Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft
File: uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft (raw, json)
Hash identifier: /vD8o2IrGyUht1cll0a1BDRI9rjGNVT49COSQFVJLCw=
Subject key identifier: E1:9A:03:72:0D:05:D9:7F:18:8F:6A:AA:ED:21:99:A1:F9:37:F0:73
Authority key identifier: B8:81:77:A9:A3:46:9D:B3:AC:F1:0A:98:F6:C0:39:31:E3:55:15:FA
Certificate issuer: /CN=b88177a9a3469db3acf10a98f6c03931e35515fa
Certificate serial: 019D38D2A62E7D5903488A100131551C0FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uIF3qaNGnbOs8QqY9sA5MeNVFfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft
Manifest number: 0828
Signing time: Sun 29 Mar 2026 09:00:22 +0000
Manifest this update: Sun 29 Mar 2026 09:00:22 +0000
Manifest next update: Mon 30 Mar 2026 09:00:22 +0000
Files and hashes: 1: uIF3qaNGnbOs8QqY9sA5MeNVFfo.crl (hash: mjvZFpdvJI48vRJKKDyzutJTgZqQ0NzjYqwa77abW/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uIF3qaNGnbOs8QqY9sA5MeNVFfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a6:2e:7d:59:03:48:8a:10:01:31:55:1c:0f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b88177a9a3469db3acf10a98f6c03931e35515fa
Validity
Not Before: Mar 29 09:00:22 2026 GMT
Not After : Mar 30 09:00:22 2026 GMT
Subject: CN=e19a03720d05d97f188f6aaaed2199a1f937f073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a7:60:c7:44:12:0a:32:34:d1:4c:f1:e8:25:
ba:70:aa:ad:35:3e:31:66:36:8c:da:de:89:db:e0:
85:d0:8b:48:4e:08:a6:63:89:94:43:e1:26:a2:ea:
b6:e2:85:1a:46:56:4a:17:bc:1e:56:73:49:01:14:
e2:c1:b4:c4:44:38:71:ed:0f:8c:12:95:fc:d8:90:
9d:45:d7:a1:61:22:50:a8:8c:e9:cf:8c:16:94:33:
90:5a:0a:a7:7c:bb:ab:f9:c9:86:3f:ad:56:2d:13:
22:d4:af:46:0e:b2:55:4a:7d:74:d6:f3:4a:ac:12:
e6:5b:28:1c:69:4e:3f:89:b5:82:77:38:a4:39:ea:
13:33:5c:af:32:6e:c7:cd:3f:05:dd:85:93:b2:7a:
b3:70:63:ed:e4:c9:94:73:27:2a:89:43:9a:2f:a0:
8d:62:df:64:bb:12:2c:6b:32:a3:9f:f2:63:bc:b6:
d5:01:fd:67:a9:7e:47:26:1e:0d:14:59:4f:21:65:
12:91:e7:4c:c2:97:2a:04:b3:20:00:55:64:ef:7a:
1e:0b:39:5b:c0:46:16:06:9e:3c:94:e9:07:94:fb:
45:41:76:3e:b6:c8:d3:3b:37:e5:60:8a:e1:cc:9f:
01:50:d5:f6:23:5b:1c:02:13:24:be:ad:3e:60:5f:
f2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9A:03:72:0D:05:D9:7F:18:8F:6A:AA:ED:21:99:A1:F9:37:F0:73
X509v3 Authority Key Identifier:
keyid:B8:81:77:A9:A3:46:9D:B3:AC:F1:0A:98:F6:C0:39:31:E3:55:15:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uIF3qaNGnbOs8QqY9sA5MeNVFfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:23:9a:6e:91:96:fc:fa:ed:90:ff:47:77:62:59:31:5d:01:
ed:26:2c:41:2a:c5:18:9f:14:b5:71:8e:01:14:bd:99:5b:52:
e0:79:ba:ff:f6:42:59:89:1a:1a:82:ea:4c:f8:fd:45:33:ab:
b3:f0:9e:07:ae:9c:24:f3:f8:d8:2e:27:1a:5e:69:a7:40:9a:
24:e7:26:b4:4b:ed:6a:b4:40:e8:00:ae:a4:eb:4b:bb:82:25:
55:ff:8a:d7:5a:29:35:85:03:2a:df:7c:25:f7:7b:67:31:34:
1e:ef:88:1c:75:9c:5b:3c:e4:fe:1a:00:0d:8c:65:d5:ae:b5:
bf:da:09:51:2f:4a:66:95:ac:b2:7a:11:0a:56:08:77:8c:d6:
89:c8:16:e1:0a:6b:ee:cc:8c:74:75:57:da:7f:77:9a:77:da:
61:7f:13:57:e7:b6:55:80:f6:3c:a6:de:98:ab:df:d4:78:86:
6c:95:00:e1:14:94:22:c2:95:69:0b:5d:3c:cf:89:42:95:16:
f0:1d:59:89:0f:5a:76:92:8b:00:9d:0d:39:91:23:ec:23:33:
58:bf:0e:8c:66:bd:7b:0b:f6:a0:43:3b:13:1f:c9:b2:2d:30:
09:11:c7:4a:30:b6:84:a5:e0:48:ed:05:25:ca:01:f0:0d:d3:
76:61:0d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:25 2026 by rpki-client