Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
File: uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft (raw, json)
Hash identifier: P65CK6nXWU0SFsH45Sd8RL0xdTrWz1x3rtj2HzFlxSU=
Subject key identifier: 66:33:DD:C3:B9:A5:DF:7E:B3:82:4E:07:8B:A8:A8:75:A1:A1:68:EA
Authority key identifier: BA:AF:6C:08:BC:A3:08:C1:C7:8B:0E:ED:8E:F3:0B:4A:04:68:11:8E
Certificate issuer: /CN=baaf6c08bca308c1c78b0eed8ef30b4a0468118e
Certificate serial: 019CAE6C34B6B6B66C31C2823945442D5765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uq9sCLyjCMHHiw7tjvMLSgRoEY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
Manifest number: 07C9
Signing time: Mon 02 Mar 2026 12:00:52 +0000
Manifest this update: Mon 02 Mar 2026 12:00:52 +0000
Manifest next update: Tue 03 Mar 2026 12:00:52 +0000
Files and hashes: 1: uq9sCLyjCMHHiw7tjvMLSgRoEY4.crl (hash: JuEw1HPIFMwcVstihbJy6hmFBEIMX2VXcn6lNM7Kw+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uq9sCLyjCMHHiw7tjvMLSgRoEY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:34:b6:b6:b6:6c:31:c2:82:39:45:44:2d:57:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaf6c08bca308c1c78b0eed8ef30b4a0468118e
Validity
Not Before: Mar 2 12:00:52 2026 GMT
Not After : Mar 3 12:00:52 2026 GMT
Subject: CN=6633ddc3b9a5df7eb3824e078ba8a875a1a168ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a6:33:b2:a6:ef:da:fd:9c:d6:e9:1f:14:ed:
51:b8:fa:d9:e8:c9:12:d1:6d:1d:2f:5e:57:f8:2d:
0b:85:81:c1:0f:3b:84:57:c6:e3:12:28:b1:0b:11:
33:21:77:b9:75:bb:5c:49:4c:0d:c9:14:eb:aa:31:
ba:c6:51:58:c4:e2:ea:e4:bb:7f:3f:34:c1:fb:8a:
20:7d:a2:50:62:b9:99:c6:2b:eb:05:51:af:27:88:
58:b8:c8:a0:2b:82:b5:7c:29:1c:1e:d6:f7:e3:8e:
d9:d1:70:59:87:d2:7d:cd:bd:5c:04:eb:8d:03:05:
b9:30:5e:b0:e2:35:d2:7b:ad:e0:2f:35:94:93:4a:
be:6a:a3:24:3f:5a:ef:3a:13:26:71:1e:41:93:97:
d7:14:76:21:a1:f1:ca:3b:f3:6b:71:11:ae:25:e5:
01:77:ae:06:39:94:d9:9f:dc:5c:38:f3:05:5b:28:
21:1a:1f:ce:6a:54:28:18:0e:84:68:f3:f6:4f:fe:
58:b9:3a:da:69:10:4f:36:3e:f0:10:53:94:94:d8:
1b:18:a1:91:57:a8:f8:e8:10:34:e5:a4:57:24:63:
8f:a3:91:d4:ae:c0:58:96:80:87:e0:43:69:32:a1:
12:b3:30:2f:58:95:ef:c9:6d:7b:68:32:eb:53:7a:
7a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:33:DD:C3:B9:A5:DF:7E:B3:82:4E:07:8B:A8:A8:75:A1:A1:68:EA
X509v3 Authority Key Identifier:
keyid:BA:AF:6C:08:BC:A3:08:C1:C7:8B:0E:ED:8E:F3:0B:4A:04:68:11:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uq9sCLyjCMHHiw7tjvMLSgRoEY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2e:ca:fc:7b:72:97:b9:dd:97:f7:44:b6:53:f3:73:e9:59:
ec:8c:19:66:54:ee:6b:1f:de:c2:07:be:38:f0:a2:4c:53:f7:
76:87:9e:50:31:c1:7f:5f:12:27:19:1e:8c:b1:ca:66:b1:00:
4a:27:42:66:f7:3f:41:6b:80:59:8e:53:58:67:c0:0e:a9:03:
32:b8:0a:35:77:5c:9d:e1:87:e7:f0:df:8b:ed:3c:78:a6:1a:
95:ee:0c:8f:6b:86:88:06:07:30:c1:7f:25:e3:b2:ad:49:28:
a1:7a:b8:ba:ac:41:33:bd:c7:b5:82:eb:ac:81:87:68:c1:7d:
50:e3:ec:90:78:57:51:5e:5d:32:c5:ce:8d:87:6d:04:35:ed:
f2:75:55:d6:6c:18:41:3b:d1:35:ee:db:82:a8:3b:ad:ed:8e:
a2:41:d2:dd:64:11:a7:28:f3:3b:15:7a:7d:f4:bc:3c:73:a8:
f4:81:21:be:83:4f:a1:cc:e0:f2:5e:5c:2b:00:bb:0e:8f:31:
f3:90:03:3a:7e:34:c9:89:99:2f:9f:21:09:7b:1d:e5:e1:3d:
63:63:77:ad:2c:1a:8f:25:7e:e1:dd:d8:6b:77:41:99:72:f5:
a6:18:0e:18:a7:49:e2:f3:e4:5a:4f:43:ed:ac:0c:33:ca:82:
45:58:02:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:27:03 2026 by rpki-client