Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
File: ux1P6zEebC28c9UE_ISQzCFUY4k.mft (raw, json)
Hash identifier: FuRmTT43elIXx79KH98L4b5qpckczdO1AVqbKsVHYPY=
Subject key identifier: 63:14:96:94:DA:7C:45:0C:FB:AE:A1:00:5B:EC:6D:CB:2C:07:A6:F5
Authority key identifier: BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89
Certificate issuer: /CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389
Certificate serial: 019CAC46E8F2905A21054248F2C2DC847A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
Manifest number: 0588
Signing time: Mon 02 Mar 2026 02:00:54 +0000
Manifest this update: Mon 02 Mar 2026 02:00:54 +0000
Manifest next update: Tue 03 Mar 2026 02:00:54 +0000
Files and hashes: 1: ux1P6zEebC28c9UE_ISQzCFUY4k.crl (hash: mmsv6N2tWQISCtx8zaB9DbktxfOV5JPB5g9V0YcCLBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:e8:f2:90:5a:21:05:42:48:f2:c2:dc:84:7a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389
Validity
Not Before: Mar 2 02:00:54 2026 GMT
Not After : Mar 3 02:00:54 2026 GMT
Subject: CN=63149694da7c450cfbaea1005bec6dcb2c07a6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6e:3f:24:47:1a:b0:1a:0e:88:0b:e2:08:2b:
9f:d0:97:d7:df:1d:71:41:c5:7e:12:8e:11:99:85:
8a:e9:58:97:95:11:41:67:13:07:4d:ca:8c:05:3a:
89:a0:e2:9f:3c:31:44:9e:a0:52:c7:26:ef:64:30:
5f:c5:91:51:7c:3f:02:26:d9:58:8f:2d:e2:56:43:
24:cc:05:65:7d:e3:c0:a1:12:bd:ca:61:8f:5a:d7:
92:00:73:f7:6f:ae:a9:0f:0e:55:fb:aa:93:16:c4:
e1:a2:ee:3e:58:f2:39:8f:70:b6:a6:e2:5f:5d:f6:
54:a9:7e:b2:f4:a0:0e:79:49:80:20:5e:76:3a:ad:
71:51:d9:37:c9:36:c4:20:f2:7e:fd:d7:99:00:79:
44:84:49:6d:4c:12:81:b4:5e:b5:27:2b:a0:80:6b:
b8:d1:34:52:4e:6b:85:8f:1c:c3:1e:5f:10:8b:7b:
c1:0c:7f:ee:02:ec:18:d3:56:10:e7:5f:1a:ca:9c:
7d:bc:d4:83:af:6a:e2:8d:ed:c6:0d:3a:76:6d:13:
c8:be:1f:33:50:5f:c2:b7:09:a8:5b:b4:68:f5:1a:
d7:b3:0a:3e:f5:2f:7f:fa:81:97:03:4a:4c:ec:18:
26:85:df:40:58:9d:09:83:eb:23:78:ab:77:46:20:
80:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:14:96:94:DA:7C:45:0C:FB:AE:A1:00:5B:EC:6D:CB:2C:07:A6:F5
X509v3 Authority Key Identifier:
keyid:BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:dc:37:17:5b:6e:c7:12:b9:c0:57:47:cc:d6:ca:fa:25:54:
fb:c3:9e:01:9d:af:b1:b0:73:f7:c7:a4:ff:9e:fe:c6:b1:5b:
d8:44:d8:85:f9:28:40:d3:14:6b:94:bf:c4:c0:76:3c:7d:7d:
