Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
File: u5O3SkaFwcFKueGSF6qxQWNBEdY.mft (raw, json)
Hash identifier: 8zPMBGA7JPxkWZxIi4RxLPBW9+jZblg8i2gRvLwEnSU=
Subject key identifier: D1:DE:A4:DE:92:2D:7C:4B:F2:5D:84:FD:E1:D9:CC:7D:1C:D3:36:F3
Authority key identifier: BB:93:B7:4A:46:85:C1:C1:4A:B9:E1:92:17:AA:B1:41:63:41:11:D6
Certificate issuer: /CN=bb93b74a4685c1c14ab9e19217aab141634111d6
Certificate serial: 019D37C0F9D9571500CCEDFF8253C4814995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
Manifest number: 1236
Signing time: Sun 29 Mar 2026 04:01:26 +0000
Manifest this update: Sun 29 Mar 2026 04:01:26 +0000
Manifest next update: Mon 30 Mar 2026 04:01:26 +0000
Files and hashes: 1: u5O3SkaFwcFKueGSF6qxQWNBEdY.crl (hash: oW3OlDKI+EVkz3rcF7Rdxvwrp7ip1EuhmUZn+2SykkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f9:d9:57:15:00:cc:ed:ff:82:53:c4:81:49:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb93b74a4685c1c14ab9e19217aab141634111d6
Validity
Not Before: Mar 29 04:01:26 2026 GMT
Not After : Mar 30 04:01:26 2026 GMT
Subject: CN=d1dea4de922d7c4bf25d84fde1d9cc7d1cd336f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1b:c0:5f:a3:1f:be:54:45:93:d9:62:51:81:
e7:b2:2a:c1:85:f7:04:49:71:f1:80:f2:94:65:73:
6e:e9:75:30:0f:b8:80:01:c7:8b:0d:b7:b4:ab:b6:
1c:7d:41:83:86:d0:7a:4d:53:68:d7:35:04:5b:6c:
7d:b7:a0:b8:8d:c0:91:6e:ca:bd:cb:d9:86:85:1d:
36:48:51:46:4d:b4:95:db:bf:ed:87:16:4f:13:33:
81:8b:1e:99:64:53:1a:fe:b3:d0:46:1d:ea:8a:52:
7a:3c:d9:74:db:7c:ba:f1:0c:1b:4b:98:38:33:2c:
f0:6e:71:be:82:9e:cb:21:1b:65:01:e3:71:b2:e1:
b9:4a:74:d8:86:9c:ab:90:1d:a2:4d:da:9f:fb:cc:
ad:b3:c3:c6:a7:de:4d:c8:fc:98:13:fe:3f:ac:a1:
f4:01:83:88:6e:fd:a9:9c:7b:e7:bf:ad:27:49:54:
43:ca:b5:d7:6b:47:60:c7:49:d6:79:08:02:47:79:
11:f1:a3:54:d0:20:b1:fd:38:ef:79:7b:e4:b8:6f:
88:d9:02:a0:67:34:e9:ad:3c:16:a1:44:7e:9b:b4:
09:84:25:31:d3:04:08:5a:6d:fd:a9:2f:76:a4:e1:
61:a1:02:b0:e8:3e:b4:0e:c5:3b:94:9a:77:24:db:
98:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DE:A4:DE:92:2D:7C:4B:F2:5D:84:FD:E1:D9:CC:7D:1C:D3:36:F3
X509v3 Authority Key Identifier:
keyid:BB:93:B7:4A:46:85:C1:C1:4A:B9:E1:92:17:AA:B1:41:63:41:11:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:51:96:02:47:d0:fd:29:2b:57:72:75:42:e4:0b:d4:d6:67:
ea:31:9a:2a:4e:cd:f5:9f:7e:45:9b:75:19:3d:78:e7:da:bc:
8c:2a:fb:7e:1a:a6:d4:b4:79:a7:9f:0c:d0:3c:33:81:78:be:
9a:f9:24:0d:6f:c8:01:dd:40:b2:4f:72:1a:70:ec:0d:6a:d1:
f5:f9:51:af:14:e1:df:4f:16:14:e4:00:2c:37:0c:0f:9a:ec:
92:dd:c0:ce:96:7a:dc:b7:9c:7f:82:32:b2:da:d7:98:0b:40:
39:97:36:eb:3f:24:d6:a1:d7:71:b4:8b:ad:b3:42:7b:a5:fb:
8d:cd:43:12:49:1d:38:bc:c6:c5:0c:8a:ad:76:0d:8a:7e:87:
7e:f1:94:51:c8:12:1c:7e:bf:02:9a:7b:54:33:7f:96:e8:dc:
37:19:7f:7a:19:3f:23:dd:a5:47:e2:d1:60:da:70:c3:97:96:
23:0e:c9:48:98:5f:1f:42:ac:9b:6d:92:1f:26:33:a6:32:0c:
86:4d:54:24:f2:bc:e6:67:0d:0d:0f:23:50:26:47:f2:57:4c:
40:6a:9e:74:15:35:7a:8a:d3:dc:72:4b:ac:e8:f8:a5:8f:b9:
2b:7b:a5:d3:03:03:bc:ce:a6:59:c4:aa:33:87:c9:07:c0:c1:
43:ad:93:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:20 2026 by rpki-client