Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft
File: 1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft (raw, json)
Hash identifier: sZ4+TCZ8HRZJTo8EL1gXUx9Rfmvuqd5ToW0v9gJ0Ny8=
Subject key identifier: 33:8D:D8:B2:D1:5D:79:33:A3:A7:BC:14:7D:D0:D6:78:07:10:EE:88
Authority key identifier: FA:EB:F1:07:F0:5F:BA:9D:4E:4C:A6:1A:EA:0C:17:72:51:9F:5E:38
Certificate issuer: /CN=faebf107f05fba9d4e4ca61aea0c1772519f5e38
Certificate serial: 019D397820040FADF3F35F79D27C3EDD7478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uvxB_Bfup1OTKYa6gwXclGfXjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft
Manifest number: 0252
Signing time: Sun 29 Mar 2026 12:01:06 +0000
Manifest this update: Sun 29 Mar 2026 12:01:06 +0000
Manifest next update: Mon 30 Mar 2026 12:01:06 +0000
Files and hashes: 1: 1-uvxB_Bfup1OTKYa6gwXclGfXjg.crl (hash: /dEwZbK6TCdiJn6VUeudyQDk1bLU2YeM40FTP6AXbmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uvxB_Bfup1OTKYa6gwXclGfXjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:20:04:0f:ad:f3:f3:5f:79:d2:7c:3e:dd:74:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faebf107f05fba9d4e4ca61aea0c1772519f5e38
Validity
Not Before: Mar 29 12:01:06 2026 GMT
Not After : Mar 30 12:01:06 2026 GMT
Subject: CN=338dd8b2d15d7933a3a7bc147dd0d6780710ee88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:01:de:60:6a:09:33:10:84:1b:84:7b:82:0b:
e7:bc:24:75:52:b0:cf:6a:11:59:7d:1e:2a:41:06:
1c:99:38:73:c9:f2:ab:9b:72:9e:d5:2e:53:cc:6f:
c4:bb:a1:7a:f0:46:6d:d4:63:51:6c:e2:1c:25:93:
64:0b:c2:3f:42:3f:d8:4e:60:ea:b8:3b:b3:bf:a8:
97:ff:1a:ef:68:24:c4:c4:44:9e:d4:20:95:40:4e:
7f:d2:3d:73:24:e4:f9:db:32:88:56:8c:71:5e:76:
a8:02:6f:d3:f1:1c:1d:d0:5b:b5:86:95:f9:cd:ce:
2b:18:90:4a:06:3f:1a:27:b3:c0:95:14:61:cb:fa:
fb:2d:e6:c7:da:d9:d6:b8:bf:21:66:70:4f:c4:dd:
04:9b:15:65:22:ed:a7:3e:d0:78:61:f1:46:4e:e1:
6c:84:a2:8d:ff:fb:13:72:f2:73:cb:ae:86:1f:1a:
f0:dc:83:db:3b:2d:03:b7:7e:41:ec:55:82:1c:51:
8f:d1:ef:64:32:10:cb:b8:7e:7d:ec:fa:e7:37:93:
e7:b7:2b:db:09:1c:d9:04:74:7f:d1:18:3a:9e:f8:
89:e2:2a:6b:d9:fd:49:3e:e0:74:38:d6:6b:8e:cc:
04:32:31:ec:15:3f:f9:6e:07:74:9b:23:0c:53:b4:
2c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8D:D8:B2:D1:5D:79:33:A3:A7:BC:14:7D:D0:D6:78:07:10:EE:88
X509v3 Authority Key Identifier:
keyid:FA:EB:F1:07:F0:5F:BA:9D:4E:4C:A6:1A:EA:0C:17:72:51:9F:5E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uvxB_Bfup1OTKYa6gwXclGfXjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4f:d8:d3:f0:4b:69:5d:23:5f:8a:b3:b9:34:dc:91:49:8d:
cd:6b:2e:97:71:f9:a3:fe:58:19:14:17:eb:00:9e:fd:b8:58:
cb:9d:82:9b:ea:9e:3b:01:09:01:c5:11:25:e9:74:e9:a6:48:
d4:37:ea:d0:cd:30:d1:58:1a:73:dc:fe:f9:35:7e:b7:f4:fb:
18:ec:0a:56:31:d1:12:25:f0:16:3c:ed:a1:9d:9c:17:cf:34:
da:89:89:b7:e5:bf:00:63:d9:69:ee:d2:d7:5e:c4:b7:bf:f3:
c6:d3:c8:d4:4a:d5:42:1c:40:a0:6b:d6:16:fd:4e:4c:7a:a1:
79:81:56:b2:95:b7:7c:fa:41:ac:fd:95:67:a5:8f:f8:99:9e:
bc:c9:5b:df:76:b6:28:e8:1e:c1:6d:c0:82:4a:ed:2b:35:59:
3b:1f:d8:0b:75:94:ec:b9:9c:f9:64:b4:08:bf:7a:27:02:77:
00:09:da:5c:43:b3:ea:06:e0:8f:85:0f:bc:3e:9d:38:d3:02:
fd:28:cf:c3:2c:a6:e8:57:bb:ab:c6:4f:ff:4a:3e:bf:b2:f6:
d5:70:74:c7:d8:20:fd:01:c6:b6:35:25:d5:f4:1f:1e:73:fa:
d3:6a:eb:e7:46:c9:91:15:8e:e1:14:c9:56:d5:a9:83:f1:93:
1b:9c:02:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:40 2026 by rpki-client