Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
File: uo1nmL3QsriAXUOzRV92c5uUbx0.mft (raw, json)
Hash identifier: VEPfgloy4UtfCZC0+FrRkjt2RfK5CghYmpuSe0OpQtE=
Subject key identifier: 56:1F:7D:72:09:7D:52:B9:DA:DF:39:C8:73:CB:AE:B4:66:64:0D:F8
Authority key identifier: BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D
Certificate issuer: /CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d
Certificate serial: 019CA97CCAB4B788DCFD2AC84C3C90FEB9D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
Manifest number: 17D4
Signing time: Sun 01 Mar 2026 13:00:53 +0000
Manifest this update: Sun 01 Mar 2026 13:00:53 +0000
Manifest next update: Mon 02 Mar 2026 13:00:53 +0000
Files and hashes: 1: uo1nmL3QsriAXUOzRV92c5uUbx0.crl (hash: 1lkB/ncBgWc99oigj6stHXWoI47wD6t4NNSJ3FuwiAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:ca:b4:b7:88:dc:fd:2a:c8:4c:3c:90:fe:b9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d
Validity
Not Before: Mar 1 13:00:53 2026 GMT
Not After : Mar 2 13:00:53 2026 GMT
Subject: CN=561f7d72097d52b9dadf39c873cbaeb466640df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a5:66:26:44:41:27:6f:04:43:36:9a:86:15:
5e:85:b3:d6:50:61:45:fb:10:d0:b1:3b:3b:f4:48:
ae:64:44:2e:85:42:c3:fd:10:b9:0f:26:2c:32:8f:
61:ff:b8:01:51:80:f0:81:d2:d1:62:e5:75:29:09:
7b:de:50:c8:9c:10:8f:2b:86:a0:fb:1e:4e:84:98:
c9:ce:49:1a:b9:05:e7:a7:5d:fb:30:61:78:23:36:
c0:29:c4:c0:f6:8e:ed:1d:a6:a4:50:8b:d9:c4:5a:
0c:2b:62:ee:3a:cf:15:c4:d8:d1:b2:ed:c5:fb:09:
aa:16:67:c9:5f:c9:95:16:92:47:fc:c3:b3:12:69:
31:da:08:16:90:d6:ef:7e:b9:d3:13:2b:6d:5d:98:
39:e2:87:0d:8a:36:c6:49:fd:8b:6c:6a:e5:79:1a:
02:87:92:79:7e:9c:d3:d8:38:0d:ef:f8:20:e5:87:
02:29:16:21:fd:71:c0:d6:2b:5c:20:d0:3e:e4:d4:
36:8d:fa:34:ab:fa:bc:f3:85:5a:a5:16:15:be:f1:
18:b3:ae:1e:43:c0:c0:b4:80:9d:3c:92:12:b0:3b:
9c:28:57:f7:be:86:a9:49:93:23:0f:fa:6b:7b:a5:
02:d1:72:bf:31:e2:7e:cd:fd:00:c3:5c:51:af:a0:
8d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1F:7D:72:09:7D:52:B9:DA:DF:39:C8:73:CB:AE:B4:66:64:0D:F8
X509v3 Authority Key Identifier:
keyid:BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:55:ef:2e:ae:ea:f2:5f:35:44:bc:b4:b8:86:22:de:6a:da:
84:95:71:df:af:6a:ee:cb:f7:03:08:e5:88:5a:e1:90:b5:5d:
ec:8c:b3:60:91:2a:29:04:57:fa:d0:7a:fb:b5:52:a9:77:e7:
85:e3:5e:66:69:8c:77:23:49:89:96:07:ae:cb:10:4a:45:30:
2a:13:3a:19:98:25:26:c9:a9:5c:0b:14:42:e5:08:bb:3a:8b:
49:d2:49:05:3b:a1:e1:56:10:24:21:30:f9:ee:6c:b9:b8:cb:
5a:be:f9:15:33:3f:c2:0e:87:6a:52:92:27:92:e3:45:13:0d:
88:af:6f:91:55:56:15:e1:2e:22:8b:e5:99:cb:11:c5:7b:5f:
8b:ab:0d:4e:03:e9:1a:a5:07:b9:3d:0e:a8:76:0d:be:af:1e:
92:b3:87:a0:ef:31:c2:40:8c:cb:ec:88:f5:1d:69:e8:2d:66:
d6:7a:16:28:4c:22:68:4d:11:c4:f1:91:eb:5f:3e:17:4d:2a:
b7:c6:85:b6:25:70:23:93:a0:36:57:57:fb:66:61:75:f4:28:
19:80:4f:02:b4:fd:97:a1:98:be:84:6d:8e:c4:de:66:ab:e3:
f8:c1:f0:58:7b:5c:82:32:2f:f2:c5:08:1b:b0:0d:f5:e0:26:
e6:33:0b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:54 2026 by rpki-client