Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
File: kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft (raw, json)
Hash identifier: Gv1qfutcmmfcUPPaRjhGHh+LPkiHSx1ArpP0CEbH8uc=
Subject key identifier: 78:83:9F:3A:53:32:26:C6:3A:F6:3A:FF:CA:CA:93:E1:56:C2:4E:67
Authority key identifier: 91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
Certificate issuer: /CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Certificate serial: 019D3A547E09C32B93E39BC301414D5B9F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
Manifest number: 0F75
Signing time: Sun 29 Mar 2026 16:01:48 +0000
Manifest this update: Sun 29 Mar 2026 16:01:48 +0000
Manifest next update: Mon 30 Mar 2026 16:01:48 +0000
Files and hashes: 1: kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl (hash: WJGFjTi84dfSe4WvZeE8nshgGYWlktI40LpDrVJBKiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:7e:09:c3:2b:93:e3:9b:c3:01:41:4d:5b:9f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Validity
Not Before: Mar 29 16:01:48 2026 GMT
Not After : Mar 30 16:01:48 2026 GMT
Subject: CN=78839f3a533226c63af63affcaca93e156c24e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:7f:43:b7:32:21:d0:18:5b:be:bc:39:41:
f1:64:c9:9f:a4:79:88:6e:77:0c:fe:de:53:1d:4e:
e6:af:01:ff:ec:4c:0d:8b:c0:19:65:84:56:b2:da:
e2:68:7e:41:88:b4:72:a8:a9:46:93:33:67:0b:7f:
d7:dc:ea:69:eb:12:7b:45:ce:1e:21:fe:be:7f:3a:
7f:45:bd:c6:c5:98:4f:a2:7e:1c:fd:8d:4b:5f:db:
f9:6a:c6:b0:8a:5a:0e:2e:9a:f2:35:a7:da:2c:fd:
f7:8e:3c:48:fc:22:0b:cd:d1:83:3c:95:0f:52:8f:
f4:d1:48:ea:17:a7:95:8a:9d:f6:c2:42:fc:70:b3:
ee:16:9c:2a:91:38:e8:88:0a:38:28:b2:03:2e:c7:
f6:44:a7:a3:f8:f4:2a:47:aa:cf:35:50:44:b9:e8:
81:9d:de:8a:26:61:32:1d:16:86:ae:dd:94:66:48:
43:a3:9c:50:89:e1:00:60:6d:39:9b:96:fb:30:48:
d3:57:43:58:48:0d:96:30:79:32:a7:6f:2c:7c:18:
48:62:a9:ae:4d:8a:40:47:60:5e:ec:c3:ae:90:5e:
f6:0f:ff:6e:92:68:26:9a:dd:0a:b4:4c:69:12:d1:
9f:4f:23:1a:05:5b:92:27:70:b8:5c:6b:f9:87:80:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:83:9F:3A:53:32:26:C6:3A:F6:3A:FF:CA:CA:93:E1:56:C2:4E:67
X509v3 Authority Key Identifier:
keyid:91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0f:53:4d:a6:07:ef:7e:a7:f3:3f:37:b3:92:1b:8a:1c:62:
95:9e:4b:d6:bf:62:fe:a8:a6:e6:4b:0a:e4:0a:1a:a0:c1:4b:
74:10:1a:d3:20:87:f6:e2:f6:a9:09:54:4c:b9:04:35:bd:ac:
5a:02:eb:3b:13:8d:ed:95:74:db:dd:ba:f4:8f:3c:26:b0:aa:
79:fb:68:12:00:8a:3b:95:15:cd:bf:c3:1e:62:53:71:6a:e8:
89:84:c6:69:c0:c1:25:23:2a:ab:15:7b:83:02:c1:4e:ee:b4:
17:13:53:9c:6f:76:f4:f6:06:22:70:0a:5d:50:2b:ee:ca:b8:
7b:4a:39:f8:de:ce:a1:da:43:16:21:7e:17:f3:a1:6b:04:4c:
e9:01:a0:8d:0f:71:a0:7a:b8:51:02:d9:3c:53:7c:72:40:89:
07:f2:2a:ef:66:21:ce:b8:5a:64:9e:df:6f:93:24:42:62:2e:
7b:c9:b3:dd:e0:09:b5:81:d3:7e:06:dd:a3:b5:f5:cd:b9:80:
06:b6:1a:52:e0:65:aa:a9:40:10:2a:26:cf:62:d4:11:73:c3:
23:1c:ff:ba:13:4f:ed:cc:82:bc:a5:bf:b0:12:4d:cd:91:4a:
24:93:14:c4:71:2e:d5:c7:bc:77:7e:05:33:27:df:3a:95:28:
03:66:fc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:13 2026 by rpki-client