Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
File: pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft (raw, json)
Hash identifier: sjQLnzLtfAxWb0dcUhC5yqJGgIrCm6oV7DYcO2wczC4=
Subject key identifier: 2C:15:A9:AB:2A:34:5E:EF:28:22:F8:6B:7A:95:B0:0E:E5:E5:A3:97
Authority key identifier: A5:4A:9E:27:5C:5C:17:80:9B:8F:CF:8C:0F:E0:B5:F6:32:9C:EE:EF
Certificate issuer: /CN=a54a9e275c5c17809b8fcf8c0fe0b5f6329ceeef
Certificate serial: 019D3865566FC9E4C1A3282F12D758B0FFD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
Manifest number: 11AC
Signing time: Sun 29 Mar 2026 07:00:58 +0000
Manifest this update: Sun 29 Mar 2026 07:00:58 +0000
Manifest next update: Mon 30 Mar 2026 07:00:58 +0000
Files and hashes: 1: pUqeJ1xcF4Cbj8-MD-C19jKc7u8.crl (hash: YLX5YTT+S546qH2QW0YBEBkMniu/4BS96oLnHyU+GbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:56:6f:c9:e4:c1:a3:28:2f:12:d7:58:b0:ff:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a54a9e275c5c17809b8fcf8c0fe0b5f6329ceeef
Validity
Not Before: Mar 29 07:00:58 2026 GMT
Not After : Mar 30 07:00:58 2026 GMT
Subject: CN=2c15a9ab2a345eef2822f86b7a95b00ee5e5a397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0d:35:d0:35:17:fe:da:a0:b0:f5:b9:bd:6e:
6d:ee:e5:3d:00:4f:5e:0d:2b:40:ab:ea:fa:05:ef:
ee:2b:c7:a2:89:0e:21:09:bd:0c:ed:1b:8f:08:0f:
17:3d:f2:c2:f5:32:16:05:8c:6d:01:ef:4c:99:63:
92:9d:1d:c4:2c:55:10:af:cf:c3:9f:71:c3:0d:91:
54:9d:ac:9c:f2:f2:87:af:53:e4:1f:10:50:6e:c2:
49:6d:07:76:dc:89:4e:39:55:b5:da:ed:06:61:d4:
6c:d1:a6:f0:65:7b:1f:d4:29:92:0d:7e:af:c8:95:
ce:a0:41:94:3a:dc:fd:24:2d:e2:b2:60:e6:f6:76:
89:d2:af:9b:d9:b9:22:6f:cd:56:24:fb:ce:cb:55:
ae:11:ef:de:03:88:78:51:59:94:a9:63:b2:66:59:
96:48:1b:2a:14:71:6b:a4:e6:b9:a5:f9:45:99:e4:
82:02:c8:ef:5d:c7:fe:97:3d:ec:c4:fd:17:4d:27:
ec:28:15:81:76:a3:4c:6a:85:5e:90:3c:9a:60:77:
d1:cd:22:15:9e:42:b9:13:8f:25:5e:e1:6e:e0:df:
1c:ed:cd:dd:47:07:e0:cd:be:40:ae:e2:52:24:87:
2f:fb:3d:fc:57:b1:fa:0b:8e:41:df:5f:d9:7f:c4:
04:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:15:A9:AB:2A:34:5E:EF:28:22:F8:6B:7A:95:B0:0E:E5:E5:A3:97
X509v3 Authority Key Identifier:
keyid:A5:4A:9E:27:5C:5C:17:80:9B:8F:CF:8C:0F:E0:B5:F6:32:9C:EE:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:00:c9:88:f1:64:75:90:25:c7:be:b6:f3:ca:98:b9:0c:37:
7a:9c:b7:88:00:28:ff:2c:1f:03:1a:a5:21:3d:94:39:e6:0a:
60:25:33:45:1b:57:5d:b2:63:4b:c8:73:f8:1a:e5:37:f7:5f:
2d:92:64:dd:50:d8:f3:79:77:3b:36:05:77:d5:35:57:38:0d:
1a:fc:38:0b:c4:e3:39:4b:b3:35:34:a2:18:fa:b0:d0:b2:33:
37:f1:16:c7:5a:83:79:0d:4d:bd:a5:ec:0e:d6:ef:72:99:5b:
96:31:0a:8b:6d:20:f7:56:85:cf:ca:cd:46:c6:08:6f:5c:a6:
e8:f1:e3:5e:47:a1:6d:99:28:f8:a0:98:9d:91:70:6e:a5:a1:
53:58:03:09:3d:76:81:23:ea:b4:01:ff:cd:6c:62:b8:bc:08:
2e:0d:98:ea:c8:bd:0a:5b:48:40:45:95:5a:fe:b5:de:f2:3a:
83:ed:77:f3:5d:97:30:09:17:a7:ab:47:4a:14:4a:42:aa:84:
f0:3e:be:85:e2:5c:fa:bb:6c:e7:34:07:9b:89:94:97:81:e5:
8c:11:80:7b:c8:61:8e:3b:6c:80:14:b8:c0:c6:2b:50:c0:9a:
2a:81:f8:0d:d9:dc:6e:e4:ba:b8:ba:d5:5b:3d:36:96:17:5d:
51:70:2b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:20 2026 by rpki-client