Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
File: g-ULKlHI9a25N7IqkMcg9rBPKXM.mft (raw, json)
Hash identifier: X4zaK+n/SiVfAYiWJ04MvEZc63H4jGRRIy6L0eouWJ0=
Subject key identifier: CF:3B:07:D3:D7:FD:0B:32:C6:EC:5A:3D:1D:D3:8D:AD:D7:CC:F5:B6
Authority key identifier: 83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73
Certificate issuer: /CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973
Certificate serial: 019D38D302F754DB06DC6E29A5E9DB841B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
Manifest number: 16A2
Signing time: Sun 29 Mar 2026 09:00:46 +0000
Manifest this update: Sun 29 Mar 2026 09:00:46 +0000
Manifest next update: Mon 30 Mar 2026 09:00:46 +0000
Files and hashes: 1: g-ULKlHI9a25N7IqkMcg9rBPKXM.crl (hash: SwT3Geo01XBeWjKP6RqTwusFmCZrAMBTkQvvASO8FVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:02:f7:54:db:06:dc:6e:29:a5:e9:db:84:1b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973
Validity
Not Before: Mar 29 09:00:46 2026 GMT
Not After : Mar 30 09:00:46 2026 GMT
Subject: CN=cf3b07d3d7fd0b32c6ec5a3d1dd38dadd7ccf5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d7:66:99:21:b9:7e:4c:11:eb:81:7e:f1:78:
e5:37:61:d2:ce:95:d4:ed:4d:3a:bd:83:c6:41:50:
e2:66:cd:b6:f2:3a:9a:75:f8:78:66:16:0f:6b:1f:
4a:d4:1c:10:d1:e8:f6:7c:68:6f:32:18:38:f7:a2:
83:a5:ae:90:1d:bd:8d:3f:c5:10:ed:3b:36:19:d8:
f6:1e:11:11:ba:5c:4f:02:68:8d:43:0d:23:6b:f3:
00:0b:ea:fc:bc:f1:41:d7:2f:ac:8e:c3:02:48:12:
06:22:78:c9:8b:b5:53:91:c1:9b:44:7b:82:72:7f:
a9:d5:93:b4:60:b2:33:d1:4d:f4:bb:a3:67:26:f3:
e6:10:01:b0:63:18:07:9c:13:73:5a:4d:f6:3f:54:
98:dd:d7:b6:0b:78:e0:f8:b0:ac:ed:58:a7:31:70:
b5:ee:c3:27:42:2e:47:5c:6f:f4:9a:c5:a9:f9:47:
87:0e:4b:e4:35:48:de:97:37:f2:cb:37:fd:72:d0:
64:f1:5b:ce:d8:e2:ea:a9:e6:d3:92:07:61:ed:72:
69:47:39:9b:c3:69:41:ae:c2:37:f1:54:d0:aa:69:
15:73:16:1a:aa:7c:2f:6d:7f:f1:ce:03:f0:f4:d0:
6f:68:66:27:51:77:e2:51:44:78:b5:b1:22:9f:a4:
e7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3B:07:D3:D7:FD:0B:32:C6:EC:5A:3D:1D:D3:8D:AD:D7:CC:F5:B6
X509v3 Authority Key Identifier:
keyid:83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:67:26:d6:1f:75:e2:20:7c:62:3b:04:6b:c8:50:0b:7c:39:
88:7e:86:ea:00:4d:33:8f:f1:f1:9d:df:9a:8e:9f:4a:d7:80:
0d:e4:20:58:87:41:36:64:9c:1a:a9:4f:a2:d5:12:ec:45:ab:
bf:86:9d:1a:3b:a4:a8:ad:6c:d9:13:e4:70:af:ce:60:f6:8a:
36:d7:7e:09:9c:b0:80:a0:34:28:ba:a3:3b:8a:61:ae:d7:75:
4a:ca:45:d0:eb:96:92:b9:c0:8c:2c:a1:98:d7:76:78:34:3f:
b7:a4:b5:d3:99:a5:0a:ee:3a:79:5f:f2:f9:c8:e2:2e:34:e8:
1f:85:a3:21:d9:b2:24:45:30:9a:e3:cd:fc:71:79:85:2d:dc:
f9:c1:c6:b2:4e:b8:48:e3:90:23:f4:6a:8d:90:9a:fb:c9:64:
10:46:c2:9f:61:71:ff:7b:0f:b8:5e:ef:49:b1:63:55:6c:e5:
f6:94:15:d5:2a:04:1c:af:a7:75:7e:9c:94:cf:cc:ff:f1:6f:
b7:ad:38:d4:34:95:75:91:36:35:98:b8:66:2b:25:9b:ba:14:
b5:37:09:a6:07:38:54:26:cd:68:88:8e:7c:45:01:df:87:8e:
8e:c3:38:e5:49:1b:3c:0e:62:e8:f9:a9:65:b8:84:4d:5d:65:
12:a4:71:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:14 2026 by rpki-client