Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.mft
File: ucN059N57ajbliAKTu_lvBwok58.mft (raw, json)
Hash identifier: L7zb6T9tVdsFEuEKCSKHemhfA0u4W1X7CxM2uwMXOpI=
Subject key identifier: 1A:02:E5:BD:2A:96:20:09:C6:80:E4:A2:07:24:78:BE:54:9C:2A:72
Authority key identifier: B9:C3:74:E7:D3:79:ED:A8:DB:96:20:0A:4E:EF:E5:BC:1C:28:93:9F
Certificate issuer: /CN=b9c374e7d379eda8db96200a4eefe5bc1c28939f
Certificate serial: 019D9AE3B0872B237BE581BED3C9FCB1F205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucN059N57ajbliAKTu_lvBwok58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.mft
Manifest number: 0F79
Signing time: Fri 17 Apr 2026 10:01:46 +0000
Manifest this update: Fri 17 Apr 2026 10:01:46 +0000
Manifest next update: Sat 18 Apr 2026 10:01:46 +0000
Files and hashes: 1: ucN059N57ajbliAKTu_lvBwok58.crl (hash: tqegqW1oFiwBHyDlGtmnyAVD8Mhwjlrk/x7eKy7oO/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucN059N57ajbliAKTu_lvBwok58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:b0:87:2b:23:7b:e5:81:be:d3:c9:fc:b1:f2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c374e7d379eda8db96200a4eefe5bc1c28939f
Validity
Not Before: Apr 17 10:01:46 2026 GMT
Not After : Apr 18 10:01:46 2026 GMT
Subject: CN=1a02e5bd2a962009c680e4a2072478be549c2a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9a:35:4a:38:1d:fb:18:ee:5d:68:23:93:dc:
59:cb:cc:76:88:5c:aa:89:5c:1d:e5:dd:29:95:92:
6e:39:60:15:67:fe:90:b1:c6:d7:b9:78:8b:52:69:
e6:f3:98:a7:31:a9:18:6b:56:4f:5e:20:cb:0c:dd:
89:dc:37:77:3f:58:27:8e:13:cf:3b:b2:28:6e:59:
47:06:0b:8d:3f:d9:d5:68:89:67:c2:65:81:8a:b0:
e4:02:14:75:45:70:70:39:7b:70:b9:2c:20:87:5c:
4b:fd:6f:50:3d:9a:0a:ad:58:c9:34:ad:f5:3f:00:
4c:b2:a3:d1:fb:51:07:0f:2d:25:59:a8:e5:5f:4f:
fe:5f:f7:72:b0:c5:bc:d7:c0:1d:26:3b:9d:23:05:
4d:78:16:90:30:e8:85:9e:77:f2:65:71:0f:50:bb:
00:01:42:0a:bd:bb:cd:f3:2e:e0:69:80:5b:5e:bb:
a8:f2:78:07:b8:15:b9:20:57:5e:7e:90:5a:5b:f7:
21:a7:7e:6b:da:1a:ed:ad:70:e3:0b:4a:e7:41:31:
93:ab:87:2a:8e:77:9d:3d:49:56:db:19:3a:90:49:
1b:5b:5c:c7:fb:66:fe:a5:37:61:4a:50:09:aa:aa:
ce:1b:ea:ad:0a:cd:84:3b:20:0e:7b:23:b4:a9:52:
f0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:02:E5:BD:2A:96:20:09:C6:80:E4:A2:07:24:78:BE:54:9C:2A:72
X509v3 Authority Key Identifier:
keyid:B9:C3:74:E7:D3:79:ED:A8:DB:96:20:0A:4E:EF:E5:BC:1C:28:93:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucN059N57ajbliAKTu_lvBwok58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:47:83:ad:fa:10:77:e1:c1:0b:96:27:ae:98:14:d2:8c:cd:
4d:29:23:f8:28:45:6a:62:c7:a6:df:f8:ff:ff:00:79:c4:28:
24:ee:97:b4:4b:ea:cb:0a:c4:0a:43:2c:67:04:9f:54:46:2f:
aa:97:4e:75:47:a1:3f:f1:9c:7c:96:ef:66:0e:1e:68:1a:36:
72:76:75:d0:cc:a2:e6:3a:9c:3d:4a:6a:88:56:2c:2b:26:fa:
09:dd:08:2e:8e:8f:72:69:ec:ab:84:51:8e:13:ed:c0:6a:2f:
5f:10:3d:a6:e7:aa:14:30:f1:ac:a1:a8:49:a1:2e:47:27:65:
42:dc:c3:47:c8:a1:a7:21:63:60:e4:c1:5c:d6:37:f2:2e:c2:
91:3b:a2:0f:09:fe:d5:87:96:fd:7c:e1:55:04:1c:90:40:7c:
cf:ed:bb:34:aa:42:76:af:6e:85:dd:94:a8:84:22:ee:25:5f:
27:4b:cf:79:60:35:9e:10:21:b5:28:73:21:7a:d8:33:69:ac:
f7:7d:c3:c4:06:4f:74:e5:4c:76:8a:87:7b:a7:2f:f7:42:9a:
14:8b:6b:f2:0a:55:4f:5d:4b:13:41:32:e6:fc:5b:df:2b:d0:
9b:27:37:d4:2b:21:1f:97:04:d9:57:3b:a6:b2:07:56:23:4f:
d7:43:60:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:01:33 2026 by rpki-client