Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
File: rUskfyJRG39TOwAtmfvsK1WbbC8.mft (raw, json)
Hash identifier: sB2U2oBaUfRxh5RjRFqFEONmMz9a4qcikVwJzf7GA90=
Subject key identifier: 2D:13:39:CF:90:6D:30:19:7E:8F:8D:43:1A:78:AB:52:BE:37:2B:6E
Authority key identifier: AD:4B:24:7F:22:51:1B:7F:53:3B:00:2D:99:FB:EC:2B:55:9B:6C:2F
Certificate issuer: /CN=ad4b247f22511b7f533b002d99fbec2b559b6c2f
Certificate serial: 019CAAFCFBD794E0D74171A961D620C42D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
Manifest number: 06CF
Signing time: Sun 01 Mar 2026 20:00:31 +0000
Manifest this update: Sun 01 Mar 2026 20:00:31 +0000
Manifest next update: Mon 02 Mar 2026 20:00:31 +0000
Files and hashes: 1: rUskfyJRG39TOwAtmfvsK1WbbC8.crl (hash: c59RcXV1b5iTCjeMjVgzh/fzRHM+2FETBc4LApGc3BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:fb:d7:94:e0:d7:41:71:a9:61:d6:20:c4:2d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4b247f22511b7f533b002d99fbec2b559b6c2f
Validity
Not Before: Mar 1 20:00:31 2026 GMT
Not After : Mar 2 20:00:31 2026 GMT
Subject: CN=2d1339cf906d30197e8f8d431a78ab52be372b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:1f:e5:72:26:0d:70:75:38:7a:f5:5b:77:
b1:77:a3:e7:48:5c:f3:30:60:e8:48:b8:86:1d:cb:
52:21:50:aa:98:1c:4c:bd:64:15:f9:d8:67:e2:e8:
99:ba:14:fa:e3:b5:94:22:76:7f:c2:99:35:f1:ff:
a0:aa:e2:a9:9d:fe:18:8f:ca:7a:df:9b:12:86:ed:
85:6e:31:66:60:6d:f7:83:58:9f:9e:96:18:b1:a5:
3e:20:be:0a:c6:0d:7a:4b:39:c8:1c:1f:ec:fe:d3:
ce:f8:34:07:cc:74:a4:83:57:14:37:a5:ec:97:a8:
b8:29:22:cf:5a:61:f4:7d:40:7b:2d:1a:02:01:c6:
bd:e1:6a:12:00:5a:0c:80:52:80:3e:88:f2:bd:75:
bd:1f:1b:8e:35:ce:41:fd:6d:1d:ba:69:59:2f:e6:
51:2d:66:92:08:76:82:8d:5c:11:74:73:df:bc:5e:
08:a7:ff:ef:59:66:34:4c:8e:02:86:84:80:c8:a5:
73:72:19:c2:fb:73:05:99:bb:3d:c0:3f:eb:e0:f5:
74:69:43:4a:e8:9f:83:0f:3a:cf:4b:07:e2:97:86:
7b:da:21:70:d1:4b:bb:b2:3e:5c:b4:8e:5c:13:e3:
83:45:7f:c9:af:09:49:d7:3f:4a:6a:a7:cf:87:b7:
6e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:13:39:CF:90:6D:30:19:7E:8F:8D:43:1A:78:AB:52:BE:37:2B:6E
X509v3 Authority Key Identifier:
keyid:AD:4B:24:7F:22:51:1B:7F:53:3B:00:2D:99:FB:EC:2B:55:9B:6C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:61:56:c5:99:42:44:8f:52:53:f3:8b:16:24:3c:d8:49:e9:
b2:34:9d:f0:0b:23:98:d5:c5:1c:49:37:08:b1:43:18:d5:85:
4c:79:1c:fc:64:91:58:c3:e0:a4:0d:d0:d8:32:b2:db:7b:27:
ea:db:e4:cb:3b:8a:1c:a4:23:02:cf:8e:32:16:e9:d9:f2:14:
bf:73:b1:06:fe:2e:0b:ee:cc:35:a9:98:6e:a3:68:e8:f6:b8:
ab:fe:f4:cc:ce:3b:82:ba:5a:b2:0f:d2:c7:6d:6e:1e:73:7b:
f3:3c:60:79:0c:02:ae:79:dc:af:4b:5f:32:ec:7f:3f:95:47:
b8:28:0d:fe:9d:83:ec:a6:fa:92:48:69:96:51:b5:68:a7:22:
48:31:ef:69:53:bb:e3:a7:28:67:de:16:d0:f7:70:ad:8a:9f:
6c:31:6b:ef:b0:b5:8d:9c:e8:f9:12:1a:10:ae:a5:83:37:8b:
54:30:c4:53:4e:a9:55:36:d9:50:8a:82:56:10:7a:cd:f1:cb:
d2:d8:a1:1c:e2:d3:ab:97:6e:2d:d6:f4:1e:11:de:e2:12:80:
f2:09:a0:e2:8b:a7:2d:6e:e0:f4:04:1e:06:0f:48:b2:24:68:
02:d4:47:cc:ff:1e:cf:3a:64:3c:f9:99:03:2e:58:60:74:10:
ea:3f:42:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:08:36 2026 by rpki-client