Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
File: u7kUAX20Xp91443ePwNXzitx2Cc.mft (raw, json)
Hash identifier: ExtXG+LIzE0ULCqWKu2mRScHwjZBjtsPC87HNtF5rIs=
Subject key identifier: 93:E6:B8:E4:8E:4B:A3:70:46:53:31:FC:E6:0C:DA:AC:34:FE:31:65
Authority key identifier: BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27
Certificate issuer: /CN=bbb914017db45e9f75e38dde3f0357ce2b71d827
Certificate serial: 019CAB6AF065FD48A3753180A2017C8DF8D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
Manifest number: 08F0
Signing time: Sun 01 Mar 2026 22:00:38 +0000
Manifest this update: Sun 01 Mar 2026 22:00:38 +0000
Manifest next update: Mon 02 Mar 2026 22:00:38 +0000
Files and hashes: 1: u7kUAX20Xp91443ePwNXzitx2Cc.crl (hash: XLl4Lt+PITXN69g4wcTCXFmy+dxoJhvgWF9uw/JoPjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:f0:65:fd:48:a3:75:31:80:a2:01:7c:8d:f8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbb914017db45e9f75e38dde3f0357ce2b71d827
Validity
Not Before: Mar 1 22:00:38 2026 GMT
Not After : Mar 2 22:00:38 2026 GMT
Subject: CN=93e6b8e48e4ba370465331fce60cdaac34fe3165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f7:b7:86:c6:2b:3d:00:a0:b5:33:23:da:90:
bb:69:eb:a9:91:32:86:04:05:1c:89:7e:d1:4d:a6:
c6:3c:52:d0:ea:88:58:1a:06:e3:71:95:bc:b0:31:
83:98:e8:3c:91:af:b3:fa:c6:ad:d4:45:26:63:2e:
bc:4d:dd:53:d3:47:8d:0a:c8:bd:bc:ca:3b:4f:52:
58:ea:63:27:5f:42:7b:10:c6:2b:79:64:7c:26:66:
c7:d5:a9:ec:02:07:a1:55:53:ba:65:8f:8e:97:7b:
6c:9e:02:c3:72:c3:1f:d9:99:4d:e8:38:2b:92:04:
fc:41:84:96:0d:40:b4:48:ba:62:d0:74:4a:b3:73:
5e:80:42:14:8a:1a:a3:3f:9e:60:20:ef:f7:d8:32:
57:33:2d:b8:68:4c:76:a3:dd:15:c2:33:65:95:06:
cb:f8:f4:76:b4:03:8e:27:48:7b:38:18:20:e0:29:
c2:7c:bf:3b:61:cd:48:49:a6:a1:d1:06:f7:d8:4e:
34:db:32:8d:6e:85:39:e8:6f:62:a4:4c:a2:59:fb:
c4:a0:5b:88:55:f9:42:3d:56:5e:a8:db:a5:01:d7:
03:37:b6:b4:a3:6b:0a:68:e6:29:ad:5b:1e:0b:d8:
d9:a5:a2:3e:0d:ba:0e:5c:2c:85:ef:20:43:fb:6c:
90:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E6:B8:E4:8E:4B:A3:70:46:53:31:FC:E6:0C:DA:AC:34:FE:31:65
X509v3 Authority Key Identifier:
keyid:BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:62:06:50:9e:e3:2a:1f:b0:2c:47:cb:46:b4:cb:be:47:74:
3d:08:d8:95:8e:59:e8:1b:1d:3c:1c:b5:ad:70:94:8f:69:90:
a3:55:ce:50:d4:ce:44:07:70:67:6e:62:3c:a2:39:f1:4c:32:
51:17:46:57:ee:3d:c9:67:4b:a5:ec:02:c5:41:4b:12:f5:4c:
3d:b4:c6:67:79:c4:88:04:9f:47:46:23:8e:5d:8c:c8:fc:c5:
16:83:56:19:57:a0:e1:d1:06:c6:13:9e:43:45:99:b1:83:58:
3a:e5:53:f8:c4:df:e2:a8:3e:04:9f:43:df:9d:cd:e5:57:4e:
3f:d4:3f:da:a7:42:f6:3f:06:a6:92:72:57:1f:f8:82:5b:e2:
95:9c:a2:11:09:a6:c9:ce:6e:9e:cc:dc:48:8a:e4:b6:ec:36:
6e:c5:ed:bf:cd:e0:a5:9d:d4:d1:b6:eb:60:66:50:b7:11:2b:
ab:ea:8e:2a:7e:ec:d6:fb:f8:4a:ed:39:4c:0d:f1:f0:f0:83:
3c:70:0f:96:6b:eb:2e:3b:b7:4c:55:8c:30:6c:f8:3a:e2:fe:
54:51:1c:18:bc:92:7d:9b:a6:c8:a4:bc:7d:4b:cd:4d:25:07:
1f:35:ed:ce:56:46:b9:02:10:5b:5d:69:f7:a9:4e:f8:56:be:
c5:66:27:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:11 2026 by rpki-client