Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
File: uo1nmL3QsriAXUOzRV92c5uUbx0.mft (raw, json)
Hash identifier: MYDTBLHENIAyH0mcNMdbmzqZ1+xankci6NzTG9ZuO6Q=
Subject key identifier: ED:D8:CE:7C:7F:C8:73:13:D5:F0:4D:84:47:A7:9D:92:5F:70:BE:3B
Authority key identifier: BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D
Certificate issuer: /CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d
Certificate serial: 019D98F523EE1D9BFE0B10A87A97A82A5160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
Manifest number: 1850
Signing time: Fri 17 Apr 2026 01:01:35 +0000
Manifest this update: Fri 17 Apr 2026 01:01:35 +0000
Manifest next update: Sat 18 Apr 2026 01:01:35 +0000
Files and hashes: 1: uo1nmL3QsriAXUOzRV92c5uUbx0.crl (hash: DSlZcaew51dIQG/JhmJITJ7Yw4WJnFkFBJg7aoNUKGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:23:ee:1d:9b:fe:0b:10:a8:7a:97:a8:2a:51:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d
Validity
Not Before: Apr 17 01:01:35 2026 GMT
Not After : Apr 18 01:01:35 2026 GMT
Subject: CN=edd8ce7c7fc87313d5f04d8447a79d925f70be3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:77:64:ef:b4:fc:81:54:ab:5c:6c:50:38:fc:
e0:57:d0:88:32:f5:4e:f3:96:22:ca:b6:7a:c8:f8:
75:38:92:2e:d4:8b:22:ba:98:a6:e3:1b:47:93:1c:
fc:e0:fa:36:22:ca:07:be:f4:88:3b:dc:d6:85:9f:
f6:f8:c1:f3:08:f2:cc:17:38:9c:f6:79:5f:f7:76:
fd:83:04:4b:ee:65:9f:74:02:41:c0:72:75:d6:c4:
93:4f:39:c6:78:8d:af:9c:46:24:ef:a1:45:34:6c:
76:22:ba:2c:57:b7:fa:5e:1b:c2:7e:84:d3:50:32:
de:51:e9:53:9f:61:27:15:8b:43:90:d5:bb:0b:29:
74:4b:d0:f1:78:28:cd:a7:d8:f2:9c:b7:fd:49:18:
27:58:36:d1:9c:1c:42:d5:8b:27:6e:f4:61:ab:df:
5d:cb:f5:76:3f:23:da:16:a5:17:39:68:8f:35:c9:
f2:3d:cf:42:53:81:e0:66:14:99:c0:bd:9a:9c:f2:
2c:ee:c1:58:d9:d7:27:cf:bb:1c:7f:88:1c:58:e2:
b2:bb:e3:af:3a:e6:fc:2a:f7:83:a9:f7:8f:18:19:
28:2d:ac:53:32:55:81:4d:c3:fd:7c:3d:5d:35:84:
d6:fd:8f:75:d1:6a:07:98:d5:23:ad:00:3b:79:dc:
f8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D8:CE:7C:7F:C8:73:13:D5:F0:4D:84:47:A7:9D:92:5F:70:BE:3B
X509v3 Authority Key Identifier:
keyid:BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f9:42:67:8b:a3:48:23:e4:8a:00:75:57:1a:49:e5:3f:53:
0e:8f:11:02:b9:7e:28:51:97:8c:be:69:82:a9:b1:71:82:d4:
4e:67:d7:a3:87:f0:9a:30:58:ab:38:eb:69:a6:2f:d6:e9:cf:
c8:f2:19:de:37:00:3f:5a:d0:fd:7c:b0:ef:f7:e3:bf:47:e9:
c2:48:88:58:b0:d1:aa:29:6a:92:62:7a:81:bc:a5:6b:89:fe:
6c:d1:e1:bb:ce:45:ae:17:81:ba:af:29:8a:81:3a:c4:98:a6:
70:01:b8:90:bd:29:70:8c:2e:e8:8b:b1:0b:f2:06:1a:0f:0a:
00:49:22:b1:29:b6:d3:37:17:2b:a1:e6:b2:af:ab:91:a0:bc:
74:7c:ed:8e:78:bd:42:4c:0b:a0:d0:ed:e9:57:ed:7d:25:d7:
d4:bd:8f:47:ca:6f:8e:7c:c4:c3:30:1c:b6:3a:21:a3:c2:03:
35:d1:0a:49:66:2f:8b:d4:7f:79:b6:17:10:d8:8e:92:e6:2a:
1f:68:55:2f:7d:f9:1b:f3:6b:2a:bc:18:86:a3:f1:e8:b9:41:
f1:31:d6:2e:cd:51:51:c8:ea:55:4c:f5:11:e3:32:d2:38:d5:
16:d8:02:61:e4:e2:4a:90:70:61:cc:0c:d2:59:ff:93:b8:36:
87:e5:6a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:09:53 2026 by rpki-client