Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.mft
File: UyClURbR4jWcx9PivGStEZ4RdbE.mft (raw, json)
Hash identifier: KD84zOyLVOUbVkO1qOjnN8PWI21iHpWs2/uE83QdopM=
Subject key identifier: F1:73:49:91:14:A2:D1:58:D2:BC:16:B9:59:A3:4C:1C:4F:99:80:62
Authority key identifier: 53:20:A5:51:16:D1:E2:35:9C:C7:D3:E2:BC:64:AD:11:9E:11:75:B1
Certificate issuer: /CN=5320a55116d1e2359cc7d3e2bc64ad119e1175b1
Certificate serial: 019D3978197CDBA266ACC11EDD87439BDDAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyClURbR4jWcx9PivGStEZ4RdbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.mft
Manifest number: 07D9
Signing time: Sun 29 Mar 2026 12:01:05 +0000
Manifest this update: Sun 29 Mar 2026 12:01:05 +0000
Manifest next update: Mon 30 Mar 2026 12:01:05 +0000
Files and hashes: 1: UyClURbR4jWcx9PivGStEZ4RdbE.crl (hash: VnYOm4VKQWUDAbHlW8jLSrfYyJfXDFJPvbDOPawjWR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UyClURbR4jWcx9PivGStEZ4RdbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:19:7c:db:a2:66:ac:c1:1e:dd:87:43:9b:dd:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5320a55116d1e2359cc7d3e2bc64ad119e1175b1
Validity
Not Before: Mar 29 12:01:05 2026 GMT
Not After : Mar 30 12:01:05 2026 GMT
Subject: CN=f173499114a2d158d2bc16b959a34c1c4f998062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:9b:45:45:7d:f0:84:58:d0:2e:9b:58:32:
68:e2:58:89:d0:7a:41:e1:09:38:46:b4:bd:10:97:
8d:b1:58:e7:d2:d1:17:b5:5b:91:f9:8b:b8:b6:02:
19:f4:4e:8d:a7:56:9a:43:dc:3b:b2:40:2d:b9:43:
7a:8d:58:41:8e:f4:3b:df:05:df:d6:04:8f:59:c4:
bf:36:60:9d:79:8a:0c:b5:36:ce:8e:12:5a:6d:f9:
46:1a:40:52:55:4a:51:b7:f3:88:88:d2:ae:09:de:
d8:c4:0f:9f:35:ce:4a:2d:79:4c:ae:2c:cc:ed:47:
00:e7:7b:58:c7:6b:56:b6:b7:b9:88:81:71:dd:82:
c9:fa:71:00:d4:f1:be:99:a6:bd:c8:60:54:21:fb:
e5:d6:94:f6:e0:4a:d2:cf:57:b0:45:11:1f:b8:a4:
cf:b6:bf:f1:11:77:47:8b:5d:b9:f5:39:f6:e8:6c:
de:96:38:6c:2a:70:d3:a4:0c:c7:34:68:2c:de:99:
7d:b1:f3:3d:69:15:6d:5c:a9:1c:36:1b:70:77:26:
72:3e:fd:3f:ac:c9:17:de:65:dc:e1:70:bb:1c:16:
ed:5d:e3:94:9d:a5:42:61:2c:6a:b9:23:2f:ba:3f:
3b:0c:af:4f:59:82:f9:82:82:52:4c:5c:0e:c9:1b:
ff:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:73:49:91:14:A2:D1:58:D2:BC:16:B9:59:A3:4C:1C:4F:99:80:62
X509v3 Authority Key Identifier:
keyid:53:20:A5:51:16:D1:E2:35:9C:C7:D3:E2:BC:64:AD:11:9E:11:75:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyClURbR4jWcx9PivGStEZ4RdbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:61:8b:a1:40:fd:0c:7b:e9:8c:27:9e:86:ac:0e:1b:8e:52:
a3:74:c8:2a:ff:2b:0b:45:41:a2:f6:8d:e0:a0:21:2c:53:f9:
14:41:bf:a7:a7:db:49:af:e5:8d:f8:a2:2e:e9:3b:d2:2c:43:
c2:94:b7:6a:d4:5e:56:da:57:93:d9:3e:ee:08:68:3c:23:0b:
71:3e:cf:2f:06:2b:2b:5f:36:48:e6:d4:36:a0:7c:08:32:38:
4e:d8:d4:5b:27:4d:f2:c5:59:5c:d7:fb:e1:03:07:7b:03:81:
26:e6:d5:cc:57:b3:1e:01:de:98:54:ab:b1:fb:15:11:87:d9:
34:b4:7f:a5:2e:c0:fc:5f:dd:b8:bd:ef:41:43:f9:3f:f6:86:
47:a1:db:10:f9:26:21:8f:a2:bd:bf:b5:c2:95:f6:3f:ad:4c:
56:28:2d:68:2a:79:13:7d:bb:ab:e2:d6:2b:47:e4:b4:24:b3:
42:c9:fe:d9:d6:33:cd:8f:91:06:24:7b:8f:b7:e8:1e:51:ef:
b4:60:a7:df:e9:90:46:66:99:e4:e6:38:5a:57:8c:2e:26:1c:
a2:7b:e8:2e:24:2b:0a:21:40:3a:77:19:94:85:9b:c7:04:4f:
f9:0d:e0:0a:ab:81:0f:fb:8b:90:53:89:b4:d7:4d:8c:21:a7:
95:49:67:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:42 2026 by rpki-client