Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
File: g-ULKlHI9a25N7IqkMcg9rBPKXM.mft (raw, json)
Hash identifier: 97AsjtBP8DwuuCAkpmckHXQwslUjQcgVBO8UzaBYC9E=
Subject key identifier: 87:15:A7:62:71:1D:89:6D:EA:8F:2C:C3:BB:70:20:8B:99:BD:2E:89
Authority key identifier: 83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73
Certificate issuer: /CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973
Certificate serial: 019CAFB5814E8F3EEFB1A5E6D0480269ED37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
Manifest number: 165B
Signing time: Mon 02 Mar 2026 18:00:33 +0000
Manifest this update: Mon 02 Mar 2026 18:00:33 +0000
Manifest next update: Tue 03 Mar 2026 18:00:33 +0000
Files and hashes: 1: g-ULKlHI9a25N7IqkMcg9rBPKXM.crl (hash: jkgHk9Ck/+V64ex2wUlRSG1nNdqtQf2NzdmPwbjWZik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b5:81:4e:8f:3e:ef:b1:a5:e6:d0:48:02:69:ed:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973
Validity
Not Before: Mar 2 18:00:33 2026 GMT
Not After : Mar 3 18:00:33 2026 GMT
Subject: CN=8715a762711d896dea8f2cc3bb70208b99bd2e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d9:f5:88:81:06:48:e6:59:58:47:1a:57:f8:
9b:e9:56:95:48:05:67:64:b4:97:70:ac:6a:77:66:
ae:7f:a1:08:69:66:17:dd:3a:3f:99:87:19:ce:d4:
3a:23:bc:4b:5f:38:66:05:c9:48:ae:d0:82:a6:2a:
4b:79:33:5c:ce:c6:be:b2:18:6f:8c:e0:2a:f7:11:
bd:da:95:22:e6:bd:46:3e:cd:46:ad:6b:d3:a0:d1:
67:4a:b6:4a:58:06:c6:ef:78:b8:20:f7:2d:41:5b:
a7:41:a5:0a:6e:82:8d:b8:53:7b:59:f5:f4:b5:ad:
84:e6:42:76:0c:76:38:a4:d0:41:b2:10:f4:ed:ad:
10:3a:41:a7:2e:dd:08:db:65:c6:ab:3b:9d:8d:f1:
1a:e2:74:0f:d9:25:3f:62:2d:7f:c4:c5:41:82:16:
e1:fa:17:af:69:6d:5a:68:03:31:8e:c7:13:3a:a2:
e9:db:0f:78:71:4a:39:d0:66:76:1b:f5:e7:4a:3b:
b7:0b:e9:d7:a2:17:84:2a:12:44:58:46:2c:77:63:
1c:0f:98:42:e5:87:f7:10:8c:23:9d:68:6b:06:14:
09:20:cc:39:6f:89:e0:45:c4:7b:2a:76:b2:05:24:
29:4e:cb:c4:a2:fa:5c:2c:dc:3a:6d:6d:60:b1:ab:
05:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:15:A7:62:71:1D:89:6D:EA:8F:2C:C3:BB:70:20:8B:99:BD:2E:89
X509v3 Authority Key Identifier:
keyid:83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:89:ff:13:a3:d4:2b:c0:4a:c5:06:a0:b2:09:99:f4:2a:6e:
c6:3f:5c:23:28:99:2e:09:e7:f2:f9:ef:20:98:54:61:25:d2:
44:26:28:b2:78:61:e2:f5:b7:8e:fe:fe:db:d3:79:bc:bb:9d:
48:20:ab:c5:91:39:67:8b:7c:5e:5f:04:c2:ec:c5:14:18:80:
ec:10:28:ad:bf:8e:8d:b3:99:96:70:cd:cd:52:54:e0:92:66:
7b:5a:ff:40:7b:46:1e:a2:b3:25:87:52:5d:b6:98:a8:30:77:
ed:31:46:39:7d:e4:bc:3d:bd:2b:3a:64:87:56:5e:47:a6:7a:
83:8d:4d:08:d1:18:ca:36:43:26:41:83:b8:41:83:6b:4d:08:
2d:be:6a:46:c7:a1:76:99:4f:8a:46:66:e0:00:17:4c:eb:95:
19:8d:d5:28:af:a4:f5:79:68:09:44:99:42:0b:f7:72:80:c6:
b6:5d:6e:96:0a:51:8d:d8:ca:d2:18:33:ad:d8:03:24:69:88:
42:9d:05:3a:be:3b:5d:4e:01:ad:1d:01:7f:0a:17:5b:a8:b5:
f8:da:8a:5d:bf:03:c2:93:94:0b:df:26:22:e1:06:66:40:c0:
e4:eb:9f:15:20:ec:13:9b:15:14:58:44:5d:d2:25:8c:c4:dc:
05:a8:93:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:55:55 2026 by rpki-client