Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
File: ur1G6GLeAxkf8xMazHjhlwlZahw.mft (raw, json)
Hash identifier: 1LT/CqItNf0W58rEQ/PVeEM/P9QPoKrZTGMTOiM2en4=
Subject key identifier: 37:96:67:D4:4C:5C:29:D3:E5:C5:39:19:C1:4D:1C:57:09:61:77:0D
Authority key identifier: BA:BD:46:E8:62:DE:03:19:1F:F3:13:1A:CC:78:E1:97:09:59:6A:1C
Certificate issuer: /CN=babd46e862de03191ff3131acc78e19709596a1c
Certificate serial: 019D38D38DF23F95940AC14F7E2EC6650D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
Manifest number: 0266
Signing time: Sun 29 Mar 2026 09:01:21 +0000
Manifest this update: Sun 29 Mar 2026 09:01:21 +0000
Manifest next update: Mon 30 Mar 2026 09:01:21 +0000
Files and hashes: 1: ur1G6GLeAxkf8xMazHjhlwlZahw.crl (hash: netNfn9gNjO7owJWGeExIAdIqQdEm8JwTFK5BO88UjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:8d:f2:3f:95:94:0a:c1:4f:7e:2e:c6:65:0d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=babd46e862de03191ff3131acc78e19709596a1c
Validity
Not Before: Mar 29 09:01:21 2026 GMT
Not After : Mar 30 09:01:21 2026 GMT
Subject: CN=379667d44c5c29d3e5c53919c14d1c570961770d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cc:d4:ee:bc:d7:17:0d:8f:ce:5d:7b:32:0f:
a5:d3:aa:dd:66:4a:76:90:96:6e:71:93:fb:fe:e9:
f3:60:6c:06:b7:70:db:d8:66:1f:72:35:e5:0d:32:
d3:e6:8a:60:48:ad:5c:da:d6:25:e4:25:c1:16:78:
ce:e0:d6:1d:03:37:2a:1b:60:4f:b9:cd:e9:2a:02:
80:3e:09:5e:0e:f1:e0:54:0b:9c:3f:92:71:dd:c6:
5c:9d:31:0e:a3:11:c6:f1:f5:e1:a9:92:0e:3f:46:
43:7d:ca:1b:42:68:5f:eb:6f:cc:34:96:77:c0:8c:
2a:c2:8b:f3:ec:be:89:4c:e3:e7:a1:a3:a6:89:d4:
a3:6e:ef:ef:26:ea:b1:0c:c2:e2:aa:8f:b2:54:e1:
57:5d:e8:5a:82:3c:ce:bf:5b:fe:72:54:20:2e:4e:
73:0b:9e:6b:59:d4:87:0f:1e:04:e4:c2:72:b6:e5:
a3:6f:de:c7:5a:f4:71:4c:52:d3:b0:a4:39:c4:dd:
1b:ba:1e:cc:15:24:7d:7d:bf:30:fe:e2:bd:4d:5f:
f5:8b:5d:35:a2:d1:b6:84:0e:3a:37:d6:dd:89:b1:
85:3b:10:cc:ec:c2:2a:bd:d8:44:b4:06:f1:8c:f7:
a7:c8:69:0d:9b:24:53:3b:ad:9b:89:6b:f4:55:df:
01:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:96:67:D4:4C:5C:29:D3:E5:C5:39:19:C1:4D:1C:57:09:61:77:0D
X509v3 Authority Key Identifier:
keyid:BA:BD:46:E8:62:DE:03:19:1F:F3:13:1A:CC:78:E1:97:09:59:6A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:05:e8:f2:de:72:9c:c5:54:72:fd:4b:9a:24:22:fc:91:3d:
04:28:fe:30:cf:af:63:5b:27:b6:14:df:b3:90:8b:93:e6:dc:
6e:0b:3f:31:ff:33:52:af:13:36:f6:3b:ae:5b:71:7c:0e:65:
15:39:79:8e:6b:98:a9:4d:14:03:a3:37:f4:13:28:e9:01:9e:
09:da:7c:cf:ef:34:d9:86:31:b3:ef:e0:e9:7d:43:ed:62:6e:
bc:a8:16:41:af:cf:48:18:c6:83:72:ee:b8:45:86:16:f4:d5:
8a:6f:b0:1c:24:c0:ee:06:3d:84:a1:57:b8:8c:d0:1d:a7:29:
a1:40:74:9a:97:c6:83:95:11:a4:9b:b9:5e:50:62:a7:76:ae:
ab:19:3a:49:f7:5d:ae:4f:28:8d:09:38:5c:dc:9d:c8:0b:d8:
88:ae:91:44:49:21:44:47:69:71:25:e3:a0:d8:02:27:32:f4:
41:52:01:5a:a5:08:a9:c5:8b:89:3f:c2:e2:e7:9f:cf:9c:c9:
35:c1:ce:f3:60:08:ad:13:39:e7:00:e7:eb:43:d5:35:19:1d:
dd:d2:f2:f4:b5:27:2d:ae:d2:be:54:e0:cb:49:56:d9:d7:b4:
1f:c6:dd:93:6b:2d:6b:f4:e0:0e:22:72:89:9f:28:80:c6:ab:
ac:d4:90:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:32 2026 by rpki-client