Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
File: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft (raw, json)
Hash identifier: rFJKeFC3swqL+UwtfQZHdqz2roked4U2qwtIp/qd4iY=
Subject key identifier: C4:F5:17:A8:9A:04:A2:23:3A:9B:D4:51:4A:8D:E0:22:AF:5D:CC:EE
Authority key identifier: BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B
Certificate issuer: /CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
Certificate serial: 019DA2D32ADA6CAE1303D54DFDB65D41D548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
Manifest number: 064D
Signing time: Sat 18 Apr 2026 23:00:41 +0000
Manifest this update: Sat 18 Apr 2026 23:00:41 +0000
Manifest next update: Sun 19 Apr 2026 23:00:41 +0000
Files and hashes: 1: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl (hash: gli59IX8/8P4KL6G2zhuk2uHIJRRgaf8vs/pLnP2atc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:2a:da:6c:ae:13:03:d5:4d:fd:b6:5d:41:d5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
Validity
Not Before: Apr 18 23:00:41 2026 GMT
Not After : Apr 19 23:00:41 2026 GMT
Subject: CN=c4f517a89a04a2233a9bd4514a8de022af5dccee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:37:0e:e4:f0:a6:e4:77:e1:51:0a:df:19:27:
8f:d9:79:28:a6:cc:c1:58:94:21:2d:41:c8:2c:fc:
b3:9c:88:37:a7:88:32:2f:92:88:16:55:d4:d2:09:
21:cf:d9:ae:74:78:3d:35:77:2f:3c:db:ae:3f:a8:
d4:97:4c:ad:10:93:fc:38:b7:e9:5e:f2:93:3c:85:
35:d7:85:bf:dc:09:28:11:5c:35:40:04:f7:42:b0:
4f:fa:6f:05:bb:32:75:46:20:59:13:4d:23:ac:fd:
ed:3f:c6:17:bb:f9:c0:51:0c:cf:6f:cc:a8:d0:17:
96:5c:a8:6a:7b:5f:61:b8:c0:bb:db:56:73:77:3e:
de:0f:e6:ac:34:6b:d8:3f:cd:e8:40:07:ec:55:aa:
5d:26:33:a3:7e:93:53:86:57:89:3b:d9:d1:07:12:
74:cd:7e:f2:ec:3a:71:fe:9e:f0:e1:b0:44:f9:58:
53:cc:57:ad:bb:1b:1d:83:3c:44:5b:a5:94:31:4d:
4a:50:4b:85:79:37:42:b1:ad:07:ed:e5:80:b5:19:
66:18:89:69:b3:82:7d:b8:f3:55:11:26:6f:8e:73:
cd:66:82:75:ef:81:3e:d4:0f:a3:f9:01:f3:7d:a9:
87:03:f2:6d:f3:e3:1d:06:64:96:17:23:d8:98:a0:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F5:17:A8:9A:04:A2:23:3A:9B:D4:51:4A:8D:E0:22:AF:5D:CC:EE
X509v3 Authority Key Identifier:
keyid:BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:20:38:8f:b1:64:f7:9c:42:80:fd:e2:18:33:7c:c8:7f:0d:
4f:fe:fe:8c:ed:69:cd:8c:72:97:18:20:86:47:cb:f5:a4:ab:
c8:19:e8:33:2f:87:ab:dd:a8:53:16:02:72:e1:8f:ea:20:f0:
24:7f:28:ab:2c:2e:d0:bd:e7:69:12:8c:73:bf:8a:d7:25:50:
a1:e7:bc:32:45:2d:09:62:8e:b1:ea:c9:03:a5:40:4c:e6:4a:
7c:5c:d9:d1:86:d9:b8:18:57:0b:c7:01:10:2e:02:83:37:db:
4c:e6:8e:e8:c7:5a:e3:21:85:16:c8:c4:2a:25:c5:56:82:cb:
49:d5:f0:98:70:18:69:35:6e:3d:a4:df:9b:75:15:22:5b:af:
2e:69:b9:3c:ae:b7:2d:f3:33:c6:ab:1e:e6:3f:08:a7:9e:be:
ef:2c:b2:de:77:b1:67:05:de:af:a9:3f:bd:4d:8c:2f:ff:9d:
37:f5:32:11:c6:c1:8a:2c:26:b5:9d:44:19:d5:c6:3f:6e:45:
04:0e:0d:3a:d5:7b:79:a4:3b:06:7f:9e:74:65:65:bf:6a:d0:
a6:9a:c9:7b:20:83:a7:ff:23:89:3c:c9:87:81:b6:ea:c4:1c:
91:bf:a1:81:b6:8d:c6:e9:28:26:50:da:54:42:e1:65:cc:5e:
13:2c:9e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:04:58 2026 by rpki-client