Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/US7HYztuWDv6P6f_eEjxqp8oAIU.mft
File: US7HYztuWDv6P6f_eEjxqp8oAIU.mft (raw, json)
Hash identifier: NCTJYBDlUakUUXBznLMs65wcsAmzp874DMOene7ItjU=
Subject key identifier: 35:8B:B8:7E:BE:EB:59:71:F0:A5:29:73:6B:31:49:47:73:75:99:39
Authority key identifier: 51:2E:C7:63:3B:6E:58:3B:FA:3F:A7:FF:78:48:F1:AA:9F:28:00:85
Certificate issuer: /CN=512ec7633b6e583bfa3fa7ff7848f1aa9f280085
Certificate serial: 019D37F7300EC663F28C7D9AC5A126217405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/US7HYztuWDv6P6f_eEjxqp8oAIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/US7HYztuWDv6P6f_eEjxqp8oAIU.mft
Manifest number: 014E
Signing time: Sun 29 Mar 2026 05:00:39 +0000
Manifest this update: Sun 29 Mar 2026 05:00:39 +0000
Manifest next update: Mon 30 Mar 2026 05:00:39 +0000
Files and hashes: 1: US7HYztuWDv6P6f_eEjxqp8oAIU.crl (hash: Vsd1DJhB3BMFValPgnZyMzTiVLsdwlsarAiLMsNBWuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/US7HYztuWDv6P6f_eEjxqp8oAIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/US7HYztuWDv6P6f_eEjxqp8oAIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/US7HYztuWDv6P6f_eEjxqp8oAIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:30:0e:c6:63:f2:8c:7d:9a:c5:a1:26:21:74:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=512ec7633b6e583bfa3fa7ff7848f1aa9f280085
Validity
Not Before: Mar 29 05:00:39 2026 GMT
Not After : Mar 30 05:00:39 2026 GMT
Subject: CN=358bb87ebeeb5971f0a529736b31494773759939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5a:de:e5:67:2d:d1:47:4c:f8:0e:f9:2d:a0:
f8:18:60:ef:d1:7d:01:ba:13:72:e1:e7:b4:81:a1:
ec:13:eb:49:52:3a:9d:c1:3d:1d:72:c1:21:dd:18:
79:ba:27:c3:1c:64:e3:d1:6c:d2:2f:b8:cb:82:56:
09:83:fb:b1:9a:0f:31:2f:1a:17:9b:32:91:24:57:
20:44:13:cd:ea:1d:56:cc:e4:48:91:be:78:6d:f1:
43:e4:04:60:59:3a:11:f1:12:cb:48:f8:10:7b:5c:
2b:57:bd:8c:02:29:a6:51:3f:80:68:6b:f1:5b:35:
86:44:a6:23:f6:ff:24:cc:6a:45:7c:61:a4:71:ce:
1a:09:e3:d6:34:ba:7b:fe:26:95:d4:2d:d2:e4:8b:
e6:ab:10:76:51:6c:4b:b3:c4:99:b3:b7:c8:cb:6e:
1d:69:25:99:d0:0e:73:cd:ab:17:b6:53:d2:04:18:
fb:b8:4e:36:73:83:e0:43:79:2e:a3:9b:6c:6c:73:
d0:4a:5d:b2:fe:57:93:c9:2e:1a:ab:0f:19:5c:ec:
c8:e2:9f:9e:ee:36:26:0c:8f:a7:78:d2:88:ef:b0:
d8:76:9f:05:e8:9b:c3:86:58:f0:41:c5:71:8a:f0:
09:e7:c7:e9:0f:6d:fa:a2:fc:db:6b:27:46:0b:47:
d2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8B:B8:7E:BE:EB:59:71:F0:A5:29:73:6B:31:49:47:73:75:99:39
X509v3 Authority Key Identifier:
keyid:51:2E:C7:63:3B:6E:58:3B:FA:3F:A7:FF:78:48:F1:AA:9F:28:00:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/US7HYztuWDv6P6f_eEjxqp8oAIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/US7HYztuWDv6P6f_eEjxqp8oAIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/US7HYztuWDv6P6f_eEjxqp8oAIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d8:5e:fa:d7:48:75:1c:9e:e0:19:c3:26:c3:4e:bf:e3:04:
06:7e:07:a7:e4:8f:35:f1:83:6b:a6:90:95:2b:ee:2f:e5:88:
60:d2:bc:c7:b7:cd:bd:73:cd:fe:cd:4b:1c:f5:c6:dd:d8:0b:
b7:c4:61:cb:5a:32:f0:15:29:75:69:d6:70:a2:d6:f9:a0:d7:
f3:94:43:25:15:61:4d:3c:41:3b:57:c1:32:73:51:92:f5:21:
dd:6e:db:15:1b:76:4e:79:36:85:a1:36:2a:f7:ac:57:a7:97:
69:c5:5d:5b:92:d2:0e:25:a5:5d:f7:e7:c0:a6:43:f5:59:36:
dd:cb:b1:fd:b9:76:41:e3:43:c5:9e:ba:58:e0:7a:f9:12:ab:
78:d8:44:70:ed:ef:3d:7f:24:44:3e:b7:db:1a:91:9f:ea:a6:
85:51:d3:16:62:08:0c:fd:be:80:28:0b:ad:d2:41:0e:03:6f:
5a:15:64:1c:3a:83:77:ac:68:fc:fa:75:08:e9:f2:e5:29:25:
c3:4a:95:36:42:5b:5b:8c:7a:c5:33:c0:9e:cb:af:fb:f6:8f:
d4:60:c5:cf:eb:76:3a:16:6a:1f:56:88:a3:9b:9e:4d:1d:dd:
c1:56:96:30:b9:b3:c6:4c:36:70:8b:85:36:cb:7c:14:cc:bd:
02:5d:01:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:13 2026 by rpki-client