Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
File: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft (raw, json)
Hash identifier: LpOoFWJLw+6lioq0IBuEqLQoj4TIhL3dzwuSnI9+9jk=
Subject key identifier: 64:48:72:BF:03:D7:D5:0F:A1:B4:B0:FC:62:DA:C0:06:B3:DE:78:5D
Authority key identifier: 53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9
Certificate issuer: /CN=531edb2554d25d1c10d8714e81d36cc295d96bf9
Certificate serial: 019CAB6B527390CA60F8B96E6D666DB2F03C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
Manifest number: 0D52
Signing time: Sun 01 Mar 2026 22:01:03 +0000
Manifest this update: Sun 01 Mar 2026 22:01:03 +0000
Manifest next update: Mon 02 Mar 2026 22:01:03 +0000
Files and hashes: 1: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl (hash: joaE9l3lmC+TXnmnWNhY8vRPZ7mZLx6iVACVloRqAJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:52:73:90:ca:60:f8:b9:6e:6d:66:6d:b2:f0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531edb2554d25d1c10d8714e81d36cc295d96bf9
Validity
Not Before: Mar 1 22:01:03 2026 GMT
Not After : Mar 2 22:01:03 2026 GMT
Subject: CN=644872bf03d7d50fa1b4b0fc62dac006b3de785d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4f:07:26:0c:0b:86:f4:78:97:54:f5:45:ed:
f8:ee:03:e9:d7:2a:db:ab:40:29:97:50:f3:99:c7:
e4:c4:94:2f:e5:1f:7a:3b:0c:45:ca:98:64:90:7f:
64:3a:4c:7d:f5:94:41:4f:0e:ed:12:91:58:b9:26:
77:35:c7:23:31:99:51:d2:2a:3a:91:3b:70:5e:78:
43:74:b3:17:26:28:af:cb:81:57:26:d4:94:59:5e:
4d:61:b6:e3:0e:2b:d9:65:49:36:2a:42:99:8b:b2:
8b:89:af:27:3f:38:06:03:ef:c2:e3:f7:fa:99:0e:
f4:b7:c2:7d:03:1d:4a:2f:07:06:ae:8f:55:35:14:
d3:5f:85:d2:1a:d9:41:92:64:a4:71:ac:c8:7d:66:
97:1c:21:40:08:9e:ef:e0:3c:54:83:28:0a:b6:11:
cb:92:7f:17:48:9c:d9:61:ec:49:41:cf:04:1d:f1:
b5:71:e1:4e:ee:7e:98:53:a7:a4:d9:82:90:66:42:
94:4e:b9:a9:63:69:47:91:f8:1f:40:01:7a:07:42:
62:08:16:86:9b:25:5e:c3:f5:f9:21:d5:a6:b6:e3:
37:62:0e:dd:0e:12:f0:db:79:73:7b:bb:f5:5e:0c:
30:6b:d2:50:3b:6d:cf:99:9a:91:09:5c:52:71:fe:
be:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:48:72:BF:03:D7:D5:0F:A1:B4:B0:FC:62:DA:C0:06:B3:DE:78:5D
X509v3 Authority Key Identifier:
keyid:53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:6c:ec:d6:3f:97:0f:46:17:de:71:ee:2f:93:66:25:fa:48:
46:fc:c8:9e:3d:ab:44:01:e2:77:fc:55:dc:24:a5:cc:1e:72:
65:47:93:93:d7:c6:f5:2a:87:7d:86:d1:03:b8:89:89:f7:4f:
0e:f6:47:67:05:c5:a3:c1:fb:29:a2:a3:1d:d0:0a:69:fc:60:
d2:cd:61:7e:7d:6c:e2:60:df:3f:dc:e9:bb:ba:f1:e5:d1:08:
65:61:ac:d1:e1:b2:74:9e:a8:45:6a:85:25:ec:99:59:93:b8:
38:f4:6f:1e:e2:96:81:ae:39:fb:53:ee:08:77:d5:ba:ff:7c:
ea:75:6b:b1:65:15:e8:f5:93:01:f9:02:0f:15:3a:1b:b7:63:
d6:41:95:bb:35:d9:09:6e:19:af:3e:bb:72:f5:c4:fd:3d:2e:
83:84:47:b6:ac:ce:b0:64:e0:02:1b:16:e3:93:62:73:99:ac:
58:62:72:d5:5d:cc:44:db:66:45:2d:81:d8:69:9d:35:3e:77:
b4:77:67:94:23:15:ea:91:32:2a:e2:8d:5b:a5:16:a6:f3:6e:
07:93:6e:6e:5a:44:d4:9f:e4:34:fe:be:a9:f4:11:db:b8:90:
28:73:3d:aa:c4:6d:ea:b5:00:4b:04:ba:2a:58:47:91:99:0c:
5e:b7:4b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:06 2026 by rpki-client