Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.mft
File: U1wJpqvN8dobR6tK8_-O_KWBRF0.mft (raw, json)
Hash identifier: V40qO81NFEvByQrDa4dTWWfdc0LxjJF7icmr6EiLyto=
Subject key identifier: 14:C0:74:8F:80:1B:5A:4F:86:9D:11:4E:12:CD:65:A0:82:B5:E8:78
Authority key identifier: 53:5C:09:A6:AB:CD:F1:DA:1B:47:AB:4A:F3:FF:8E:FC:A5:81:44:5D
Certificate issuer: /CN=535c09a6abcdf1da1b47ab4af3ff8efca581445d
Certificate serial: 019D38667416FE19522FE0A8700D37EC6736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1wJpqvN8dobR6tK8_-O_KWBRF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.mft
Manifest number: 07F3
Signing time: Sun 29 Mar 2026 07:02:11 +0000
Manifest this update: Sun 29 Mar 2026 07:02:11 +0000
Manifest next update: Mon 30 Mar 2026 07:02:11 +0000
Files and hashes: 1: U1wJpqvN8dobR6tK8_-O_KWBRF0.crl (hash: K7P1SUiGcVRl99evY7DDavI8GnLCI7FzdhuN4tDaV+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1wJpqvN8dobR6tK8_-O_KWBRF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:74:16:fe:19:52:2f:e0:a8:70:0d:37:ec:67:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535c09a6abcdf1da1b47ab4af3ff8efca581445d
Validity
Not Before: Mar 29 07:02:11 2026 GMT
Not After : Mar 30 07:02:11 2026 GMT
Subject: CN=14c0748f801b5a4f869d114e12cd65a082b5e878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:64:75:2a:af:17:a1:c7:bc:6d:e3:54:da:
c2:0e:b2:34:43:92:29:3b:1c:ad:eb:f0:c2:eb:00:
3e:65:5d:58:cc:1f:de:a1:a1:51:52:34:38:c4:83:
1f:f1:79:34:a7:7f:5c:c5:9e:f6:d9:54:76:91:43:
b1:15:95:4f:eb:7e:7d:34:d3:b2:42:12:ee:57:9a:
cb:09:79:fa:b2:49:14:39:57:d1:62:1d:c0:f1:7d:
eb:fe:57:43:8e:9f:90:c4:cb:76:a1:35:c9:15:c4:
e3:ae:d6:8b:d8:ce:6d:ae:4f:7a:a6:42:f8:01:d0:
4c:f9:4d:eb:6b:c5:ae:37:45:62:e4:ec:15:a8:19:
40:88:44:eb:70:df:64:73:e0:c0:86:e2:6d:fb:07:
22:80:94:d4:d8:22:cc:c3:36:79:4b:ae:61:e5:6d:
74:b0:8a:b9:6a:1b:a5:d4:6a:90:c2:e4:a1:5b:96:
52:96:6d:08:13:7d:bc:7c:c5:9b:b2:6d:23:50:11:
64:91:78:3c:bc:c0:05:04:1f:54:54:d1:e5:56:24:
de:b2:d8:cd:9e:d0:e6:78:1f:99:64:d9:07:c7:57:
ba:f0:60:74:cb:7e:c6:23:28:9d:9d:86:42:84:94:
6d:a4:ab:aa:b7:69:8c:23:bb:f6:a8:9f:ee:79:ef:
f9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C0:74:8F:80:1B:5A:4F:86:9D:11:4E:12:CD:65:A0:82:B5:E8:78
X509v3 Authority Key Identifier:
keyid:53:5C:09:A6:AB:CD:F1:DA:1B:47:AB:4A:F3:FF:8E:FC:A5:81:44:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1wJpqvN8dobR6tK8_-O_KWBRF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2e:ac:3e:26:72:92:e9:ed:3e:e0:8b:38:a5:91:64:38:0c:
23:ce:e0:d5:0a:8a:ce:57:ce:3c:3c:3e:c6:ed:74:ed:97:0a:
92:62:52:6a:13:e4:6f:47:73:f8:7c:24:77:e6:1f:47:53:d5:
ed:c3:b2:5f:05:b8:46:87:9d:10:97:16:44:41:17:6f:85:0d:
69:8f:49:e7:94:3c:b9:47:ad:61:fb:a5:a8:8b:7c:b6:cd:33:
2d:8c:10:53:3c:a1:f9:8d:7f:54:e0:c8:64:13:aa:6e:e2:a4:
50:ba:c3:fd:32:52:5f:0f:2b:9b:ce:01:35:79:b1:80:74:9e:
82:f9:d0:39:5f:76:62:cc:7c:27:19:09:5e:a3:3b:2b:8f:d9:
bc:98:c8:a8:ea:68:b9:21:0a:98:6f:fa:a1:1c:de:b0:2b:94:
79:1c:a6:93:b4:c5:b8:2b:27:e7:bd:74:69:29:1d:dd:5c:53:
b6:4f:a6:79:08:e9:b3:3f:22:a1:eb:75:46:39:73:23:75:7c:
b9:16:7c:84:6d:4e:63:9a:83:a4:5b:c5:56:00:9f:eb:f7:36:
96:a7:bd:7c:9c:f8:7d:fc:cf:87:de:60:6b:b7:41:5e:e0:31:
fc:c1:11:8e:57:db:95:0e:70:c3:1b:ce:a4:45:91:21:b8:eb:
22:64:12:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:28 2026 by rpki-client