Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
File: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft (raw, json)
Hash identifier: 11kXDXXITOgn4sq94N5E7prtQ7msebkYY4cjXK/rUiQ=
Subject key identifier: DC:45:E3:5B:7E:D8:5B:08:DD:9C:76:AF:C6:19:1F:AA:5B:32:0A:A6
Authority key identifier: BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B
Certificate issuer: /CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
Certificate serial: 019CABA26455125AD54B4073C5ED969E7599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
Manifest number: 05CD
Signing time: Sun 01 Mar 2026 23:01:12 +0000
Manifest this update: Sun 01 Mar 2026 23:01:12 +0000
Manifest next update: Mon 02 Mar 2026 23:01:12 +0000
Files and hashes: 1: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl (hash: F1QmJLcvwoZvJ08bY8ZA76lPtgBSS4qQC+WSuiur6YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:64:55:12:5a:d5:4b:40:73:c5:ed:96:9e:75:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
Validity
Not Before: Mar 1 23:01:12 2026 GMT
Not After : Mar 2 23:01:12 2026 GMT
Subject: CN=dc45e35b7ed85b08dd9c76afc6191faa5b320aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bd:2c:73:c9:26:27:be:00:4f:ac:c5:42:9e:
17:09:e4:30:6b:78:7c:47:98:1c:c4:b6:a9:f7:1e:
73:db:73:2b:f4:10:85:4f:7f:70:dd:9e:c2:8b:f7:
3e:64:62:27:ec:cd:f8:2b:3a:40:d0:e9:45:87:23:
7a:dc:5e:16:71:07:29:1d:22:7e:01:c9:19:cf:2f:
f3:78:e4:5b:47:f1:d4:1b:f3:27:aa:a7:cc:81:ce:
f8:1b:74:3d:36:4f:04:b9:a9:89:14:2e:87:42:0f:
3d:af:a1:a1:ab:92:01:e0:55:80:6e:ce:27:3e:be:
10:fb:7e:9f:16:30:11:28:06:15:f4:56:74:03:51:
b1:cf:48:c1:b9:0c:4a:09:3d:8e:10:b5:36:da:9a:
2e:1c:58:f4:84:39:82:13:89:03:b6:b2:c8:c4:9d:
1e:5a:cc:15:1e:ab:de:d3:0e:84:36:25:4d:59:20:
5f:4a:3e:ee:54:de:c7:ed:54:57:71:37:f3:d4:0c:
e5:2e:7d:dd:fa:21:b7:87:87:a8:dd:7c:b5:a7:1b:
80:d1:e6:33:35:16:c0:76:5f:c1:4f:a9:50:91:3f:
39:65:57:13:0b:dd:e7:50:40:0e:52:b6:cc:6c:8f:
72:46:f1:df:ff:11:d8:50:75:c1:db:10:35:7f:03:
54:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:45:E3:5B:7E:D8:5B:08:DD:9C:76:AF:C6:19:1F:AA:5B:32:0A:A6
X509v3 Authority Key Identifier:
keyid:BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a2:03:d8:61:2f:7f:2b:4a:01:e5:b8:9b:f2:5a:fe:3e:e5:
95:5d:f4:c3:33:5e:8c:ff:46:60:95:ab:4a:c2:9c:fc:04:6d:
3e:4e:37:f3:91:41:0c:6d:e9:f3:41:37:2f:68:7e:11:f3:59:
9f:f3:c0:89:cb:6f:a0:07:a3:8b:6c:0d:85:0d:fc:56:7d:35:
28:10:b1:0f:ac:63:1d:4b:07:07:fd:4c:c5:9c:ee:1c:76:0e:
e3:da:bc:8c:72:d2:b0:30:30:d9:78:0a:eb:fb:2a:5d:06:4a:
1c:38:2f:a7:da:1d:03:a8:57:31:d4:da:24:f7:3c:0b:0c:f7:
0e:37:67:06:ed:df:6c:4b:77:5a:c4:31:e5:67:bb:6d:e3:b7:
2a:fc:28:9b:2e:31:26:77:01:b8:b4:c1:99:65:2c:db:4e:bb:
39:94:09:e5:90:0f:e0:d8:0b:7c:4a:86:9f:7e:bf:20:f3:e9:
4c:8b:ec:a6:d1:31:4c:5f:c7:6b:ce:a3:80:84:73:0d:aa:99:
64:a7:15:10:ed:7d:21:6a:07:b4:b6:30:91:67:ea:b7:0c:27:
c0:85:6c:92:c2:7f:94:5e:13:9b:91:ea:a0:b8:a8:26:62:a5:
53:6a:1e:b3:cd:d6:b5:38:2d:d1:44:fd:82:1d:d5:ad:2a:b6:
d7:5f:29:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:56:16 2026 by rpki-client