Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
File: uIazyxP9IWfYnRIYXpNQbdRcmvk.mft (raw, json)
Hash identifier: 0tvzL0oB0jJkFDb1HtQ6JXNIPq+1p2CmOBWx6W+pg0c=
Subject key identifier: 85:A6:5D:30:F0:C5:23:A2:9A:42:E1:F2:52:58:29:F2:90:BC:9E:62
Authority key identifier: B8:86:B3:CB:13:FD:21:67:D8:9D:12:18:5E:93:50:6D:D4:5C:9A:F9
Certificate issuer: /CN=b886b3cb13fd2167d89d12185e93506dd45c9af9
Certificate serial: 019D9A3E24F513C58C0A75369B8FC10D669B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
Manifest number: 0DE2
Signing time: Fri 17 Apr 2026 07:00:57 +0000
Manifest this update: Fri 17 Apr 2026 07:00:57 +0000
Manifest next update: Sat 18 Apr 2026 07:00:57 +0000
Files and hashes: 1: uIazyxP9IWfYnRIYXpNQbdRcmvk.crl (hash: qSYh3//XBMvFM42/g/RN0HrHBxfHFg3Al4fYGJoDyS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:24:f5:13:c5:8c:0a:75:36:9b:8f:c1:0d:66:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b886b3cb13fd2167d89d12185e93506dd45c9af9
Validity
Not Before: Apr 17 07:00:57 2026 GMT
Not After : Apr 18 07:00:57 2026 GMT
Subject: CN=85a65d30f0c523a29a42e1f2525829f290bc9e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:98:f3:06:31:7e:2b:d7:5b:88:09:46:81:3c:
ad:7c:e7:2c:08:d5:25:7d:f4:8d:87:b3:0b:10:66:
de:ec:d9:7c:21:79:de:56:51:af:e6:ec:a6:2a:ca:
30:a7:db:88:7a:fa:cf:75:4c:4b:9f:e1:58:88:2c:
60:c1:e5:3e:96:3c:08:87:56:71:d6:7d:ac:35:c9:
95:8e:a2:5c:cb:9b:f9:d4:32:86:f0:5e:ac:c5:27:
dd:00:fe:92:30:5e:7c:3d:14:74:bf:18:72:7f:23:
75:f0:7a:93:e1:45:f6:e0:48:99:32:9f:4b:5c:b2:
31:52:ef:46:71:66:29:79:b5:bf:51:2d:0e:e2:18:
c0:e5:02:71:d4:c8:57:57:52:0a:a9:ea:b0:4a:78:
47:99:4b:72:0b:32:32:09:f4:99:c2:5d:42:3d:a3:
c7:d4:07:14:c8:55:31:0a:1b:d5:5e:af:01:b2:f8:
db:07:2e:e7:80:8c:d8:1c:7b:a9:d2:69:a9:ec:d3:
03:90:e9:c4:bd:73:c1:58:7f:07:4d:37:01:1c:96:
8f:6b:0f:19:b9:d1:8b:02:3e:2b:f1:f3:a5:02:fc:
7b:3e:fb:d3:b4:63:1e:02:51:52:f4:99:0d:fe:2c:
4c:1b:de:b5:04:8d:a4:26:1b:06:db:a7:69:2b:84:
04:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A6:5D:30:F0:C5:23:A2:9A:42:E1:F2:52:58:29:F2:90:BC:9E:62
X509v3 Authority Key Identifier:
keyid:B8:86:B3:CB:13:FD:21:67:D8:9D:12:18:5E:93:50:6D:D4:5C:9A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a7:73:71:9e:f5:f0:8a:5c:ba:20:1f:04:4a:cb:24:d0:89:
60:33:85:04:25:58:c0:83:3b:a3:46:fd:33:3d:4c:c1:72:b5:
30:24:9e:10:7c:c0:c4:8d:56:44:ca:45:cf:f1:45:7e:8c:d6:
53:0d:af:b4:42:0c:06:9a:ac:c2:d3:83:c9:90:43:bc:0a:e9:
f1:74:1d:07:63:52:c5:4b:90:30:3f:d7:7c:b1:2e:04:67:ca:
2d:47:4d:2d:75:7f:fa:1e:de:60:8c:bb:bd:5c:9a:f1:4b:af:
d9:3c:15:26:28:e1:e6:58:e3:12:ae:01:d9:97:e7:2e:a2:47:
dc:99:70:26:3a:b7:b7:e1:af:9d:4e:63:97:b2:8f:86:8c:f1:
61:0a:94:b5:05:ec:4e:47:5e:02:e3:0d:d3:8c:12:35:e1:8f:
b4:95:70:1b:c8:5a:a8:5b:54:d0:df:07:8b:98:e8:09:eb:c1:
30:7b:49:c9:ea:31:b5:7b:78:fd:e7:f8:19:77:54:8f:5c:ef:
64:29:6b:31:a7:dd:0d:d8:6e:a1:54:2e:e6:67:2c:42:e4:75:
8a:6b:ee:7a:ef:00:ac:19:6f:6f:14:dd:57:b4:ab:8e:6d:f5:
82:91:a4:14:a0:1e:1c:1a:c7:b6:d8:98:69:ed:21:83:7a:3d:
00:99:7a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:15:48 2026 by rpki-client