Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
File: UIJpb7xB2QYWimDOCUlJAiz2Keg.mft (raw, json)
Hash identifier: PKg99KGLO7XEZk60kFj27pXQkxJ1vnjeRjJkpfx+tTk=
Subject key identifier: 04:02:23:46:28:F3:E1:D0:E2:03:BC:FD:DC:1A:12:95:A1:EA:67:2D
Authority key identifier: 50:82:69:6F:BC:41:D9:06:16:8A:60:CE:09:49:49:02:2C:F6:29:E8
Certificate issuer: /CN=5082696fbc41d906168a60ce094949022cf629e8
Certificate serial: 019CAAFD06C36A7EA97805055ED29D6C8F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UIJpb7xB2QYWimDOCUlJAiz2Keg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
Manifest number: 05CD
Signing time: Sun 01 Mar 2026 20:00:34 +0000
Manifest this update: Sun 01 Mar 2026 20:00:34 +0000
Manifest next update: Mon 02 Mar 2026 20:00:34 +0000
Files and hashes: 1: UIJpb7xB2QYWimDOCUlJAiz2Keg.crl (hash: LZuyqmnYt09oa6k3XiMt+ry+z6EYiLaqJEA0gaW6j8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UIJpb7xB2QYWimDOCUlJAiz2Keg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:06:c3:6a:7e:a9:78:05:05:5e:d2:9d:6c:8f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5082696fbc41d906168a60ce094949022cf629e8
Validity
Not Before: Mar 1 20:00:34 2026 GMT
Not After : Mar 2 20:00:34 2026 GMT
Subject: CN=0402234628f3e1d0e203bcfddc1a1295a1ea672d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ef:37:56:ad:75:4a:63:0e:c6:37:bc:4c:c4:
48:40:f2:0c:db:93:c5:0f:85:71:94:ab:b7:0c:34:
89:1b:b5:51:62:2b:2a:9e:d5:5c:f4:a6:ee:df:d1:
93:07:42:1b:81:ec:6a:4c:d7:13:1a:9d:ad:ba:2b:
9c:40:b5:df:1b:b9:53:33:9e:6e:11:fb:28:74:0d:
b1:d7:51:0e:37:ba:25:65:88:79:43:07:e9:e0:31:
3c:87:a4:a1:5b:2f:aa:0b:f3:52:f0:b6:55:47:04:
d1:b2:96:51:ae:8c:a3:63:52:6e:c0:16:e8:cf:bd:
05:96:ed:f0:fe:32:b5:74:63:ce:f8:7e:72:2e:8c:
bc:ed:24:b1:4c:d4:ee:bd:4a:0f:31:18:b4:c7:25:
a8:7d:00:2e:a6:0a:50:df:4f:67:a7:27:95:5d:d4:
8e:ae:4a:f4:0f:fd:56:ff:51:f7:94:9b:69:52:0b:
bb:c8:b3:36:2d:9c:76:5d:6e:ad:dc:74:82:de:6c:
8c:9e:7f:96:7a:1f:ca:cd:7e:d6:d8:fb:5b:aa:d7:
eb:14:91:9a:ef:7a:2f:d7:be:7e:05:1c:ce:b1:b4:
1b:52:1e:4d:c2:a8:76:ad:08:f4:36:6e:83:dd:d8:
9a:59:7e:d8:22:7e:be:6d:13:31:8d:63:2f:e8:a7:
92:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:02:23:46:28:F3:E1:D0:E2:03:BC:FD:DC:1A:12:95:A1:EA:67:2D
X509v3 Authority Key Identifier:
keyid:50:82:69:6F:BC:41:D9:06:16:8A:60:CE:09:49:49:02:2C:F6:29:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UIJpb7xB2QYWimDOCUlJAiz2Keg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d4:c8:4b:89:fc:e7:60:1c:bf:8f:7f:7a:a4:08:b8:20:9e:
c4:6c:3c:e4:c8:46:8f:52:40:ff:f7:73:52:98:b3:be:97:38:
60:3f:e7:d1:c7:5d:90:44:1a:bf:ed:7b:38:4c:0a:9c:6c:0f:
37:6a:cf:4d:46:d8:c2:34:c4:28:65:83:2e:20:26:7d:3d:7c:
a6:f9:8d:2b:03:d7:c7:0f:38:6f:31:13:41:40:74:d2:a5:1d:
02:26:69:4b:ba:f9:f2:b4:15:d7:a1:a6:63:08:0a:3b:fd:43:
65:a1:65:4f:d4:a6:23:83:55:d2:75:a0:d7:9b:ae:de:b2:66:
f4:95:12:19:77:f9:ae:6c:75:b4:d5:20:2f:ed:e6:5b:64:2c:
d2:99:b0:9b:28:b6:42:e0:3e:68:e7:c3:62:8d:42:92:47:ec:
99:85:ce:38:27:c1:be:23:a7:6e:6f:ac:dc:79:7d:96:54:e7:
d7:f2:36:57:54:3a:f8:14:a9:46:26:54:ad:f3:e9:2a:63:61:
1b:e0:a6:a2:6e:88:ab:1b:81:a4:48:6a:4c:9f:0a:10:af:7e:
2c:ec:1a:67:2d:e0:28:4e:6a:f3:40:76:26:7a:72:cc:55:32:
1a:f8:be:d8:e0:d6:2c:44:37:23:c1:3a:9d:a0:7d:38:43:4d:
cf:68:27:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:21:25 2026 by rpki-client