2c:9a:72:5e:75:97:8b:9c:e9:0c:df:a7:3f:19:48:0f:f3:13:
4a:82:bd:48:4e:b3:58:ce:e8:3f:bf:a2:87:8e:99:74:be:55:
b8:93:0f:91:d2:b5:78:8c:8f:df:f0:15:cc:f2:6f:e4:d2:de:
fb:4d:00:f0:07:34:9e:bd:94:ff:66:91:0e:00:ea:a7:55:be:
cc:e9:fb:f3:55:f9:c7:12:5f:f3:21:29:72:3a:4b:73:77:99:
76:62:92:cc:1a:1e:b7:af:82:bb:34:65:6f:d0:73:f9:b9:6d:
4b:d7:85:68:de:40:98:8f:c4:05:a5:2d:ed:fd:3f:cf:bf:29:
cb:74:41:9f:48:cc:e0:cb:e3:d4:70:bf:56:67:f1:2e:89:e7:
9f:7d:53:27:6e:1f:75:9f:71:c9:4a:7e:01:b0:04:72:15:c2:
f6:6d:c3:bc:69:69:9a:6d:86:0e:78:a0:4a:04:d1:5b:54:88:
16:f7:f6:de:b1:b0:6a:8e:56:de:0a:0b:1d:6f:b4:d6:7e:65:
99:c2:74:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRujykFohBUJI8sLchHpyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMWQ0ZmViMzExZTZjMmRiYzczZDUwNGZjODQ5MGNjMjE1
NDYzODkwHhcNMjYwMzAyMDIwMDU0WhcNMjYwMzAzMDIwMDU0WjAzMTEwLwYDVQQD
Eyg2MzE0OTY5NGRhN2M0NTBjZmJhZWExMDA1YmVjNmRjYjJjMDdhNmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA524/JEcasBoOiAviCCuf0JfX3x1x
QcV+Eo4RmYWK6ViXlRFBZxMHTcqMBTqJoOKfPDFEnqBSxybvZDBfxZFRfD8CJtlY
jy3iVkMkzAVlfePAoRK9ymGPWteSAHP3b66pDw5V+6qTFsThou4+WPI5j3C2puJf
XfZUqX6y9KAOeUmAIF52Oq1xUdk3yTbEIPJ+/deZAHlEhEltTBKBtF61JyuggGu4
0TRSTmuFjxzDHl8Qi3vBDH/uAuwY01YQ518aypx9vNSDr2rije3GDTp2bRPIvh8z
UF/CtwmoW7Ro9RrXswo+9S9/+oGXA0pM7Bgmhd9AWJ0Jg+sjeKt3RiCAXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMUlpTafEUM+66hAFvsbcssB6b1MB8GA1UdIwQY
MBaAFLsdT+sxHmwtvHPVBPyEkMwhVGOJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXgxUDZ6RWViQzI4YzlVRV9JU1F6Q0ZVWTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zZTJmMTMtNTI1MC00OWYyLWE0NzIt
NzcxYWI5ZmFkZjdmLzEvdXgxUDZ6RWViQzI4YzlVRV9JU1F6Q0ZVWTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zZTJmMTMtNTI1MC00OWYyLWE0NzItNzcxYWI5ZmFkZjdm
LzEvdXgxUDZ6RWViQzI4YzlVRV9JU1F6Q0ZVWTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNw3F1tu
xxK5wFdHzNbK+iVU+8OeAZ2vsbBz98ek/57+xrFb2ETYhfkoQNMUa5S/xMB2PH19
LJpyXnWXi5zpDN+nPxlID/MTSoK9SE6zWM7oP7+ih46ZdL5VuJMPkdK1eIyP3/AV
zPJv5NLe+00A8Ac0nr2U/2aRDgDqp1W+zOn781X5xxJf8yEpcjpLc3eZdmKSzBoe
t6+CuzRlb9Bz+bltS9eFaN5AmI/EBaUt7f0/z78py3RBn0jM4Mvj1HC/VmfxLonn
n31TJ24fdZ9xyUp+AbAEchXC9m3DvGlpmm2GDnigSgTRW1SIFvf23rGwao5W3goL
HW+01n5lmcJ0Sw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:57 2026 by rpki-client