Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.mft
File: UgX1htgmO7BtZAUPj0hMFOgDxLI.mft (raw, json)
Hash identifier: I1tlTUttHzwk5shIGnq1exBrHcW4Zmg5xOaJXqrReCE=
Subject key identifier: 3C:D0:9A:AD:F8:5E:4E:EA:A0:1D:59:78:E4:C9:87:D0:FF:9B:01:C6
Authority key identifier: 52:05:F5:86:D8:26:3B:B0:6D:64:05:0F:8F:48:4C:14:E8:03:C4:B2
Certificate issuer: /CN=5205f586d8263bb06d64050f8f484c14e803c4b2
Certificate serial: 019CA97D2140AAAA05FFC4C4B1EC882A9B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgX1htgmO7BtZAUPj0hMFOgDxLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.mft
Manifest number: 0E83
Signing time: Sun 01 Mar 2026 13:01:15 +0000
Manifest this update: Sun 01 Mar 2026 13:01:15 +0000
Manifest next update: Mon 02 Mar 2026 13:01:15 +0000
Files and hashes: 1: UgX1htgmO7BtZAUPj0hMFOgDxLI.crl (hash: iLSX1n8ML+jw3uo7AEHrRN4pwAp2yRK6l2mrJry/Nf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UgX1htgmO7BtZAUPj0hMFOgDxLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:21:40:aa:aa:05:ff:c4:c4:b1:ec:88:2a:9b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5205f586d8263bb06d64050f8f484c14e803c4b2
Validity
Not Before: Mar 1 13:01:15 2026 GMT
Not After : Mar 2 13:01:15 2026 GMT
Subject: CN=3cd09aadf85e4eeaa01d5978e4c987d0ff9b01c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:75:46:ab:ea:e1:dd:1c:07:cc:9e:0f:99:
f8:c8:e6:f0:45:a7:b8:32:a7:ff:35:9c:44:b0:8a:
da:d5:e2:be:2c:57:36:cf:92:8b:f9:a1:4e:78:fe:
9b:95:cb:c8:1c:df:e0:1a:29:bd:05:34:66:dc:e8:
db:9c:92:ed:d7:31:74:a9:5a:13:a7:64:c7:fb:b3:
c6:3c:a0:6c:5c:4b:37:18:bd:41:7d:79:c7:62:88:
7f:1c:82:38:86:14:4b:c2:6f:45:74:27:e4:c3:bf:
93:3c:bf:8f:20:00:7c:c3:af:e2:2a:1c:90:b6:4b:
d6:4d:78:0f:78:bd:21:e9:e7:e9:b1:43:7a:8e:f2:
b4:5f:94:89:77:f9:ea:1b:ae:cd:f2:b6:bd:4a:60:
f7:e0:0e:99:d7:35:7d:5c:57:16:f9:48:01:40:87:
ab:ca:39:ab:e6:77:51:5e:20:c1:3d:77:ed:c3:ba:
2c:2b:cd:35:ae:27:ab:d1:2b:4b:f8:0e:d8:6d:0f:
0e:b0:3e:61:dd:0f:1b:cc:79:17:b6:61:82:74:9a:
f6:3b:9a:65:e5:f5:6e:ec:08:5c:fb:e1:0c:a5:dd:
f7:d7:82:2d:67:ae:c0:e7:68:6f:26:db:2e:42:45:
be:3f:e9:25:53:45:cc:bc:7f:e5:ff:75:66:6f:e6:
02:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D0:9A:AD:F8:5E:4E:EA:A0:1D:59:78:E4:C9:87:D0:FF:9B:01:C6
X509v3 Authority Key Identifier:
keyid:52:05:F5:86:D8:26:3B:B0:6D:64:05:0F:8F:48:4C:14:E8:03:C4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgX1htgmO7BtZAUPj0hMFOgDxLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d6:3b:f2:ce:65:1f:8f:4e:0c:10:30:42:3d:97:e5:b5:b0:
21:a1:2f:3e:30:7b:22:45:e3:64:3b:de:98:a2:bd:7e:f0:49:
58:c8:6e:28:b2:bf:7e:5b:72:37:7e:b2:41:bc:7c:7e:7c:9a:
fa:28:c1:d5:a4:a3:63:9e:68:89:7d:13:56:fd:5a:45:98:05:
40:8a:ff:89:e8:d4:9d:c5:5c:82:08:67:7f:db:2f:e8:0a:9a:
73:20:76:57:5a:82:6b:da:47:bd:50:0d:d6:be:91:7a:b7:47:
46:cd:9c:22:87:5c:12:6c:06:75:9a:27:59:0e:50:80:d4:b2:
ff:a6:2f:d4:5a:a3:3b:5c:27:b6:a5:8f:ca:06:56:93:8d:16:
c0:fa:f2:bd:4b:7f:b0:74:90:cc:f1:25:a6:3e:67:d2:96:96:
c1:40:86:ea:4f:de:01:31:3d:4d:02:b9:6d:03:9c:ad:13:8a:
01:55:c3:01:25:59:02:d9:1c:2a:3c:de:97:0c:6f:1a:3c:51:
51:22:d4:4c:22:4b:94:7d:23:be:d8:ae:84:54:58:0d:a8:e7:
e8:25:c8:66:69:b8:06:fc:2c:66:45:d6:a9:45:1d:fe:eb:87:
c5:fd:fc:40:72:30:ba:49:91:e7:a7:12:c3:01:20:90:f4:ef:
76:a2:0b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:27 2026 by rpki-client