d:6b:c1:e8:6b:
52:49:19:5c:1d:55:d7:77:a8:a7:25:ce:97:c0:96:93:ac:88:
4f:03:24:17:ca:5b:66:01:81:b6:58:0d:60:8d:e0:6e:c7:59:
08:10:7c:f7:dc:8e:af:ad:4d:34:93:48:e4:8a:29:14:d3:3c:
53:3d:d4:e0:4f:24:d9:7d:0f:ae:4c:e6:76:bf:62:67:fe:97:
2f:4d:aa:b5:b2:fd:10:24:90:71:bc:01:86:1c:20:2b:6a:a2:
d5:09:d2:66:23:1f:60:4e:a8:18:89:8a:57:f8:7d:ea:58:10:
c7:2d:6e:c6:f3:ed:25:fd:0f:74:dc:ac:ab:c9:4a:19:e1:fc:
f2:cf:a7:03:4b:0c:02:e2:21:79:a1:15:70:31:54:19:51:c9:
b9:2f:ae:31:05:1e:f5:00:77:1a:20:25:c0:b7:c6:36:fa:28:
9a:19:6d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:30:03 2026 by rpki-client