Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft
File: uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft (raw, json)
Hash identifier: pDj5sgKtzfCp8Md1RPyU1rkrbPz5h6uygLjleoD0TNA=
Subject key identifier: 19:28:07:D2:6D:1C:D7:4E:03:D7:49:E5:1D:42:7B:9B:80:D8:5A:7A
Authority key identifier: B9:43:D7:E4:4D:37:AC:59:10:02:63:19:F1:0C:DD:73:96:7D:97:CA
Certificate issuer: /CN=b943d7e44d37ac5910026319f10cdd73967d97ca
Certificate serial: 019D3865AE6C63713EB8CA28D4AAA31D7DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft
Manifest number: 1874
Signing time: Sun 29 Mar 2026 07:01:20 +0000
Manifest this update: Sun 29 Mar 2026 07:01:20 +0000
Manifest next update: Mon 30 Mar 2026 07:01:20 +0000
Files and hashes: 1: uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.crl (hash: mjCmCKqPBo9+SKKAGkcgLs0nRJ9OK9Zqj8NY+4r8jJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ae:6c:63:71:3e:b8:ca:28:d4:aa:a3:1d:7d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b943d7e44d37ac5910026319f10cdd73967d97ca
Validity
Not Before: Mar 29 07:01:20 2026 GMT
Not After : Mar 30 07:01:20 2026 GMT
Subject: CN=192807d26d1cd74e03d749e51d427b9b80d85a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5d:c6:c6:ab:51:95:a3:66:e7:1d:d5:ec:a3:
8d:1c:5c:e2:4a:be:68:d2:70:fc:db:c5:70:64:e1:
99:8f:2a:02:89:48:3b:4d:bc:ad:e1:55:9e:bc:e1:
0c:a5:7d:e0:b4:c9:47:5e:91:06:5b:98:40:26:46:
21:47:db:48:39:5f:6c:27:55:84:22:af:80:b7:36:
e7:84:e7:e5:94:b0:21:41:32:ff:9a:89:15:5b:f5:
f2:bf:b2:b8:14:91:5d:72:83:19:07:99:1e:7c:f0:
c8:ac:b3:38:f2:5f:31:02:ca:11:e2:78:72:d5:2f:
43:d3:4c:76:c6:b4:c2:67:d3:5e:f9:cb:da:50:1e:
3d:3d:ff:da:50:e6:9b:7f:bc:3f:b0:a4:2c:0c:51:
e7:26:be:a6:a5:92:ee:70:8b:03:dc:96:0d:f0:39:
5e:51:12:13:9a:b6:4c:66:4c:fb:49:f0:06:5f:ea:
85:71:36:5d:f8:be:c4:3e:10:08:3d:75:01:20:71:
11:fa:76:08:ab:11:5e:03:c7:5b:df:77:cb:13:8e:
74:98:51:99:ab:4c:01:0d:ba:39:d9:a9:2b:b8:43:
46:05:44:d9:f8:8e:24:c9:ba:23:39:54:9a:b6:df:
7c:0b:5b:fc:ac:7c:f2:ec:b3:26:31:57:bb:1c:09:
42:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:28:07:D2:6D:1C:D7:4E:03:D7:49:E5:1D:42:7B:9B:80:D8:5A:7A
X509v3 Authority Key Identifier:
keyid:B9:43:D7:E4:4D:37:AC:59:10:02:63:19:F1:0C:DD:73:96:7D:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:2d:17:fb:b1:3d:bd:2a:a9:82:44:10:a4:d1:37:76:f6:cd:
a3:a7:e4:4a:e3:80:8c:73:fe:2f:90:f4:b0:79:ee:3d:3f:c7:
9b:c6:61:46:4e:0c:eb:3c:69:55:1f:4e:52:96:5a:00:31:07:
b4:08:02:a8:ab:a1:5e:e1:fd:ab:c7:82:e7:51:bd:9d:74:26:
69:44:f1:51:0f:65:8b:0b:aa:c9:42:7b:1a:ba:3a:8a:b4:94:
72:89:18:38:37:01:03:c8:aa:7a:c3:10:02:ce:91:60:65:58:
5f:3d:e8:f2:ca:78:5d:95:c9:82:8a:bf:20:ab:d9:af:ff:45:
75:24:c2:8c:71:90:07:37:46:b0:aa:d6:31:e6:5a:e4:38:ef:
91:18:7e:ab:39:dd:6a:e1:a0:1b:b5:77:da:e4:d2:e5:22:88:
87:8a:64:f4:c6:8e:3e:8d:51:8b:c0:e0:75:72:56:e0:94:44:
ef:46:1e:42:3e:9f:22:05:89:f4:26:c9:96:38:57:c5:58:81:
cd:62:24:fb:47:c9:5b:c2:f0:15:1b:95:50:72:8c:4b:ee:d5:
83:d1:e7:21:c6:f6:34:82:3f:cc:02:ed:2d:79:46:42:6c:7a:
eb:d2:69:7e:a6:14:86:09:c6:6f:64:f9:de:60:fd:28:a5:f5:
eb:6f:38:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:27 2026 by rpki-client