Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
File: uUZ8BbpC7h85pkpT4dA0Azbl48M.mft (raw, json)
Hash identifier: 44FvOpX0DcP7Qkd6hpxhU2smeoqy5kYMlubyzSfxm4s=
Subject key identifier: 4F:EC:D3:46:31:8E:55:1B:50:4D:65:CC:F7:3F:66:1C:E3:DB:FA:85
Authority key identifier: B9:46:7C:05:BA:42:EE:1F:39:A6:4A:53:E1:D0:34:03:36:E5:E3:C3
Certificate issuer: /CN=b9467c05ba42ee1f39a64a53e1d0340336e5e3c3
Certificate serial: 019D39AE7BF85AE4BED4D96BC5115251B704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 13:00:29 +0000
Manifest this update: Sun 29 Mar 2026 13:00:29 +0000
Manifest next update: Mon 30 Mar 2026 13:00:29 +0000
Files and hashes: 1: uUZ8BbpC7h85pkpT4dA0Azbl48M.crl (hash: vp1uyP9RCiAxqiXpYkuACp1dBPvVxd6cMWc5k4OUN5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:7b:f8:5a:e4:be:d4:d9:6b:c5:11:52:51:b7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9467c05ba42ee1f39a64a53e1d0340336e5e3c3
Validity
Not Before: Mar 29 13:00:29 2026 GMT
Not After : Mar 30 13:00:29 2026 GMT
Subject: CN=4fecd346318e551b504d65ccf73f661ce3dbfa85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:59:fc:7a:f0:c6:8c:57:50:ae:87:79:77:
7c:f8:3a:e9:e5:06:0a:50:25:26:79:9c:a1:04:f6:
54:76:89:d4:0a:dd:be:6b:67:1e:68:2f:af:8b:a9:
ce:28:09:f0:58:84:e4:07:8b:a1:9e:bb:77:bf:9c:
4f:fb:0d:3a:1e:87:88:9c:44:7d:33:57:3d:f9:7b:
52:79:3c:29:61:02:97:fa:a1:11:f6:3d:81:39:ed:
30:e3:60:2b:77:c8:73:0f:46:52:74:4d:a8:bc:2f:
7d:89:1c:8a:a4:b5:ec:3d:42:3c:57:88:60:3a:8f:
57:8e:85:89:41:02:03:7e:07:d4:3b:20:d8:31:ae:
7a:07:44:a9:66:84:06:22:35:41:a2:24:56:ee:61:
32:8a:e0:e3:95:a2:c9:da:a3:86:04:0e:7f:d3:f9:
5e:fc:7f:8b:83:8d:62:6e:cb:15:19:7f:ac:d4:b3:
cd:23:27:0f:96:25:7a:26:85:78:b3:a5:90:f5:e7:
06:dd:a3:1f:2a:cf:a8:a4:11:04:77:2d:59:d6:64:
e3:51:b5:5c:e9:f1:e2:44:a3:ca:44:c6:a2:8a:f8:
fd:6f:70:00:60:5a:3b:f9:75:99:9f:94:17:27:83:
3a:20:a3:c2:62:bd:4d:b6:7c:26:f5:4d:80:75:70:
83:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EC:D3:46:31:8E:55:1B:50:4D:65:CC:F7:3F:66:1C:E3:DB:FA:85
X509v3 Authority Key Identifier:
keyid:B9:46:7C:05:BA:42:EE:1F:39:A6:4A:53:E1:D0:34:03:36:E5:E3:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:75:e4:e1:6c:a9:f5:da:b8:c1:48:00:58:16:8a:1e:aa:f7:
4a:31:10:4d:d5:77:32:db:ac:2f:93:81:74:93:22:f6:a5:53:
c3:e1:1e:be:5d:79:97:db:d1:7c:d9:55:00:95:0e:18:44:e2:
6a:ef:ba:d6:e6:85:f0:f0:cf:d0:81:09:3a:a0:a6:dc:51:53:
ec:69:52:cd:51:fe:4d:44:5e:62:cb:af:11:ec:57:cc:72:57:
d5:a9:46:bb:1f:69:33:60:4c:d8:05:30:ec:5e:14:1b:36:ed:
1c:11:26:48:25:06:97:be:cd:80:fe:22:bc:94:87:9b:cb:cc:
fd:96:cb:d1:a2:50:79:4e:29:ce:8b:6f:5e:7b:f8:25:1d:14:
53:03:a7:8a:5d:bf:1e:38:78:ea:5b:85:ca:11:d7:60:1c:9b:
71:8b:a7:03:55:c4:4c:09:8f:b9:97:00:75:15:46:d9:11:13:
03:0b:0f:f4:df:e4:a1:e8:01:e3:0c:c1:84:2e:c3:1e:82:60:
4e:27:ca:2b:e1:6a:5a:c9:6f:98:de:95:bd:96:95:b5:3a:34:
cc:21:95:30:58:55:08:74:f9:eb:aa:43:9e:1a:8b:40:6c:f8:
dc:15:73:3a:f6:49:c3:38:bb:c4:c4:d8:b6:f3:40:01:40:e5:
7d:7f:80:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:55 2026 by rpki-client