Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
File: Uw4xZLFq4JEmhPqpDkORTeH91aU.mft (raw, json)
Hash identifier: Vz6g5Uhj/aVrRm9g+HjWLQj8ZcMAVRTCZxVCL18BlAU=
Subject key identifier: 43:CC:C4:F8:8B:A6:AF:94:D2:A5:E1:95:10:AF:D1:35:10:36:05:45
Authority key identifier: 53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5
Certificate issuer: /CN=530e3164b16ae0912684faa90e43914de1fdd5a5
Certificate serial: 019D3865668A8F15E8797307CDCFC5123654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
Manifest number: 1142
Signing time: Sun 29 Mar 2026 07:01:02 +0000
Manifest this update: Sun 29 Mar 2026 07:01:02 +0000
Manifest next update: Mon 30 Mar 2026 07:01:02 +0000
Files and hashes: 1: Uw4xZLFq4JEmhPqpDkORTeH91aU.crl (hash: W9HKzwEQH71k6at1f3JbX9fiECWnImsvK27BJg6lMic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:66:8a:8f:15:e8:79:73:07:cd:cf:c5:12:36:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=530e3164b16ae0912684faa90e43914de1fdd5a5
Validity
Not Before: Mar 29 07:01:02 2026 GMT
Not After : Mar 30 07:01:02 2026 GMT
Subject: CN=43ccc4f88ba6af94d2a5e19510afd13510360545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5d:e4:50:57:ea:5e:c8:06:36:d2:f4:9b:d4:
1d:f6:02:2a:dc:d1:53:a1:91:33:35:56:31:f4:8a:
60:97:98:e8:29:23:86:6e:58:d8:94:38:e5:16:58:
a9:f0:ac:41:aa:94:d9:f0:f1:83:93:b7:15:f1:e9:
e6:15:43:9d:cc:8b:15:6c:02:fe:d0:2a:91:dc:13:
af:d1:e9:a9:e8:97:e0:50:51:30:f2:83:13:8a:ba:
ea:b0:ca:5a:2d:6b:f0:c5:b9:d0:f7:e7:b4:cf:b5:
bf:ec:eb:c2:d4:1a:90:bb:4c:6b:62:85:dc:57:75:
6d:af:54:7f:be:3b:12:70:35:4c:8b:29:ae:bf:ea:
3c:c5:b7:2c:b2:fd:9e:21:86:e6:c6:3d:60:5e:30:
1a:4f:b1:b9:4d:3a:4f:19:64:de:1d:e3:f3:5b:52:
b5:09:1d:d5:c4:98:e4:32:4c:c7:15:f5:d3:06:28:
59:13:47:55:37:64:05:e3:aa:4f:cd:1b:8a:c2:97:
d8:73:87:33:d2:6a:f8:6d:ab:9a:9d:5b:c9:6e:94:
02:39:78:36:75:2d:29:4d:2d:a4:5b:1d:3a:3d:cc:
94:f1:b9:8b:79:cf:16:70:4d:ac:b9:42:bc:53:06:
94:46:02:79:42:ea:6f:49:6f:af:63:a2:e0:30:ec:
47:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CC:C4:F8:8B:A6:AF:94:D2:A5:E1:95:10:AF:D1:35:10:36:05:45
X509v3 Authority Key Identifier:
keyid:53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a7:1a:13:e9:b3:c4:08:c5:e1:49:c7:17:b9:0a:f4:cf:c8:
9a:42:51:a4:e2:f4:a2:aa:17:5b:12:4d:74:5c:b5:6f:73:f8:
93:9b:08:0f:fc:ae:29:d1:8c:46:41:2d:2a:6d:9a:22:68:5b:
a7:67:02:6f:65:98:fc:c0:4d:54:0f:5c:33:bd:04:f4:b8:c3:
b8:e4:93:27:5c:59:1c:0c:10:5b:e4:eb:8f:92:7f:20:52:64:
d8:2d:cb:d9:57:8c:50:47:c1:ee:d1:7a:61:6c:bb:c4:42:68:
87:8d:a8:0d:96:21:72:03:00:43:aa:b7:53:c6:16:33:2b:13:
57:3b:38:74:a1:09:81:e0:5a:81:33:20:35:3a:ed:89:06:57:
7f:72:58:86:f7:a9:4a:a6:6e:f4:7e:30:1f:4b:22:de:5e:d2:
d4:6d:50:fb:21:8c:dd:63:a6:84:a5:83:6c:d1:42:bc:84:d9:
0f:84:96:08:e9:25:10:1b:d6:6d:d9:e8:61:29:39:d5:12:91:
ba:4a:da:eb:22:f1:82:87:a7:ec:11:06:03:54:4e:cd:9e:e8:
07:00:b2:1c:7e:8b:de:c7:bb:c8:78:58:f6:3e:a8:a5:9b:45:
55:3c:1b:de:f8:5f:c4:cb:40:81:f3:63:11:21:e7:05:44:2c:
04:0f:1e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:51 2026 by rpki-client