Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
File: ujWrXugfdPzKSgwT6XLsHP6WeTs.mft (raw, json)
Hash identifier: 4syEhXNEbmRTiOOKJrN9yuz09cWFN4uJ+eLDGdpZoZo=
Subject key identifier: F8:21:08:6E:F7:26:FD:A9:48:2D:49:95:D6:7F:29:A1:78:8D:A2:ED
Authority key identifier: BA:35:AB:5E:E8:1F:74:FC:CA:4A:0C:13:E9:72:EC:1C:FE:96:79:3B
Certificate issuer: /CN=ba35ab5ee81f74fcca4a0c13e972ec1cfe96793b
Certificate serial: 019CAD5A6FB2A1651611BAD2AFF80D9E1479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
Manifest number: 0B1E
Signing time: Mon 02 Mar 2026 07:01:50 +0000
Manifest this update: Mon 02 Mar 2026 07:01:50 +0000
Manifest next update: Tue 03 Mar 2026 07:01:50 +0000
Files and hashes: 1: ujWrXugfdPzKSgwT6XLsHP6WeTs.crl (hash: +aeBfi1SZhVF2CkFBnoFhD181wxa5dpbHtnDLmN227E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:6f:b2:a1:65:16:11:ba:d2:af:f8:0d:9e:14:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba35ab5ee81f74fcca4a0c13e972ec1cfe96793b
Validity
Not Before: Mar 2 07:01:50 2026 GMT
Not After : Mar 3 07:01:50 2026 GMT
Subject: CN=f821086ef726fda9482d4995d67f29a1788da2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:01:2f:8e:34:14:88:20:2f:93:34:20:99:ac:
15:29:bb:63:58:0a:98:92:c0:71:95:90:ee:e2:58:
f7:bb:06:cf:2f:0a:bf:2e:98:a3:e0:32:65:af:99:
3a:0f:df:a3:f6:a1:85:9b:f5:89:30:20:e9:3b:7c:
8a:39:c9:8f:b4:bf:57:6c:b2:31:cf:51:ba:76:ba:
3b:39:3d:5e:88:e4:e4:3e:66:86:2f:cb:02:6e:ee:
e1:c4:f8:e7:f3:0d:06:a8:a7:d6:ae:fa:72:24:4c:
02:a6:11:e0:c2:83:94:c8:b2:a8:7c:35:00:1f:8a:
b4:04:67:69:b3:eb:8b:3e:3b:01:a8:6d:db:32:d4:
bf:2d:95:ee:f3:c4:51:85:95:45:30:77:98:91:3a:
c0:c3:b4:10:17:b9:81:8e:09:0e:9e:44:da:17:da:
dd:31:e3:4f:0f:18:3d:f7:a1:b9:96:68:8b:f2:b1:
e0:e2:1b:c4:38:1b:c8:94:99:4c:cc:8f:45:b2:1b:
67:87:85:bb:b9:11:df:e0:81:30:1a:db:6f:30:d7:
3e:38:41:8c:97:f3:e4:2f:76:a4:5c:0f:8e:d6:85:
7b:27:ae:4a:2f:e7:be:26:25:20:cd:95:f6:89:31:
64:65:58:07:64:92:fa:16:3c:4e:da:a8:54:0b:a0:
b4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:21:08:6E:F7:26:FD:A9:48:2D:49:95:D6:7F:29:A1:78:8D:A2:ED
X509v3 Authority Key Identifier:
keyid:BA:35:AB:5E:E8:1F:74:FC:CA:4A:0C:13:E9:72:EC:1C:FE:96:79:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:41:1e:77:e2:eb:10:e1:6a:fa:66:4f:50:f4:1f:1f:ea:01:
61:48:1f:78:e9:9a:fa:cd:6d:e9:7c:25:a6:94:59:15:09:13:
89:d9:33:44:d7:96:cb:42:69:11:1e:2b:82:45:c4:ec:29:83:
bb:51:6a:bc:c2:a6:b3:a0:98:40:5a:70:cd:63:0d:5a:64:9b:
04:7c:8a:9c:84:3e:c7:7d:9b:4b:2a:94:24:2e:36:1b:31:eb:
17:b0:0a:c4:06:6e:d4:81:55:52:8b:dc:51:c5:c7:27:04:df:
4b:29:c4:e2:71:fa:98:f1:64:da:3e:da:5e:0c:6e:fd:36:84:
57:89:27:32:13:d3:34:84:5b:ea:f6:07:67:92:ba:83:af:de:
f7:40:9d:3e:a7:7e:f7:ff:8c:d7:5a:52:91:ff:5f:24:9b:4f:
e6:2d:36:62:48:f5:b7:f0:a7:d4:3e:1e:e2:64:7c:21:8d:0d:
3c:ec:03:f0:73:fe:f6:32:03:ed:94:53:c3:2a:e5:75:e0:bb:
74:83:3b:e7:8c:0d:fa:01:0a:04:7d:33:fa:26:44:fa:8e:a4:
b9:e2:e4:c3:61:b5:3c:70:d1:31:de:d4:31:f6:48:6c:98:29:
d9:1f:51:bc:75:12:ab:cc:b1:98:ff:fb:82:aa:93:fe:55:c5:
42:b8:64:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:24:40 2026 by rpki-client