Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
File: pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft (raw, json)
Hash identifier: 7xisIkEfaeCI17Lq4NC+BGTY8gPFw9Vi/3+8GI0s5v8=
Subject key identifier: 8D:61:52:27:23:50:31:AF:A3:40:7B:6D:DB:12:49:28:D0:37:EF:EC
Authority key identifier: A5:40:AB:D1:98:82:CA:C8:0B:76:6D:72:AD:8F:EC:24:AB:95:50:AF
Certificate issuer: /CN=a540abd19882cac80b766d72ad8fec24ab9550af
Certificate serial: 019D38D2C770D1553A36EF2B300B7910332D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
Manifest number: 025B
Signing time: Sun 29 Mar 2026 09:00:30 +0000
Manifest this update: Sun 29 Mar 2026 09:00:30 +0000
Manifest next update: Mon 30 Mar 2026 09:00:30 +0000
Files and hashes: 1: pUCr0ZiCysgLdm1yrY_sJKuVUK8.crl (hash: 68CY9QCj1b9Svib4u30UVzgsYwaVOjcoQeUSU+fEGKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:c7:70:d1:55:3a:36:ef:2b:30:0b:79:10:33:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a540abd19882cac80b766d72ad8fec24ab9550af
Validity
Not Before: Mar 29 09:00:30 2026 GMT
Not After : Mar 30 09:00:30 2026 GMT
Subject: CN=8d615227235031afa3407b6ddb124928d037efec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0f:b2:36:11:5f:4b:14:f6:30:21:48:c5:c8:
22:da:6f:57:c5:29:e8:60:89:5e:ad:be:9e:60:4c:
f9:b6:56:1a:42:38:f9:e4:c8:49:a2:39:c6:f0:8b:
3b:fd:2c:7b:98:ae:9e:3b:5f:26:c8:c2:99:36:a2:
88:0a:07:f7:ac:73:fc:49:50:2c:fe:ed:49:15:b7:
b8:30:ab:61:9d:d7:3b:a3:c4:7d:47:bf:02:b3:05:
10:ae:20:c2:85:8d:ca:25:6c:6b:28:b7:ac:3e:b7:
28:23:5f:49:4e:38:71:41:13:16:e2:3a:6c:c5:fd:
3f:20:e2:ad:e3:c1:6a:93:3d:8d:e4:12:42:20:0d:
4d:53:21:88:47:94:37:72:e1:93:80:13:19:39:3d:
a0:03:de:75:80:9a:5b:cc:e1:ff:70:22:0a:0c:ff:
dc:e3:4d:1a:ad:06:21:79:4d:2a:5e:13:6d:fe:d7:
e0:37:5e:18:68:49:6e:a6:e7:21:3a:f1:b2:45:a8:
ee:6e:5f:4e:a3:81:dd:43:c9:d3:90:31:26:f8:60:
95:46:46:a5:35:1d:4f:69:fe:d2:32:a2:6f:62:fc:
72:fb:db:9f:0d:21:cd:71:cc:8e:a6:4c:9d:47:e3:
55:cd:20:1e:7f:04:1d:78:1f:eb:44:9a:52:e0:9c:
a7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:61:52:27:23:50:31:AF:A3:40:7B:6D:DB:12:49:28:D0:37:EF:EC
X509v3 Authority Key Identifier:
keyid:A5:40:AB:D1:98:82:CA:C8:0B:76:6D:72:AD:8F:EC:24:AB:95:50:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:bf:4f:ce:68:2a:13:68:71:c4:a0:86:ff:db:bb:c9:0b:d2:
4c:3a:cd:10:80:3f:ae:99:ad:6a:32:37:4d:6b:da:a8:aa:32:
6f:9e:e7:b9:8f:d8:7e:a1:5d:51:e1:04:c7:52:ec:b8:6d:41:
39:97:e5:78:d3:2f:b6:29:b8:b5:a3:0a:0e:52:63:c0:6a:18:
4b:9d:80:25:46:ee:8e:70:43:8f:95:f9:8e:11:f3:5b:47:d3:
54:50:1c:99:fe:70:36:23:fa:c8:16:bb:db:ad:c1:97:60:26:
80:73:a5:43:8a:3f:2e:be:1f:e9:52:90:58:f4:c8:b1:85:2e:
13:f9:3c:1f:5a:35:ca:86:94:e2:ac:e6:f3:eb:0c:35:85:31:
37:56:25:9b:f5:ee:18:dc:59:79:fc:92:b5:38:38:71:9e:b6:
68:ea:ad:03:3e:d3:d3:2c:83:a7:93:45:c7:12:44:fe:2c:06:
86:63:d9:0f:f1:0c:10:d1:71:8f:5f:2d:cc:15:40:55:c1:32:
f2:52:24:1e:e4:47:3d:77:ba:00:f2:14:d7:0d:86:04:20:29:
4b:f6:56:1b:0e:94:a5:65:c9:7a:7b:bf:ee:e6:f6:83:5f:20:
2e:e5:5e:cb:e7:02:57:43:15:37:1d:f0:33:e7:26:64:5f:7a:
b7:9c:d1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:09 2026 by rpki-client