Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.mft
File: uVZnsVy6fKp0FSdIRHOE--A7iTo.mft (raw, json)
Hash identifier: myM/pmENOMd268bNcOd+XnmcXzhncjeNRRaa2NQnuCU=
Subject key identifier: 64:A3:BD:4D:40:D7:80:85:E9:21:30:FA:7A:6B:F7:D1:B6:A9:6A:F4
Authority key identifier: B9:56:67:B1:5C:BA:7C:AA:74:15:27:48:44:73:84:FB:E0:3B:89:3A
Certificate issuer: /CN=b95667b15cba7caa74152748447384fbe03b893a
Certificate serial: 019D38664329CC5B3227CCD5F560AB85A051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uVZnsVy6fKp0FSdIRHOE--A7iTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.mft
Manifest number: 0B40
Signing time: Sun 29 Mar 2026 07:01:59 +0000
Manifest this update: Sun 29 Mar 2026 07:01:59 +0000
Manifest next update: Mon 30 Mar 2026 07:01:59 +0000
Files and hashes: 1: uVZnsVy6fKp0FSdIRHOE--A7iTo.crl (hash: 1s2S2Leo/wgfcBE5otALiTEjvYwYkq/MYFnifTLNJCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uVZnsVy6fKp0FSdIRHOE--A7iTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:43:29:cc:5b:32:27:cc:d5:f5:60:ab:85:a0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b95667b15cba7caa74152748447384fbe03b893a
Validity
Not Before: Mar 29 07:01:59 2026 GMT
Not After : Mar 30 07:01:59 2026 GMT
Subject: CN=64a3bd4d40d78085e92130fa7a6bf7d1b6a96af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c1:8b:5b:30:d4:13:01:3a:a6:26:ac:ac:ee:
d1:f2:fe:20:5b:7d:12:60:d3:79:4c:36:b0:bb:ff:
5f:61:5e:41:87:b4:78:04:ce:2d:92:16:2a:c9:43:
38:47:6c:45:92:f1:35:25:3c:68:e9:da:63:38:c0:
14:66:2a:b6:53:be:a2:6e:3c:49:a9:64:6b:33:8b:
0f:b6:77:8e:fe:34:a9:eb:c7:ff:65:33:48:e5:55:
6d:b1:bf:7a:b8:5d:b3:2c:ca:20:7b:a9:b6:de:68:
b7:6f:ba:fb:61:1d:a5:29:b6:a3:a9:c4:30:31:51:
4c:62:f3:a8:a1:17:bf:79:dd:10:fc:94:d4:03:25:
10:00:68:00:d2:cf:4e:b4:b9:23:d5:23:13:81:b0:
54:06:5d:75:c8:ea:da:fa:1e:e9:bf:bf:8b:54:39:
cc:bd:4d:ef:8f:2a:af:27:f2:0a:3c:ad:ea:b5:e8:
29:97:06:ea:13:bc:4f:e1:a4:f8:c6:49:53:4f:be:
27:39:11:0e:f3:f7:d1:04:f7:45:02:92:f4:99:f0:
46:93:5b:7f:34:59:7b:1a:0d:2c:b0:94:9f:d1:25:
f4:9c:f1:30:6f:cf:a6:aa:11:01:1a:65:03:bc:49:
96:85:d9:8d:b3:02:ec:4f:2b:36:14:85:d4:d6:d6:
c6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A3:BD:4D:40:D7:80:85:E9:21:30:FA:7A:6B:F7:D1:B6:A9:6A:F4
X509v3 Authority Key Identifier:
keyid:B9:56:67:B1:5C:BA:7C:AA:74:15:27:48:44:73:84:FB:E0:3B:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uVZnsVy6fKp0FSdIRHOE--A7iTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8a:e8:8a:ff:86:b6:5e:55:35:cb:a2:41:2e:b7:e7:31:c0:
f8:e8:82:18:5a:a7:24:04:4e:2f:de:9d:69:a9:94:c2:e5:7f:
78:ef:fd:d5:7d:7a:03:ef:98:16:a4:5b:bc:de:ab:54:27:5c:
6f:7d:c7:cf:2a:ac:af:8e:ed:28:72:65:f3:17:d4:3d:80:0d:
cb:6e:db:8d:2b:08:35:a3:dc:50:f7:5c:4e:c4:03:35:a8:d4:
dc:80:3b:24:c8:8f:19:b7:5a:ad:80:3f:63:93:8e:61:4a:3a:
e4:83:03:07:a8:7d:27:d2:9e:16:ca:69:bd:3e:7a:e3:b5:0d:
b6:15:ba:21:b2:84:d5:b4:80:02:fa:5b:78:8e:4f:77:2e:65:
4d:4d:09:e9:69:20:df:aa:0e:3e:e7:e6:40:f5:0a:17:c8:65:
cf:74:6d:80:b2:8c:68:df:6f:2e:c7:5e:6d:c6:6f:50:73:bd:
df:b7:e9:20:fa:48:9f:68:cd:f4:a0:1f:e1:e1:97:53:0f:11:
43:5c:73:46:33:cf:69:f4:a2:18:c3:a4:46:a1:8b:fe:d9:4f:
77:ff:5e:45:56:26:ae:e5:14:00:a5:d5:c6:eb:fc:24:32:b8:
de:ad:e6:ed:f9:6c:e1:ec:f6:5a:26:ca:ac:5e:83:16:01:26:
c1:6e:77:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:06 2026 by rpki-client