Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
File: ux1P6zEebC28c9UE_ISQzCFUY4k.mft (raw, json)
Hash identifier: 3mlLFCJHDFC1zwlKaE/VPWaDf3R3lK5WsCsBqsyDktA=
Subject key identifier: C6:45:C0:CF:5F:53:EA:2F:99:25:AA:23:EB:A6:06:D9:DF:B6:87:08
Authority key identifier: BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89
Certificate issuer: /CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389
Certificate serial: 019D97E1D41707213809B6B3854DD1A0DDC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
Manifest number: 0602
Signing time: Thu 16 Apr 2026 20:00:52 +0000
Manifest this update: Thu 16 Apr 2026 20:00:52 +0000
Manifest next update: Fri 17 Apr 2026 20:00:52 +0000
Files and hashes: 1: ux1P6zEebC28c9UE_ISQzCFUY4k.crl (hash: kLcP5v1B1vk266gbK13bf7V95AxVmWXXyqT9BFBz3Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:d4:17:07:21:38:09:b6:b3:85:4d:d1:a0:dd:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389
Validity
Not Before: Apr 16 20:00:52 2026 GMT
Not After : Apr 17 20:00:52 2026 GMT
Subject: CN=c645c0cf5f53ea2f9925aa23eba606d9dfb68708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:48:66:92:34:bc:55:fd:c3:48:22:03:d3:33:
04:be:da:62:ef:79:2b:0b:cb:f2:8f:2b:60:bd:44:
30:57:56:86:50:4a:e6:60:9f:83:98:19:3a:91:e6:
6f:4a:0d:2a:f4:4f:d8:c1:4d:6f:f0:4d:bb:fe:4b:
e1:b4:d9:3b:83:b2:d9:ab:74:e8:2e:8e:25:f1:f7:
fe:4a:80:14:15:f1:a0:90:2c:95:50:f7:91:c7:81:
6d:45:6c:6a:c4:d5:19:26:e4:4e:db:94:af:d3:b1:
a0:d0:0a:e2:cf:95:94:03:a1:be:31:95:19:8b:6c:
5b:80:8d:ee:a1:05:95:8b:04:c5:66:05:6f:a4:ef:
9a:ad:1c:cd:14:67:96:3d:62:33:e9:59:a1:1e:0a:
30:80:8e:f1:3b:8f:33:f1:f9:67:74:b5:5a:fe:fe:
d7:d4:a5:8a:9e:c7:e1:fc:7d:d8:81:04:27:06:45:
21:00:52:92:85:55:b6:4e:28:05:4a:49:cc:6e:ae:
43:c5:e0:2b:31:eb:03:7f:b3:b7:d9:08:74:37:29:
c7:53:45:aa:67:3c:e5:ef:f0:54:21:43:1c:f4:97:
48:50:4d:2a:39:a7:ea:b3:f3:91:ec:fd:21:3b:89:
0a:e0:af:15:52:bc:8f:52:0a:ad:f5:8c:90:08:d7:
32:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:45:C0:CF:5F:53:EA:2F:99:25:AA:23:EB:A6:06:D9:DF:B6:87:08
X509v3 Authority Key Identifier:
keyid:BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:5d:f6:e6:ee:29:72:3d:f6:f6:f4:37:f1:05:91:dd:76:76:
ef:73:91:28:a1:5a:9d:9a:ae:51:a2:4a:8a:0a:a3:2a:eb:af:
12:88:2a:c9:3f:86:57:7f:53:3a:1f:e4:9a:b6:b6:28:97:5f:
0e:34:72:cc:6d:31:88:a2:1c:2b:c2:1b:90:f3:7a:cb:6d:61:
5e:7a:2d:52:f7:ae:63:48:f6:85:95:d9:bb:4c:72:ca:41:fe:
85:82:38:0b:63:86:13:d3:7c:34:79:91:a6:a0:75:37:e2:5e:
42:04:a6:5c:c2:cf:b3:cd:3d:8f:2a:49:05:67:2e:c8:e9:56:
d7:32:8f:f8:df:e3:78:e3:65:6f:1c:0d:f3:9e:c8:ab:a0:f0:
78:07:b1:aa:b5:57:80:f9:29:8a:b9:2f:86:09:33:74:4c:9f:
04:73:fd:6b:2d:5b:a3:36:77:1f:6a:08:7f:d5:f4:f4:99:30:
85:0f:d7:0c:38:97:ef:03:d0:47:e4:4d:ed:f8:93:ce:69:44:
2a:f0:22:3b:a7:89:c9:f4:c1:ef:21:d5:a8:d6:45:29:28:27:
ef:62:49:0f:76:d8:9e:52:b6:ec:2b:e4:60:b7:1d:93:51:5a:
12:66:a8:8f:a8:f5:a4:a2:3b:e1:a0:21:d8:1e:50:26:e6:c0:
7e:f9:86:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:01:23 2026 by rpki-client