Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
File: UZxxlGfHXvlxe8YrftrpALovRiU.mft (raw, json)
Hash identifier: KfUGz/11Rpkyarq49t32GAdT1p1f8XloWrW5cgy0vrI=
Subject key identifier: 02:EA:BF:1C:4A:B8:C1:C4:74:36:FC:58:C4:BB:7A:1E:E6:4C:A7:3F
Authority key identifier: 51:9C:71:94:67:C7:5E:F9:71:7B:C6:2B:7E:DA:E9:00:BA:2F:46:25
Certificate issuer: /CN=519c719467c75ef9717bc62b7edae900ba2f4625
Certificate serial: 019D3865CE5F36D04CE90234F45FE608B594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
Manifest number: 02C5
Signing time: Sun 29 Mar 2026 07:01:29 +0000
Manifest this update: Sun 29 Mar 2026 07:01:29 +0000
Manifest next update: Mon 30 Mar 2026 07:01:29 +0000
Files and hashes: 1: UZxxlGfHXvlxe8YrftrpALovRiU.crl (hash: vNVaCAORl1Ee8sig1fRV22EsHdTLnnxrpqQbpKT9fX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ce:5f:36:d0:4c:e9:02:34:f4:5f:e6:08:b5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519c719467c75ef9717bc62b7edae900ba2f4625
Validity
Not Before: Mar 29 07:01:29 2026 GMT
Not After : Mar 30 07:01:29 2026 GMT
Subject: CN=02eabf1c4ab8c1c47436fc58c4bb7a1ee64ca73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d4:57:ee:61:8e:c9:98:e2:a5:a9:24:28:f9:
5c:fb:bc:44:1e:3e:5f:a3:2b:d6:80:a6:91:03:b5:
c3:28:8e:fc:47:ee:ec:0b:7f:4f:ed:a1:5e:d8:2d:
54:c2:7f:69:5b:07:70:0d:72:4d:98:e7:bb:0b:86:
8d:12:e0:fa:82:0c:07:b1:18:08:7b:f0:83:52:c9:
0c:0b:25:8a:b5:d4:31:84:cb:a2:59:60:25:69:d5:
a0:83:c9:3c:73:0e:aa:4e:10:9c:9c:a9:7a:9b:4e:
06:d4:6a:c4:04:99:3a:55:7b:f0:f6:25:33:ca:55:
24:a7:04:68:11:e5:68:b2:a3:7f:ab:ee:6d:35:16:
9c:dc:f9:29:f5:7c:30:41:3a:dd:c1:a9:c4:ed:e8:
3a:76:9b:68:49:44:52:c5:59:25:a0:d7:dd:25:d7:
53:d9:f7:f8:f8:34:17:f8:7c:08:c2:49:5f:5e:1f:
39:47:ff:da:bf:c3:00:09:2e:c1:65:2a:4f:49:2f:
c8:ba:fd:31:75:77:96:59:23:3c:19:4d:c4:75:ad:
d0:f3:61:0a:81:21:05:39:04:cd:c8:3d:71:d4:15:
9b:70:3e:2c:6a:29:3e:61:1a:80:7f:3c:a3:c9:62:
5c:d2:6b:27:3b:ac:7e:97:33:d5:30:2a:8c:09:e3:
d6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EA:BF:1C:4A:B8:C1:C4:74:36:FC:58:C4:BB:7A:1E:E6:4C:A7:3F
X509v3 Authority Key Identifier:
keyid:51:9C:71:94:67:C7:5E:F9:71:7B:C6:2B:7E:DA:E9:00:BA:2F:46:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:aa:53:07:e4:56:f0:72:14:31:19:64:01:63:80:29:ce:1a:
3c:91:15:95:47:0c:5f:19:54:e7:01:ac:bb:5b:7b:86:4e:91:
37:6f:50:3e:e6:0e:5a:c9:0a:66:71:ad:06:07:e6:de:ba:5a:
7e:88:57:77:01:58:fc:d9:53:69:16:89:0b:08:c2:7e:fe:3d:
71:38:60:c5:f6:1e:bf:fb:d3:64:d3:5e:fc:5b:54:c2:ff:7a:
76:7d:8f:95:92:cf:30:19:65:12:81:33:63:d4:ad:79:6b:02:
7a:b5:1e:20:8a:f2:14:de:27:75:bc:dd:bc:c1:58:40:26:61:
8a:19:99:f1:98:33:ad:2a:c1:ea:a4:68:c6:c4:72:06:15:68:
f7:09:60:f6:79:fa:cd:ac:bd:cd:39:9c:f4:1a:df:fc:7c:ac:
51:b4:51:e9:2e:a1:f7:1e:1f:de:83:95:8f:03:d4:0d:0a:17:
95:fe:ff:07:74:56:a8:d0:6a:67:20:87:4e:43:96:35:95:bf:
f4:2a:e3:ae:da:e4:16:16:30:26:8d:d1:6c:3a:1b:75:12:6e:
36:71:62:08:57:ce:88:19:e5:7b:e7:04:b9:91:d7:59:13:9c:
62:aa:c2:a2:3a:19:cc:5f:c1:cb:e0:16:fc:ca:2f:ba:c6:d1:
ab:88:f1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:19 2026 by rpki-client