Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
File: ujWrXugfdPzKSgwT6XLsHP6WeTs.mft (raw, json)
Hash identifier: U9PYP+anwylvahoZmjiI2eDCXrDbjhK48UTeVLum2w0=
Subject key identifier: E1:EE:2E:80:72:C5:DA:A2:66:B0:DF:7B:3A:ED:70:43:47:FD:04:EE
Authority key identifier: BA:35:AB:5E:E8:1F:74:FC:CA:4A:0C:13:E9:72:EC:1C:FE:96:79:3B
Certificate issuer: /CN=ba35ab5ee81f74fcca4a0c13e972ec1cfe96793b
Certificate serial: 019D98F49EDC2DC4CA87E84378568694752A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
Manifest number: 0B98
Signing time: Fri 17 Apr 2026 01:01:01 +0000
Manifest this update: Fri 17 Apr 2026 01:01:01 +0000
Manifest next update: Sat 18 Apr 2026 01:01:01 +0000
Files and hashes: 1: ujWrXugfdPzKSgwT6XLsHP6WeTs.crl (hash: EihyzY8OxYo0T60MVbHPsuce433GGMuk17mVj5DYXJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:9e:dc:2d:c4:ca:87:e8:43:78:56:86:94:75:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba35ab5ee81f74fcca4a0c13e972ec1cfe96793b
Validity
Not Before: Apr 17 01:01:01 2026 GMT
Not After : Apr 18 01:01:01 2026 GMT
Subject: CN=e1ee2e8072c5daa266b0df7b3aed704347fd04ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:29:de:4d:c3:31:80:bd:a5:dd:92:33:56:17:
04:e2:ce:20:c7:6d:10:b7:80:67:54:96:c2:12:df:
14:f3:d3:f4:a2:ae:f4:05:b5:2d:b1:31:c9:83:5b:
44:df:24:3b:f0:03:17:8f:3f:12:0f:46:e6:8c:60:
83:b7:14:11:73:a2:b7:72:9e:ae:8f:d1:98:5b:4f:
09:2f:53:98:df:08:1c:64:9e:b8:8e:ff:d0:f8:e0:
db:9a:57:01:1f:ac:41:bd:5d:29:b6:5e:80:03:3b:
71:85:be:3b:e0:b8:b2:de:35:91:3e:2a:35:c5:e4:
0a:fe:aa:8b:ad:ed:ba:ce:aa:66:c4:dd:6a:6b:be:
8f:7f:e8:bd:c9:2b:27:88:49:f0:7b:66:65:23:a4:
a0:ee:93:4f:cd:3c:20:25:f7:93:7e:9a:6d:4d:d1:
17:5b:20:2d:6e:fe:fd:9f:14:e3:5f:72:34:bd:fc:
eb:35:08:6c:01:51:ee:b7:59:ac:05:0d:8c:d4:09:
c8:27:25:42:67:06:fa:f3:4e:de:70:1b:27:bf:1c:
1e:9a:7f:2b:64:b9:21:ea:1b:ec:4d:a5:60:b2:23:
fe:c0:fc:79:1f:cb:af:f9:e0:80:b1:d8:e3:22:fb:
87:89:86:3f:76:fa:df:14:98:a5:0f:7d:45:0f:90:
61:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EE:2E:80:72:C5:DA:A2:66:B0:DF:7B:3A:ED:70:43:47:FD:04:EE
X509v3 Authority Key Identifier:
keyid:BA:35:AB:5E:E8:1F:74:FC:CA:4A:0C:13:E9:72:EC:1C:FE:96:79:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:07:13:82:4e:79:d2:fa:13:ce:25:10:59:6b:c0:7f:5c:13:
b4:1b:58:40:30:2f:bd:64:1b:ce:8c:27:52:99:4d:6d:a4:84:
41:2a:15:57:e5:29:3d:49:cf:53:43:c1:41:6f:28:9a:59:f7:
d1:d8:34:6f:10:5b:33:a6:33:27:c4:1b:06:3d:4c:5a:dc:68:
26:86:32:96:43:81:5c:fb:a0:69:af:bb:08:c9:36:e3:43:3a:
23:cb:4a:6f:3f:85:62:8a:74:8b:5f:17:84:66:3e:ce:b2:e7:
88:99:0a:38:5a:42:7e:a0:25:b3:56:b0:99:94:3d:01:05:2a:
38:65:27:93:ac:7c:2d:00:df:ee:cd:2d:4e:24:8e:32:26:68:
80:31:81:67:a2:62:9b:be:9d:80:f1:9f:31:a4:33:e7:22:a9:
28:d9:05:51:f2:3b:a8:ca:46:d1:9d:e5:32:e6:34:37:37:cf:
47:fe:ef:e2:d7:39:b7:5f:3b:8f:0e:32:74:5b:a5:0b:c8:ea:
12:4a:1a:0f:41:ce:ff:61:57:47:1b:c8:5e:99:5a:65:76:bb:
d7:56:5a:15:1b:67:10:00:0f:72:a9:93:c1:90:11:3e:f8:ca:
8c:2c:cd:13:05:60:fd:28:99:5c:60:17:7e:5b:0e:23:67:42:
aa:1d:ab:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:21 2026 by rpki-client