Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
File: uIazyxP9IWfYnRIYXpNQbdRcmvk.mft (raw, json)
Hash identifier: ADu0YkQeU7V+P8t6WiwMQjrJ6zwE3eHzn7NjeQa1FlQ=
Subject key identifier: 23:F5:EA:DA:5E:C7:06:9E:33:81:68:05:51:0A:8D:13:AC:11:2B:78
Authority key identifier: B8:86:B3:CB:13:FD:21:67:D8:9D:12:18:5E:93:50:6D:D4:5C:9A:F9
Certificate issuer: /CN=b886b3cb13fd2167d89d12185e93506dd45c9af9
Certificate serial: 019CAAC6656EEE23268D4B36659DEA97EDB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
Manifest number: 0D66
Signing time: Sun 01 Mar 2026 19:00:54 +0000
Manifest this update: Sun 01 Mar 2026 19:00:54 +0000
Manifest next update: Mon 02 Mar 2026 19:00:54 +0000
Files and hashes: 1: uIazyxP9IWfYnRIYXpNQbdRcmvk.crl (hash: Frn2FTo+NXE+ysfLT3n0Y8gciqxCPcfZdnH/LKdEYdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:65:6e:ee:23:26:8d:4b:36:65:9d:ea:97:ed:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b886b3cb13fd2167d89d12185e93506dd45c9af9
Validity
Not Before: Mar 1 19:00:54 2026 GMT
Not After : Mar 2 19:00:54 2026 GMT
Subject: CN=23f5eada5ec7069e33816805510a8d13ac112b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:1d:ab:ba:c2:e9:1f:29:2e:cc:ea:e3:60:
d4:78:d5:b2:c4:5f:5b:a0:19:4e:ff:d3:bd:f7:03:
1f:72:01:72:07:40:d9:90:c8:68:47:c7:e2:83:bc:
78:0e:07:77:9f:c8:66:a8:8e:15:1a:e4:9f:db:25:
3a:4c:b3:15:8a:6c:74:2f:5a:de:3c:a7:36:6e:f9:
db:34:ad:d6:24:4c:37:45:9b:10:4d:8f:a0:de:b1:
16:07:da:78:4f:7e:24:6c:00:d2:ac:40:bb:17:63:
11:fc:db:ed:e6:ff:74:94:2e:5f:2b:0d:19:77:35:
e7:dd:95:bf:94:2f:36:6c:12:4d:b9:5f:99:e2:6e:
7e:2e:15:7f:1e:4a:2b:b7:ab:bd:25:2a:0d:02:96:
e0:d4:9c:c0:a1:ab:79:19:c3:aa:8a:5e:3e:9e:bc:
02:fd:00:64:8d:50:d1:b5:6b:4a:6c:8f:c9:1b:7f:
22:8e:d3:06:28:b3:41:69:82:a2:3e:a4:b3:ba:6a:
6b:58:3a:39:61:e2:54:1a:03:f4:0f:4e:83:e2:62:
7e:9e:58:01:60:b5:17:e8:ba:0b:92:4a:86:e4:15:
d2:b7:0c:f1:73:79:49:5c:65:c6:3f:38:2a:ca:08:
d9:00:79:ee:0d:6c:cb:cb:20:37:6d:9e:cf:86:1b:
ad:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F5:EA:DA:5E:C7:06:9E:33:81:68:05:51:0A:8D:13:AC:11:2B:78
X509v3 Authority Key Identifier:
keyid:B8:86:B3:CB:13:FD:21:67:D8:9D:12:18:5E:93:50:6D:D4:5C:9A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:86:1c:b7:7e:88:9a:0c:79:2e:06:ae:a9:62:17:5c:74:46:
ce:3d:28:00:0f:c5:7c:dc:dd:c6:63:1e:4a:c6:11:e4:f9:15:
76:5b:35:10:35:c8:63:ad:21:c2:ec:f1:91:0d:3d:48:29:47:
43:f7:a4:00:02:b3:c6:36:0b:53:c4:a4:fc:25:39:7c:88:08:
a1:60:5a:74:17:ca:b3:4f:84:7f:75:82:57:02:f7:fe:bd:15:
c5:ce:10:34:36:51:7f:cf:fa:9c:21:4e:b6:bb:fa:f9:ac:1a:
ad:25:54:e3:8a:36:d8:86:51:ab:fd:a7:a5:be:e8:08:45:b5:
40:db:1f:b2:4b:96:88:4c:e0:02:f4:4a:16:15:2b:81:27:cb:
ae:80:c6:8c:00:ad:90:5f:49:a8:0e:6d:d3:3f:c2:f1:c4:41:
6b:e5:dc:b0:db:9c:27:43:20:83:70:c7:d3:f1:95:19:13:70:
2b:b8:9e:e0:93:63:ff:13:25:c1:a2:20:77:bf:5a:30:51:a9:
0e:be:0f:84:36:bd:e6:8d:84:69:09:bf:e9:8c:03:30:8a:cb:
5f:76:25:f8:e1:89:fd:39:26:40:b7:c6:ab:e6:da:ba:9e:b9:
8e:e4:0f:68:9a:34:a6:0a:29:54:7c:b0:62:22:db:72:1f:2a:
2f:7a:80:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:43 2026 by rpki-client