Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
File: pUR4T8L1atrefbdiM9E27pt768c.mft (raw, json)
Hash identifier: pY9/leE4WxH7rRp8Eu/J40IgZpXI2B5toKB2bpWWwv4=
Subject key identifier: 8D:89:FF:6E:68:14:11:42:EE:D2:EE:6C:85:71:AC:FC:33:16:DC:82
Authority key identifier: A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7
Certificate issuer: /CN=a544784fc2f56adade7db76233d136ee9b7bebc7
Certificate serial: 019D39AF3ABEC1984EC1D51A22A35F84605D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
Manifest number: 0834
Signing time: Sun 29 Mar 2026 13:01:18 +0000
Manifest this update: Sun 29 Mar 2026 13:01:18 +0000
Manifest next update: Mon 30 Mar 2026 13:01:18 +0000
Files and hashes: 1: pUR4T8L1atrefbdiM9E27pt768c.crl (hash: efLuOD1PhBXF8R6dy4gYgfdaUAOGVqz9cdALkt1lars=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:3a:be:c1:98:4e:c1:d5:1a:22:a3:5f:84:60:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a544784fc2f56adade7db76233d136ee9b7bebc7
Validity
Not Before: Mar 29 13:01:18 2026 GMT
Not After : Mar 30 13:01:18 2026 GMT
Subject: CN=8d89ff6e68141142eed2ee6c8571acfc3316dc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:28:16:d0:8a:ab:1e:25:84:48:ef:ec:42:
ca:3c:16:47:01:50:fd:ca:92:a0:5c:81:c7:a7:6d:
2a:9a:b7:30:a4:e0:05:70:f3:93:d5:1d:2e:d4:53:
a1:98:fe:b1:f9:7f:33:6a:29:c5:7b:1c:3e:bb:21:
1b:f8:3d:86:73:06:18:29:d0:45:0d:bb:2b:e9:84:
90:e6:c0:1e:7d:04:07:6a:e4:4b:c3:0e:93:00:0e:
f4:cb:bb:2c:ce:c5:7c:98:11:87:6f:da:7d:21:d9:
99:af:32:6c:2c:c6:8b:34:a0:88:45:69:0b:41:98:
bd:2c:86:c3:e8:63:26:0a:ca:58:c0:4a:44:67:4d:
43:9b:5e:1a:25:74:5a:71:49:e8:d2:29:c4:b5:86:
9f:d3:dc:fe:24:e4:9f:35:63:e3:14:9c:07:99:67:
b3:d6:31:19:c0:69:ad:d0:32:df:57:57:43:6c:3c:
00:3e:a0:50:d0:3b:88:d5:31:d1:93:8b:b7:9e:e3:
4c:5f:93:5c:b2:f5:1f:05:d6:0a:04:be:d5:b9:c4:
17:34:59:6d:0c:d5:e8:4a:c4:4c:77:1b:40:ee:75:
55:7c:11:00:5a:d6:ef:b0:a1:8e:8e:8f:d7:9c:0e:
c3:9f:69:c7:14:b8:52:5d:a8:dd:c8:12:d0:61:0f:
8d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:89:FF:6E:68:14:11:42:EE:D2:EE:6C:85:71:AC:FC:33:16:DC:82
X509v3 Authority Key Identifier:
keyid:A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:58:99:5a:4f:90:91:6c:8d:90:57:18:25:56:f7:64:74:61:
dd:4e:fd:97:89:79:19:56:53:74:11:49:14:12:da:ed:05:23:
c9:6e:69:0c:aa:32:42:93:3a:f2:cc:0e:5a:4d:49:ed:4b:34:
a5:b3:b2:51:5a:c0:d9:89:49:9d:8e:d6:64:86:b0:0a:a3:5b:
f2:ec:8e:90:c3:36:f9:7d:9f:5e:3d:86:6e:db:07:72:42:b6:
9a:2c:44:ff:49:ae:46:35:08:28:b7:ca:84:2d:53:f2:a1:e7:
b6:20:a3:fe:5f:31:d6:d9:4d:b9:de:1f:f1:a9:44:8f:f0:1f:
87:0b:0f:d4:20:83:b7:ff:80:28:32:54:e0:5f:5d:f6:0d:cd:
e2:20:a9:3f:e6:f5:d8:e7:76:2d:ee:16:16:d2:05:4e:49:f9:
ac:17:7c:e3:1c:e5:81:2d:23:79:c1:d8:b8:c6:18:9c:8b:0d:
6e:f2:61:76:1c:c1:20:e0:24:7c:95:37:64:14:4e:f0:06:e9:
1e:79:e2:a3:c4:48:81:57:28:c3:58:d0:3f:33:81:70:c5:5e:
0b:09:72:4f:10:ac:a2:ac:25:87:63:ad:8d:31:3c:24:e4:4f:
e9:6e:ff:53:18:d3:92:9a:fb:f2:fa:0e:e1:3e:98:18:27:a0:
b4:86:55:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:59 2026 by rpki-client