Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft
File: pU3VdP7HLUOUwlU2uoUyydOPQLo.mft (raw, json)
Hash identifier: 0W1z9ikWvK+zdUmawZS4hFY+0xqDolbwXQpZK1SVSPo=
Subject key identifier: 48:F5:D2:73:F8:96:C0:43:A3:E9:86:C5:5B:A9:C5:D5:88:CE:5E:0C
Authority key identifier: A5:4D:D5:74:FE:C7:2D:43:94:C2:55:36:BA:85:32:C9:D3:8F:40:BA
Certificate issuer: /CN=a54dd574fec72d4394c25536ba8532c9d38f40ba
Certificate serial: 019CAD59F28CD742615B7770051755FF720A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pU3VdP7HLUOUwlU2uoUyydOPQLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft
Manifest number: 0B5C
Signing time: Mon 02 Mar 2026 07:01:18 +0000
Manifest this update: Mon 02 Mar 2026 07:01:18 +0000
Manifest next update: Tue 03 Mar 2026 07:01:18 +0000
Files and hashes: 1: pU3VdP7HLUOUwlU2uoUyydOPQLo.crl (hash: XNdGXj8dq9XEBtKUc15HF/BMa8LuEJKBjePBsUFfOQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pU3VdP7HLUOUwlU2uoUyydOPQLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:f2:8c:d7:42:61:5b:77:70:05:17:55:ff:72:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a54dd574fec72d4394c25536ba8532c9d38f40ba
Validity
Not Before: Mar 2 07:01:18 2026 GMT
Not After : Mar 3 07:01:18 2026 GMT
Subject: CN=48f5d273f896c043a3e986c55ba9c5d588ce5e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:de:43:0a:04:cf:ca:e7:ea:0c:94:7e:79:ed:
f9:c5:78:ee:2b:a1:0a:f1:17:14:c6:d7:da:8f:26:
7e:9e:f0:f6:50:21:87:60:f1:ae:dd:0d:d4:86:48:
25:3b:2d:4f:26:3d:43:d7:7f:9b:07:29:f2:15:58:
af:ba:b8:a4:6c:ab:11:8c:b8:10:5e:f1:60:ce:77:
0a:a1:a1:9f:8e:64:c4:91:84:d1:a1:27:d5:8e:b8:
3a:37:62:08:8c:50:b8:95:b0:d1:41:90:85:0b:99:
db:92:fd:5f:bb:11:28:58:79:15:81:fa:7e:00:0e:
4b:c6:36:6f:95:10:e4:93:8d:34:9e:62:4d:2a:e1:
db:25:c0:11:75:0f:cc:a2:05:f2:2c:ed:33:0d:c9:
b3:44:a7:5b:d5:3a:ca:75:ec:96:70:d8:7d:fa:23:
4f:cf:86:24:68:a6:86:ed:fe:66:2a:57:3b:91:f7:
81:df:8d:b1:36:eb:40:79:6b:e7:ab:8d:9d:7c:cb:
9d:60:09:66:0b:8b:b2:72:2e:84:ed:c1:2d:8c:6c:
3f:e6:c7:16:41:d9:29:85:51:c2:bd:42:3c:98:21:
4b:fe:e3:7a:ff:d2:ba:8a:6f:92:f7:85:e2:b3:45:
29:ec:e1:f7:89:76:b9:77:ac:c2:e0:6f:36:8a:54:
95:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F5:D2:73:F8:96:C0:43:A3:E9:86:C5:5B:A9:C5:D5:88:CE:5E:0C
X509v3 Authority Key Identifier:
keyid:A5:4D:D5:74:FE:C7:2D:43:94:C2:55:36:BA:85:32:C9:D3:8F:40:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pU3VdP7HLUOUwlU2uoUyydOPQLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:09:8d:5b:85:e7:51:73:a2:d9:91:dd:0c:73:6f:80:a7:a6:
33:29:1b:ba:e5:38:d5:3d:bd:59:0f:c2:cb:b4:ae:9d:f6:e4:
ea:81:82:04:0d:f6:d8:d0:43:c4:df:5c:bc:ef:95:78:54:51:
b0:15:ed:81:5f:23:03:c0:85:0e:f9:90:06:66:d2:57:39:12:
77:f4:a4:b8:e3:1a:7c:ba:c9:80:b1:0c:c3:b6:c7:22:7b:6a:
d6:61:79:c5:93:ab:91:43:31:6c:8f:8e:53:f4:a7:2f:43:ef:
11:93:a2:e2:3f:ab:53:4e:8f:9f:99:85:64:26:e9:23:3f:09:
cf:b5:30:32:51:b0:db:90:e1:c7:6a:cc:26:20:c2:ba:04:1a:
25:ae:66:a5:78:1b:24:5f:f8:e0:ca:99:b6:71:2b:05:05:53:
6f:13:22:5e:70:ec:fc:ad:52:0e:90:0b:f2:b1:47:12:cd:17:
5b:36:e0:43:42:3c:17:dc:7c:13:1c:02:30:0e:1f:af:ff:42:
0b:96:90:4d:7e:cb:ea:55:8b:37:d8:74:73:89:20:a7:ec:54:
36:e3:4f:c8:36:f6:16:16:c5:ac:35:80:bf:7c:2c:8c:9d:90:
c2:07:f2:cf:c9:99:c4:ba:c6:98:d3:4b:4a:05:fc:f8:49:ae:
8e:4f:13:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:24 2026 by rpki-client