Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
File: urXl5gHL9dGdENTbR2qSOzs2-Cc.mft (raw, json)
Hash identifier: AVKvH4dxs2HzFv8s9YJqaUEdYw77lNxPN89W6oIwaOE=
Subject key identifier: 23:9C:14:47:DF:2F:BB:33:D4:00:45:26:72:7D:08:01:AE:F8:96:BD
Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
Certificate issuer: /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Certificate serial: 019CAC469A8FC434770AAA69C33293336E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 02:00:33 +0000
Manifest this update: Mon 02 Mar 2026 02:00:33 +0000
Manifest next update: Tue 03 Mar 2026 02:00:33 +0000
Files and hashes: 1: urXl5gHL9dGdENTbR2qSOzs2-Cc.crl (hash: nRUKWoLeGMJbf0MXHKxhtdj4sIYxw0/aMP1jDO5F4kU=)
2: xo56gz-sHNgNhs5F1QLj5VzEnGA.roa (hash: YHF2lJdgiYyyfdcc4I4hM7f5QuuqDFl1zASnR1Kz4/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:9a:8f:c4:34:77:0a:aa:69:c3:32:93:33:6e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Validity
Not Before: Mar 2 02:00:33 2026 GMT
Not After : Mar 3 02:00:33 2026 GMT
Subject: CN=239c1447df2fbb33d4004526727d0801aef896bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7f:72:7c:7e:d1:ad:a5:eb:be:27:72:b3:ab:
86:b7:0f:75:e2:8c:29:31:7b:89:ca:ed:95:01:92:
bf:60:55:7c:57:61:f4:8a:2a:de:d6:7e:03:7b:bf:
09:43:9f:88:3e:13:6c:78:f9:e8:3f:e0:fe:e6:8b:
42:39:47:be:11:0b:55:80:df:9b:05:95:0e:93:ca:
b6:a5:12:bd:01:a7:09:ce:c7:55:c1:bf:9c:5f:b6:
3c:15:01:2d:59:65:89:96:3e:cf:b1:70:89:da:11:
70:37:48:ef:5e:00:f7:86:e6:3d:c2:c7:70:e6:61:
60:74:c4:b9:6d:ce:8a:e7:7a:2b:a7:88:ca:5b:bc:
6a:93:98:28:7d:b0:1d:1d:11:57:ed:1f:02:c8:78:
66:0a:1a:40:8a:79:ba:bd:35:03:e7:1c:fe:75:f3:
0b:7d:5f:c4:e9:f0:e7:ae:8a:31:23:c4:75:6e:91:
52:17:bf:8a:38:b9:09:51:e3:1f:4a:a0:a5:23:0f:
db:3a:0f:7b:87:e9:57:64:79:e1:1f:f4:30:88:43:
e8:df:d5:62:98:79:02:f2:c3:87:88:49:75:9e:29:
0e:79:03:8b:6c:4c:60:fa:c8:28:10:5a:46:1d:c7:
e5:4d:83:86:b8:86:56:18:5f:46:92:a0:56:61:45:
63:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9C:14:47:DF:2F:BB:33:D4:00:45:26:72:7D:08:01:AE:F8:96:BD
X509v3 Authority Key Identifier:
keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:70:2d:13:34:64:f5:fe:ce:e9:c9:45:de:1a:6d:b5:1a:5f:
6c:06:43:43:c8:3a:5b:67:16:9b:c3:3c:26:68:87:ae:8a:72:
97:31:9a:41:9f:a8:1a:13:50:34:20:ba:fc:b6:f5:fc:f5:43:
e9:f9:27:53:35:97:72:b2:14:f1:89:8d:15:37:a7:9b:b4:c8:
ef:7b:ba:c9:62:24:85:ec:74:a2:41:e5:cd:b4:e0:13:71:a5:
c4:82:0f:b1:5b:67:83:5e:04:3a:71:0b:b5:76:08:c1:69:fc:
ee:b3:5b:63:d1:ee:3c:4c:b3:41:7d:fa:ed:1e:aa:e3:e3:7f:
e8:46:2e:a3:5e:7e:d1:92:d3:94:94:b6:b1:ef:5c:51:1a:f4:
df:f4:ad:0f:14:89:aa:47:47:24:77:8d:f4:10:73:60:38:48:
15:dd:99:4d:d5:f4:23:0b:61:a1:e1:df:28:26:b3:e3:40:01:
64:91:de:6c:ba:b5:77:f7:8f:1c:aa:e1:37:45:52:81:92:35:
d9:dd:b7:4e:4d:a9:f9:ce:8b:92:09:f8:44:f0:c4:1b:57:0d:
a1:5f:50:82:54:29:fc:03:c0:06:8c:d3:63:21:4b:6c:c1:18:
2c:2c:98:b4:a9:45:ea:4a:02:f8:43:45:40:4d:02:14:8d:ba:
35:5f:2d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:58:21 2026 by rpki-client