Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d43c2f-ffa9-4f2b-a831-ad0b5dcf3303/1/U_ZmAbfOrAjBggeEBk5XHbmIe-s.mft
File: U_ZmAbfOrAjBggeEBk5XHbmIe-s.mft (raw, json)
Hash identifier: o3vzVkkis5KhLee/rfk6QMaMj1exbLVfswsroMkJJ8c=
Subject key identifier: EB:D1:30:A0:28:C4:A4:4A:DC:25:3C:F1:6F:BF:8C:24:FC:D9:E3:3D
Authority key identifier: 53:F6:66:01:B7:CE:AC:08:C1:82:07:84:06:4E:57:1D:B9:88:7B:EB
Certificate issuer: /CN=53f66601b7ceac08c1820784064e571db9887beb
Certificate serial: 019D375269E31BFAEBD219072A0B043597B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_ZmAbfOrAjBggeEBk5XHbmIe-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d43c2f-ffa9-4f2b-a831-ad0b5dcf3303/1/U_ZmAbfOrAjBggeEBk5XHbmIe-s.mft
Manifest number: 01B7
Signing time: Sun 29 Mar 2026 02:00:41 +0000
Manifest this update: Sun 29 Mar 2026 02:00:41 +0000
Manifest next update: Mon 30 Mar 2026 02:00:41 +0000
Files and hashes: 1: U_ZmAbfOrAjBggeEBk5XHbmIe-s.crl (hash: sO3Zs7sG9Fxldav6kyErGEsj2CuslS8oxCmb3PU8DWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d43c2f-ffa9-4f2b-a831-ad0b5dcf3303/1/U_ZmAbfOrAjBggeEBk5XHbmIe-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d43c2f-ffa9-4f2b-a831-ad0b5dcf3303/1/U_ZmAbfOrAjBggeEBk5XHbmIe-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_ZmAbfOrAjBggeEBk5XHbmIe-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:69:e3:1b:fa:eb:d2:19:07:2a:0b:04:35:97:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f66601b7ceac08c1820784064e571db9887beb
Validity
Not Before: Mar 29 02:00:41 2026 GMT
Not After : Mar 30 02:00:41 2026 GMT
Subject: CN=ebd130a028c4a44adc253cf16fbf8c24fcd9e33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:b6:80:74:cf:fa:08:0d:59:82:9d:f7:05:
c8:82:a5:11:ba:97:0f:ee:d4:b0:57:7f:76:26:93:
76:a8:fa:ab:86:5b:5b:a1:f0:a7:6c:0c:fa:47:56:
41:75:1d:18:8a:2d:5c:79:37:16:74:71:89:40:9f:
4e:7b:fc:df:39:b2:4c:1b:e5:d5:c3:c1:27:83:1e:
17:d7:8e:ac:58:aa:b4:8a:8c:99:56:94:3b:02:02:
f3:4c:01:a8:76:0e:18:6b:20:2d:97:c1:85:b8:bc:
22:9e:b7:b7:7b:fd:7b:46:8f:0a:98:bb:2d:43:d5:
b1:33:eb:0e:ef:28:d4:da:a2:1a:7b:0c:b4:77:55:
ff:e3:f2:35:a7:ed:d0:86:f1:ba:50:03:a4:f8:e2:
18:3f:8d:68:c5:c5:07:aa:41:cb:f9:a9:3a:3c:53:
41:37:5d:41:5a:fa:e1:fe:76:89:af:9e:77:e5:9a:
07:b5:ce:0d:ed:87:37:ef:7b:3f:5e:cc:f5:18:ca:
c7:00:d5:63:e4:62:bf:47:f8:16:ab:5e:5b:c6:d4:
89:c9:33:cd:33:c6:26:34:ce:e6:0e:db:64:0c:06:
7b:c2:38:3c:d5:1e:85:a7:8a:74:06:05:ff:ff:e7:
c5:b3:15:b4:96:bb:e8:f6:76:a0:c2:3a:cb:6a:64:
a4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D1:30:A0:28:C4:A4:4A:DC:25:3C:F1:6F:BF:8C:24:FC:D9:E3:3D
X509v3 Authority Key Identifier:
keyid:53:F6:66:01:B7:CE:AC:08:C1:82:07:84:06:4E:57:1D:B9:88:7B:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_ZmAbfOrAjBggeEBk5XHbmIe-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d43c2f-ffa9-4f2b-a831-ad0b5dcf3303/1/U_ZmAbfOrAjBggeEBk5XHbmIe-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d43c2f-ffa9-4f2b-a831-ad0b5dcf3303/1/U_ZmAbfOrAjBggeEBk5XHbmIe-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:9c:ec:de:12:dd:d9:d0:77:d0:3f:96:c7:78:17:4a:74:cf:
77:b4:89:80:14:98:46:9d:0c:d1:66:85:78:ce:41:a8:aa:f2:
42:76:67:67:6d:66:88:ea:db:33:e1:e7:43:4f:db:72:f7:78:
66:13:eb:15:11:34:0c:db:81:5a:fd:89:79:67:2f:18:7f:b6:
8a:28:67:6d:2b:2f:34:8a:d4:f9:ca:47:e2:8e:9d:6d:32:8d:
72:52:8b:b0:e8:f1:9f:80:77:a4:d9:d3:c6:2b:6b:ee:8f:ad:
8f:e7:70:52:47:cb:84:9f:87:1a:14:e8:fd:7c:bb:ed:9e:f7:
e9:67:bb:c5:6b:72:85:4b:8b:e4:ef:c6:83:ad:eb:d3:ec:bf:
d0:95:28:c1:18:f9:86:fa:07:96:b3:af:4c:be:fd:d8:d7:48:
4e:39:56:92:04:a6:14:b8:b3:16:ab:65:5e:d1:54:d8:1e:d4:
6f:f4:9b:7c:1d:f5:02:67:88:47:48:a1:f9:59:fe:b2:d0:76:
9a:27:f6:0f:eb:f4:92:5b:13:96:70:93:dd:51:f0:a2:b0:0e:
40:8a:1f:76:05:77:e6:5a:ae:fe:38:5b:86:00:bf:6a:09:a4:
06:25:57:b8:68:a0:a3:87:ba:08:e5:58:f2:32:30:6b:13:03:
71:d2:5e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:20 2026 by rpki-client