Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
File: UnksdxTtV0Vtc1XkoEubqL7VfkI.mft (raw, json)
Hash identifier: wYzZ72SnQwYuQu1OOH7vspuI5G6qlaYIq+DO5aTduR0=
Subject key identifier: 1E:BB:D7:A9:86:51:0D:F2:FB:5B:9B:58:EF:3C:A7:A2:A5:F3:4C:FF
Authority key identifier: 52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42
Certificate issuer: /CN=52792c7714ed57456d7355e4a04b9ba8bed57e42
Certificate serial: 019CA9EB2BE3CE97C51CD3A4C369262CC0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
Manifest number: 08F3
Signing time: Sun 01 Mar 2026 15:01:27 +0000
Manifest this update: Sun 01 Mar 2026 15:01:27 +0000
Manifest next update: Mon 02 Mar 2026 15:01:27 +0000
Files and hashes: 1: UnksdxTtV0Vtc1XkoEubqL7VfkI.crl (hash: oFz/sq/m5sMnOFQZwha8modwdyB2LHSHaKHHyHec5+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:2b:e3:ce:97:c5:1c:d3:a4:c3:69:26:2c:c0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52792c7714ed57456d7355e4a04b9ba8bed57e42
Validity
Not Before: Mar 1 15:01:27 2026 GMT
Not After : Mar 2 15:01:27 2026 GMT
Subject: CN=1ebbd7a986510df2fb5b9b58ef3ca7a2a5f34cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:04:dc:3c:ad:67:69:64:87:4c:89:28:9f:ca:
f6:66:43:83:f3:97:55:28:26:f7:11:ac:00:27:d2:
a4:8d:31:28:dc:0c:5a:24:e7:1c:c2:e0:fc:4a:a2:
8f:e8:98:18:a8:db:1b:c1:ff:7c:bd:65:0c:d4:e4:
94:fb:dc:fa:58:20:de:c5:d6:45:22:8c:1c:a5:69:
70:c4:78:51:49:95:f7:60:25:24:21:b6:de:99:ba:
67:8e:51:0a:07:0c:e5:7e:cc:79:bd:64:25:c1:45:
a3:99:eb:8e:1d:6c:ab:34:92:7b:fb:e0:aa:bb:58:
df:52:7d:05:c3:0a:d5:6e:e7:1c:8f:de:99:93:a5:
c5:07:72:10:ff:a8:b9:f2:b7:25:b9:1f:3d:20:8a:
18:c1:32:d2:73:b0:29:e0:36:3c:a5:d5:03:8f:22:
1a:cd:ab:86:72:9f:98:51:1a:8f:b5:fe:4a:67:41:
bd:a9:6a:13:02:89:5a:98:ac:f9:01:c6:ea:a7:e6:
0d:e0:06:84:29:09:ba:59:69:a7:47:4c:23:51:e9:
58:e4:37:13:f3:17:01:d2:3f:18:92:24:46:bb:28:
99:ff:f6:3e:19:7a:b0:5b:c7:83:58:92:b6:49:34:
e9:c9:d5:f6:bd:a4:43:3a:b0:74:c7:8f:1c:cb:b9:
98:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BB:D7:A9:86:51:0D:F2:FB:5B:9B:58:EF:3C:A7:A2:A5:F3:4C:FF
X509v3 Authority Key Identifier:
keyid:52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6c:34:39:de:4c:35:f2:51:67:be:87:d2:20:53:74:8b:99:
6b:04:f2:68:b7:21:9a:fa:70:54:c9:50:69:48:dc:f8:8e:d5:
42:d6:7a:21:d8:c6:c2:31:fb:4e:16:0a:ff:2b:b6:ed:dc:57:
ee:1c:0e:b5:72:54:33:14:67:b6:b8:de:91:0d:32:61:0b:3c:
1e:5f:1c:2e:0d:91:b2:e8:a7:7c:3f:01:4f:b0:b8:d7:07:9e:
53:85:80:88:0e:85:2d:36:1a:84:7e:5f:5a:24:e0:d8:92:49:
77:36:83:c4:73:08:9f:c4:ab:13:d0:7d:94:48:28:54:26:5c:
d0:ce:cd:d1:34:34:f5:1a:e6:7c:3f:af:7a:da:aa:0c:a9:fe:
dc:b4:31:93:ee:64:bc:79:28:5f:14:7f:79:6e:19:b5:93:85:
65:ea:bc:e7:69:32:77:69:27:8d:f9:90:59:9c:fa:02:8d:dc:
73:76:72:af:8d:45:35:67:ad:0e:30:b5:00:2b:51:5c:3c:13:
ba:f4:15:81:75:31:c8:85:3e:5d:97:1d:e5:91:7f:5c:e2:40:
bc:e9:b7:d9:e4:5a:d0:0c:f5:91:aa:f8:d8:05:14:1a:31:c7:
40:67:51:38:49:9a:40:2e:05:71:f7:84:3f:c5:a4:36:c8:df:
6f:90:41:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:43 2026 by rpki-client