Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
File: u2MubMSrZyETUbUpP4Fdfl8JOr0.mft (raw, json)
Hash identifier: k3wesBBB8cfSWlbm3QmzSmwdMfNkb9K21y/3/e2AEHQ=
Subject key identifier: 9E:46:43:E4:1A:0C:53:2D:B3:16:BB:6F:00:0D:51:05:AD:71:09:5B
Authority key identifier: BB:63:2E:6C:C4:AB:67:21:13:51:B5:29:3F:81:5D:7E:5F:09:3A:BD
Certificate issuer: /CN=bb632e6cc4ab67211351b5293f815d7e5f093abd
Certificate serial: 019CAAFD7BF7E22BA3FB97340B69F51226BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
Manifest number: 0534
Signing time: Sun 01 Mar 2026 20:01:04 +0000
Manifest this update: Sun 01 Mar 2026 20:01:04 +0000
Manifest next update: Mon 02 Mar 2026 20:01:04 +0000
Files and hashes: 1: u2MubMSrZyETUbUpP4Fdfl8JOr0.crl (hash: cfqMALCg+4OwxBteSC8y4hu8dUlLbTc2OfU+NXwO0jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:7b:f7:e2:2b:a3:fb:97:34:0b:69:f5:12:26:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb632e6cc4ab67211351b5293f815d7e5f093abd
Validity
Not Before: Mar 1 20:01:04 2026 GMT
Not After : Mar 2 20:01:04 2026 GMT
Subject: CN=9e4643e41a0c532db316bb6f000d5105ad71095b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:63:98:73:ca:d4:00:97:4a:48:69:01:d5:
2d:a1:f4:02:8f:a4:2a:57:9d:a1:de:2b:e9:3e:d3:
fc:7e:ed:24:cc:a1:8b:3c:e1:1a:b4:f7:f9:01:6f:
2f:37:03:d8:91:a0:4d:ed:16:e8:4a:db:e6:26:5b:
7e:bf:9a:b5:28:0d:56:b7:8c:b4:3e:af:8e:1e:c1:
f3:89:29:ec:c1:90:ea:08:1a:b4:33:ef:34:03:2c:
65:08:3f:f5:09:a6:35:c2:07:a1:c7:57:9b:a8:57:
3d:4c:25:e8:c3:4a:de:79:40:f7:2f:64:c6:b9:df:
82:ab:ab:84:aa:1d:fc:c2:dc:70:1f:e4:56:54:20:
93:ee:90:13:84:3b:75:cf:4a:da:fd:b5:7e:b6:19:
28:a7:93:07:b7:60:76:5b:b4:5e:8d:68:22:7f:ba:
2f:ef:55:64:90:94:a8:d3:63:0b:27:37:c6:df:a3:
4f:93:fd:9e:5f:bd:2a:e7:8a:f6:a5:1f:69:e8:db:
eb:2b:44:97:5f:a4:93:3b:d4:2c:20:57:41:2d:ab:
aa:86:51:05:59:52:0f:6e:a8:e7:c3:ef:66:04:40:
a7:83:48:47:f7:42:2b:cb:b7:c9:de:55:66:ea:15:
4f:a2:88:68:f3:98:82:cc:47:6e:7f:c2:62:6c:ca:
11:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:46:43:E4:1A:0C:53:2D:B3:16:BB:6F:00:0D:51:05:AD:71:09:5B
X509v3 Authority Key Identifier:
keyid:BB:63:2E:6C:C4:AB:67:21:13:51:B5:29:3F:81:5D:7E:5F:09:3A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:19:74:e8:16:86:63:43:d5:9d:2e:ac:9a:81:1a:ad:ce:d4:
f8:71:6d:ea:15:49:15:e0:ab:dc:5b:2f:e6:bc:a6:9f:d1:c8:
7b:ba:53:7c:44:ee:a0:31:24:7b:01:83:46:8c:b8:48:ac:65:
4f:39:81:73:cc:96:b4:69:ab:66:f8:06:f3:fc:72:e8:70:05:
94:e1:b6:36:ea:14:84:e2:32:40:be:1e:93:4f:91:85:c6:9d:
99:ad:93:a1:3e:1b:d6:2b:7a:a2:c6:ed:d7:46:95:35:74:2c:
5e:82:74:f4:4f:c4:ca:8b:b1:ce:de:15:01:4b:c6:84:1d:b6:
5a:86:50:44:c1:c4:1d:9a:95:81:c2:ce:67:19:34:db:0e:88:
71:6a:f0:46:c1:7e:fd:aa:08:15:e3:6a:af:eb:ca:f2:4c:79:
23:ee:3d:b3:1f:d1:b0:82:d6:80:7f:70:20:3f:c1:17:ea:4c:
d3:38:dd:29:a4:58:1e:b6:04:a0:27:90:f9:f1:7f:e9:e1:bc:
73:8a:b2:d8:e5:93:fe:8c:8b:6f:c3:05:a1:13:e7:8f:0d:38:
d9:69:f9:9b:5a:43:1e:ce:9f:92:bb:f5:c3:71:e8:68:63:71:
d6:64:20:2e:df:95:3f:47:5f:07:00:90:77:19:b7:16:0f:8d:
6b:b8:fa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:20 2026 by rpki-client