Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
File: ur8nIaXXgzW3uX22OuxDXJyji8c.mft (raw, json)
Hash identifier: sKNKqobgtBZ3x/ZnoACFCTg9iYNW8ZYateghkG6oHbA=
Subject key identifier: 4D:22:C4:58:E0:20:1E:6C:A8:4F:D1:86:E7:B0:B3:6C:42:4D:3D:66
Authority key identifier: BA:BF:27:21:A5:D7:83:35:B7:B9:7D:B6:3A:EC:43:5C:9C:A3:8B:C7
Certificate issuer: /CN=babf2721a5d78335b7b97db63aec435c9ca38bc7
Certificate serial: 019D3865ADAF2123FAA475BD0BC869259AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
Manifest number: 0A89
Signing time: Sun 29 Mar 2026 07:01:20 +0000
Manifest this update: Sun 29 Mar 2026 07:01:20 +0000
Manifest next update: Mon 30 Mar 2026 07:01:20 +0000
Files and hashes: 1: ur8nIaXXgzW3uX22OuxDXJyji8c.crl (hash: vPM8P9P3RkiwSsfAjQyT/jxsxK2mjDUW/1na/CQkYMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ad:af:21:23:fa:a4:75:bd:0b:c8:69:25:9a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=babf2721a5d78335b7b97db63aec435c9ca38bc7
Validity
Not Before: Mar 29 07:01:20 2026 GMT
Not After : Mar 30 07:01:20 2026 GMT
Subject: CN=4d22c458e0201e6ca84fd186e7b0b36c424d3d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:92:8a:34:ff:41:9a:30:01:53:aa:1c:83:
aa:f7:e5:87:a2:81:47:36:ba:70:11:77:5e:13:d1:
fe:d2:04:c1:5e:9b:0c:d1:1c:8c:52:0e:f7:ab:2c:
02:2a:01:d3:11:83:91:9b:4a:07:b5:8e:e4:f9:aa:
0d:53:de:e9:55:b7:57:2f:da:d4:2e:36:54:c7:33:
c9:5f:2e:52:b4:30:b4:88:87:60:c1:83:34:c6:5e:
6d:7e:1b:5d:03:45:b2:4b:fa:f4:f5:99:9d:d8:48:
d8:dc:f9:b3:53:5c:ba:d2:1c:74:19:28:15:a7:39:
23:8c:96:a4:2c:6d:e3:82:e3:a0:83:fc:72:b1:e7:
90:52:db:ae:80:04:2f:0a:24:38:d9:bf:2a:25:0f:
47:69:df:4d:4f:15:6f:c4:bb:94:33:e4:65:44:a2:
8a:f8:15:e7:db:42:42:18:b2:83:8c:41:8e:d0:f9:
f2:a3:15:95:db:12:84:9b:6a:56:07:0a:1e:44:c8:
62:3c:86:1d:f4:cc:8a:66:3b:4d:73:a9:18:64:a9:
8e:f0:7e:d9:58:d9:16:e7:85:08:74:90:47:b8:9a:
aa:ba:49:5a:b3:0b:7e:33:1f:fe:19:e2:34:64:39:
0e:c6:1c:d3:78:75:68:9b:4c:65:12:4e:b6:df:ea:
ef:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:22:C4:58:E0:20:1E:6C:A8:4F:D1:86:E7:B0:B3:6C:42:4D:3D:66
X509v3 Authority Key Identifier:
keyid:BA:BF:27:21:A5:D7:83:35:B7:B9:7D:B6:3A:EC:43:5C:9C:A3:8B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:61:2c:75:33:f3:10:3b:a9:52:6c:08:9c:db:04:19:f4:47:
ed:d0:f1:2a:78:f1:d7:17:d0:fc:e4:00:ac:26:7a:df:f2:c9:
b6:91:bd:ae:36:68:91:6a:7a:81:2c:4f:aa:a6:4d:31:01:88:
8f:61:3a:60:89:62:8e:d3:69:20:37:e6:4a:e6:e7:71:9a:4e:
2e:be:b4:5c:e6:7a:c0:a9:1f:23:2f:b1:48:5c:56:15:3d:27:
62:bb:2b:24:ca:8c:fe:61:80:a0:61:3f:16:b4:32:fe:ce:a5:
62:59:f6:37:6c:03:72:a2:dc:cd:1c:6b:fb:58:c8:8b:23:81:
87:58:da:eb:38:48:ef:83:2f:6f:db:c0:dd:48:e7:30:ee:3d:
79:93:44:42:36:ca:a1:9c:78:6e:e3:cf:3b:ab:8e:e0:9e:69:
bb:7c:58:e3:8b:82:d1:9a:e3:79:6f:bd:7e:6c:3c:c8:dc:d7:
ba:ad:f3:cf:7b:33:7f:94:47:11:7f:48:17:8a:f2:de:79:a2:
68:61:45:08:b1:cc:69:5d:ee:99:07:3b:83:29:45:d3:97:32:
59:bb:64:17:79:2e:8c:fc:88:4d:72:f2:80:ea:a9:20:db:e0:
db:09:d4:53:95:44:ca:e8:0f:22:51:9b:f3:b1:d8:d9:9c:6f:
c4:cf:00:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:47:39 2026 by rpki-client