Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
File: Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft (raw, json)
Hash identifier: DiFh7kB6pSwxGGOhR6wFxMqr3Np3TpkY8dzG9hQSAtA=
Subject key identifier: 2B:4C:20:23:C3:BF:22:38:8D:3E:41:8D:B3:E9:F3:0C:3A:CE:A8:E0
Authority key identifier: 51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F
Certificate issuer: /CN=51fe4d48aa013d40e06c312ff710489b20dfe07f
Certificate serial: 019D38656E26FC427ACE4A39518B3BE9A62B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
Manifest number: 0F74
Signing time: Sun 29 Mar 2026 07:01:04 +0000
Manifest this update: Sun 29 Mar 2026 07:01:04 +0000
Manifest next update: Mon 30 Mar 2026 07:01:04 +0000
Files and hashes: 1: Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl (hash: xkpBXJmxAdj1JPUqWV5v/9A8caOIAoCP+wU93+q4puc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:6e:26:fc:42:7a:ce:4a:39:51:8b:3b:e9:a6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51fe4d48aa013d40e06c312ff710489b20dfe07f
Validity
Not Before: Mar 29 07:01:04 2026 GMT
Not After : Mar 30 07:01:04 2026 GMT
Subject: CN=2b4c2023c3bf22388d3e418db3e9f30c3acea8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:55:8c:6a:bb:da:95:d6:5d:3b:bd:dc:75:
59:5b:af:92:87:6a:fc:54:8d:4a:3e:a2:69:8a:b7:
9a:0e:6a:d3:b0:12:0b:6f:bd:67:1e:cf:43:89:cc:
42:5c:76:7a:74:f5:58:7b:28:ff:f8:ad:91:d8:28:
d5:a3:2d:74:1a:0a:7b:0f:a7:8a:15:8f:77:87:0a:
b2:c4:66:39:56:11:bf:35:05:e4:b6:07:e7:a0:e3:
64:f1:c4:e4:70:f1:6d:3d:d3:d5:91:93:fd:d0:28:
f2:c9:8d:e6:d4:11:95:9a:40:34:88:84:d5:c7:84:
0b:a6:cc:18:91:be:4d:e0:a0:3e:8d:f3:77:6f:b9:
94:fd:06:de:0f:77:87:21:1a:3a:77:cd:9c:5d:64:
98:46:36:9a:f8:02:af:30:11:98:b6:d0:91:04:f5:
a8:cb:40:cc:a6:4a:b6:3c:3d:6b:f9:38:af:72:a0:
39:b0:68:61:a3:80:da:a8:e5:ae:0d:0c:59:b0:ea:
9f:46:e6:b5:75:57:51:9b:48:58:9d:0e:61:5b:65:
c7:cb:00:1f:1f:bf:25:9b:00:ae:18:73:f6:cd:76:
d3:16:d5:f4:7b:98:de:0f:d7:96:45:4d:a4:65:b0:
c1:b9:fe:1b:5c:7b:8e:21:ac:ad:ea:01:a4:fb:c4:
a4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4C:20:23:C3:BF:22:38:8D:3E:41:8D:B3:E9:F3:0C:3A:CE:A8:E0
X509v3 Authority Key Identifier:
keyid:51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:cb:ee:6e:12:d7:2f:8f:71:b7:3b:7d:1c:73:a6:9a:0d:4e:
de:33:bd:ee:29:04:23:7a:12:ec:12:0e:d0:60:38:e2:db:33:
4c:36:c4:04:d5:35:a0:29:4b:8f:53:ae:c0:76:c9:2a:78:42:
45:ee:f4:b0:12:8e:df:64:ab:de:de:2f:ea:dc:4e:2d:a8:99:
09:11:dd:5d:8f:a5:37:fa:a8:75:ff:d9:99:99:1e:67:f9:31:
dd:27:23:7a:65:38:ea:99:80:73:be:26:ca:62:42:c5:54:cb:
ed:ff:7c:bb:da:57:32:6f:a9:8a:58:d7:ea:69:b6:09:90:44:
82:b8:28:a3:36:53:1e:ab:31:16:7b:9d:72:fd:b3:58:76:2b:
9d:39:33:6f:ea:a5:bb:ed:15:7c:6c:51:cb:a8:7e:49:f5:34:
fa:ec:f7:13:96:39:e2:c7:6e:63:47:c9:7a:99:a6:4d:6d:48:
d3:9f:d6:b2:f0:44:ca:eb:f3:67:ce:0d:e8:b1:6b:d2:be:d6:
54:7a:5f:5d:cd:63:12:1f:de:cc:67:20:60:9c:18:bd:98:51:
15:5b:4d:91:ec:39:d1:3c:66:62:1d:e0:03:0e:85:2e:17:ec:
bc:c2:54:46:b8:41:cc:18:81:f7:d2:aa:d3:3d:b6:3d:8e:80:
df:3c:de:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:25 2026 by rpki-client