Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
File: cUKDDu7SiwS83QP6P9pIxUha_P4.mft (raw, json)
Hash identifier: LUEozwGN1+XZpiIf08WyuLQUDGLvxwA5SOKwABfPCLE=
Subject key identifier: F6:92:8C:9B:9B:9E:68:E5:19:9D:B0:E0:21:D8:78:C0:27:80:B5:23
Authority key identifier: 71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE
Certificate issuer: /CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
Certificate serial: 019D3866867EC482D07B498D7FAF445F9C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
Manifest number: 1162
Signing time: Sun 29 Mar 2026 07:02:16 +0000
Manifest this update: Sun 29 Mar 2026 07:02:16 +0000
Manifest next update: Mon 30 Mar 2026 07:02:16 +0000
Files and hashes: 1: cUKDDu7SiwS83QP6P9pIxUha_P4.crl (hash: UhWSiBOgSpCue9e7nZ2IhGTu7j28TTtKPHmZkvczucU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:86:7e:c4:82:d0:7b:49:8d:7f:af:44:5f:9c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
Validity
Not Before: Mar 29 07:02:16 2026 GMT
Not After : Mar 30 07:02:16 2026 GMT
Subject: CN=f6928c9b9b9e68e5199db0e021d878c02780b523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7b:b7:ca:1b:6a:27:59:6d:29:8f:35:69:b9:
bc:7b:e6:5b:84:5f:2a:ea:fa:46:10:a9:3b:3a:9c:
42:11:a7:78:28:c0:76:6b:12:0a:b8:7b:a9:33:44:
44:55:4f:27:bc:88:73:1c:9a:3c:88:84:4a:e6:ba:
69:17:a3:4f:1c:d7:4a:4b:ed:8a:63:62:0f:6a:61:
65:a9:1f:04:aa:bb:6d:a8:23:9b:4b:c1:8a:ef:ec:
d9:ce:55:40:54:f3:bf:c7:50:b6:cf:1f:c5:ca:bd:
b0:72:74:eb:73:3c:38:55:f1:6b:e9:70:b7:41:af:
28:33:83:4a:b1:70:fa:10:cf:f2:cb:06:29:bc:9a:
90:3c:60:e3:a0:d6:23:0e:5d:5a:a5:18:12:c5:b8:
7f:3b:e4:2e:6a:bd:81:1f:b0:51:55:27:ea:0b:c7:
3f:b9:9d:43:3a:f2:3a:a2:4a:c7:a6:90:4d:f4:cb:
fc:cc:a9:e9:f2:43:c6:e4:0b:76:41:00:c9:f9:43:
cf:c3:01:0e:d8:88:04:df:47:aa:0e:39:08:a1:3b:
af:19:cb:ad:8d:0e:0c:e2:a6:18:43:8d:64:6f:ac:
00:c7:de:bd:83:e1:7c:6d:b0:f3:0b:ce:f7:26:20:
f0:eb:a1:35:3e:04:d6:bb:a3:c2:02:57:58:5c:89:
f6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:92:8C:9B:9B:9E:68:E5:19:9D:B0:E0:21:D8:78:C0:27:80:B5:23
X509v3 Authority Key Identifier:
keyid:71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:90:6a:22:7a:e7:37:76:2c:9c:79:2b:ab:df:5f:18:6b:6f:
ad:fd:c4:c4:4f:a4:16:aa:43:85:db:86:1e:22:b8:26:af:ca:
09:c7:8c:51:b4:4a:7b:02:a3:61:14:c2:a7:20:fe:0a:f4:fd:
47:5e:9f:06:f5:3f:a8:1b:10:c4:7c:f5:53:df:c6:c7:5e:18:
e6:51:ee:fd:4e:50:0d:58:a6:81:6d:ec:9c:aa:7f:2e:7c:2d:
f9:12:15:56:96:64:5d:61:4c:c4:bf:62:ca:70:47:97:23:02:
51:1c:69:47:12:76:11:13:cb:30:14:44:66:ae:0b:96:6f:b7:
39:be:f2:63:f8:41:46:03:ae:d3:18:41:5e:bf:6a:42:1f:6e:
e0:ba:df:e6:36:86:65:94:15:53:46:26:d8:48:05:d9:13:2f:
38:dd:4a:f6:a6:a4:1b:51:58:e2:03:a1:42:ea:e6:f0:f1:a5:
6a:93:43:c1:21:18:b5:61:e6:26:c1:d8:17:c2:2d:0c:60:6c:
91:46:a2:c1:68:c7:7b:dd:21:ea:20:49:57:f1:f8:24:f6:e6:
91:d5:2b:26:e3:a6:40:b9:92:ac:88:f4:a1:44:46:45:9d:56:
f3:c5:3d:ab:10:df:18:0f:ad:e9:5a:db:91:26:1a:17:9a:99:
bc:04:df:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:34 2026 by rpki-client