Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/UZp1yrw_m8vraCB5f_1zzvwb-X8.mft
File: UZp1yrw_m8vraCB5f_1zzvwb-X8.mft (raw, json)
Hash identifier: 4QCfdBfu0QN/mPAcOvtdwMyeeiGzkCWeGMOgOxZ7rjk=
Subject key identifier: 4C:05:EB:96:01:A9:77:1E:DE:68:7C:12:C7:29:FC:47:32:36:95:49
Authority key identifier: 51:9A:75:CA:BC:3F:9B:CB:EB:68:20:79:7F:FD:73:CE:FC:1B:F9:7F
Certificate issuer: /CN=519a75cabc3f9bcbeb6820797ffd73cefc1bf97f
Certificate serial: 019D3A1C6EA189FD028C1A1B0D26F46F7F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZp1yrw_m8vraCB5f_1zzvwb-X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/UZp1yrw_m8vraCB5f_1zzvwb-X8.mft
Manifest number: A4
Signing time: Sun 29 Mar 2026 15:00:34 +0000
Manifest this update: Sun 29 Mar 2026 15:00:34 +0000
Manifest next update: Mon 30 Mar 2026 15:00:34 +0000
Files and hashes: 1: UZp1yrw_m8vraCB5f_1zzvwb-X8.crl (hash: LIVNBO5tfsW3WFJmPPxU9Ixq1c/2kAbhkrHAV5A91P8=)
2: u3Cz313Fpbg8A0UgQP1jeAhCyKg.asa (hash: D6JOFCXQmCbms2DaHL0CRRDHnlHYcP1xLAqC2NoBZd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/UZp1yrw_m8vraCB5f_1zzvwb-X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/UZp1yrw_m8vraCB5f_1zzvwb-X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZp1yrw_m8vraCB5f_1zzvwb-X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:6e:a1:89:fd:02:8c:1a:1b:0d:26:f4:6f:7f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519a75cabc3f9bcbeb6820797ffd73cefc1bf97f
Validity
Not Before: Mar 29 15:00:34 2026 GMT
Not After : Mar 30 15:00:34 2026 GMT
Subject: CN=4c05eb9601a9771ede687c12c729fc4732369549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:8b:4f:de:62:3f:68:a4:bb:a4:c6:bd:ed:
25:73:0b:18:49:e5:dc:64:2e:41:d1:70:9c:b0:de:
12:1d:01:0e:d6:ee:b0:8d:af:83:88:ac:1c:78:d3:
e0:04:e4:48:6c:95:cc:0d:7b:ee:9d:38:ef:fe:31:
38:63:35:35:17:a4:69:b2:03:df:49:a1:24:97:ad:
17:ed:f5:36:07:fd:0b:1a:7b:60:34:55:d5:92:bc:
57:47:df:3b:b8:09:79:49:e8:cc:c8:e3:71:b7:52:
d2:8d:92:5b:86:17:89:db:4c:ef:ad:03:0b:c8:31:
7a:8a:75:8a:12:c8:4b:c7:f8:62:30:3d:fc:09:e5:
9c:fe:5e:bb:3c:47:dd:d2:12:e2:5e:71:c8:f1:be:
6e:4c:d2:fb:05:9a:2b:af:7f:d1:c0:fe:de:df:cb:
f9:a6:16:e9:3b:4c:4f:a2:71:ee:49:66:ab:f6:a6:
ce:6c:44:6c:9f:fc:e9:6f:da:3d:00:4e:0c:ca:ca:
60:15:9e:28:65:9a:ff:40:22:58:40:65:41:5a:16:
89:24:63:8f:0a:8d:b0:5c:2b:64:23:64:ba:f3:6d:
eb:78:b6:0c:59:dc:b0:28:05:6d:89:b4:a2:7f:ed:
1a:38:08:2c:5f:16:45:30:6c:90:ef:da:35:a7:f1:
80:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:05:EB:96:01:A9:77:1E:DE:68:7C:12:C7:29:FC:47:32:36:95:49
X509v3 Authority Key Identifier:
keyid:51:9A:75:CA:BC:3F:9B:CB:EB:68:20:79:7F:FD:73:CE:FC:1B:F9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZp1yrw_m8vraCB5f_1zzvwb-X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/UZp1yrw_m8vraCB5f_1zzvwb-X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/UZp1yrw_m8vraCB5f_1zzvwb-X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:84:91:a2:db:17:40:ca:f7:3c:89:40:b9:19:7b:18:81:08:
ef:d9:76:ce:39:cd:b1:c9:1d:af:8c:6c:47:ba:fb:1e:20:61:
86:43:f5:4c:12:79:70:03:16:83:f8:b7:c0:f3:b7:77:d4:9b:
42:55:b7:d9:d7:cb:77:0e:60:18:76:8d:c6:8c:1f:f2:37:5e:
44:bd:bd:47:bb:e1:1e:87:c6:b7:ab:60:7d:11:bb:28:db:84:
ac:8b:ec:c8:1e:50:9f:7a:25:26:84:4d:d9:bf:58:ab:79:46:
3a:17:88:8c:d4:e2:fb:0e:45:fc:b3:cc:69:b4:98:2e:60:7b:
9f:3f:f8:b2:96:f4:cb:59:55:fe:a7:90:8a:4b:41:98:20:6d:
ba:be:6f:7e:6c:42:32:68:f4:82:dd:aa:17:d2:66:40:54:d8:
ca:53:8e:cf:2e:cf:0c:a1:50:97:bc:c2:9b:33:c1:ca:ed:62:
d4:10:7c:56:47:8c:5e:e7:c3:97:3e:8f:23:d3:b9:49:23:57:
ee:ac:e8:2d:07:5c:3a:21:13:ec:7b:db:a3:2b:ef:4c:4e:56:
b7:38:ba:08:39:80:28:25:4a:cf:0e:d4:ad:fa:5c:3a:49:54:
15:58:86:e1:df:7f:a2:3b:72:b7:32:d0:67:52:78:f8:7c:e8:
4e:9b:7d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:08 2026 by rpki-client