Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
File: 1uDRyowZYcCxEoqlW4V5axIECpU.mft (raw, json)
Hash identifier: 2DDsjRTbC0EERtyBzO3bWp+2hHi8VW7/apPxPOZD5k0=
Subject key identifier: 48:25:7C:4A:AE:7A:B7:66:79:C8:A1:28:C3:FE:B6:A9:C9:6B:75:CB
Authority key identifier: D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95
Certificate issuer: /CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
Certificate serial: 019D382DD1CB2DE2FA60A35A6C33F8AB6CBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
Manifest number: 0D9A
Signing time: Sun 29 Mar 2026 06:00:19 +0000
Manifest this update: Sun 29 Mar 2026 06:00:19 +0000
Manifest next update: Mon 30 Mar 2026 06:00:19 +0000
Files and hashes: 1: 1uDRyowZYcCxEoqlW4V5axIECpU.crl (hash: Wdr2YA8G1H0s+pMFqldnvYlhnLEj4uRhcLR2XWSnroo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:d1:cb:2d:e2:fa:60:a3:5a:6c:33:f8:ab:6c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
Validity
Not Before: Mar 29 06:00:19 2026 GMT
Not After : Mar 30 06:00:19 2026 GMT
Subject: CN=48257c4aae7ab76679c8a128c3feb6a9c96b75cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:19:2c:a5:23:8e:a5:05:98:f4:7e:da:8e:
b4:a8:71:81:30:a7:65:cb:f9:e9:3b:27:c7:ff:c2:
0b:9b:b8:f7:98:1c:4b:29:f4:b9:5c:0e:67:5c:1c:
ed:4f:0a:84:6b:2c:9a:39:55:60:ba:79:6a:0f:07:
ac:f9:60:70:a5:b8:d3:df:01:2a:5b:79:b5:cb:55:
44:88:fb:55:e0:0c:e4:35:28:1b:47:83:c3:f3:6e:
b7:c9:91:be:64:69:b5:f4:ea:2a:6b:05:57:55:da:
d4:ff:e0:78:0b:ab:f0:3f:59:5e:7f:f8:ae:bb:cb:
27:fb:19:96:d6:d2:dc:95:d3:6f:9b:97:f1:67:c2:
e3:f1:90:5d:84:65:4b:c5:30:1f:30:4d:f9:a6:69:
fc:52:fa:b4:5a:96:b4:bb:a0:59:e4:a6:f9:b3:65:
65:23:aa:b5:3a:60:68:ba:a2:f2:22:02:7e:7a:13:
71:e5:62:76:b6:83:84:72:fc:d0:3c:b0:99:5f:e9:
de:56:57:7c:60:a1:0a:79:d7:69:72:74:a5:e1:f5:
aa:a0:7d:30:d3:da:e0:22:c8:c5:33:3e:38:06:b8:
db:96:e3:20:a8:ea:dd:41:2c:c4:1b:a0:e3:e1:b0:
8a:60:72:56:4c:b7:66:0f:46:40:48:ca:ae:de:24:
21:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:25:7C:4A:AE:7A:B7:66:79:C8:A1:28:C3:FE:B6:A9:C9:6B:75:CB
X509v3 Authority Key Identifier:
keyid:D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a7:44:c1:41:f7:83:5c:97:2c:90:08:86:39:67:62:ab:19:
9a:3e:7c:08:50:68:b3:5e:21:bc:df:26:7d:72:58:55:52:9c:
a5:a8:1b:21:e1:d5:01:a6:71:5f:4e:5f:c1:64:e8:56:57:fb:
49:bb:d2:78:6a:79:d0:9f:3a:65:20:2f:0a:a3:4f:53:e3:b8:
2e:79:a8:4c:6d:8d:6c:5f:54:eb:02:13:34:3b:ca:88:bb:d6:
9f:b7:ad:74:b0:a0:c0:bd:ca:bb:06:7b:11:4f:67:db:be:e6:
f6:24:3d:da:b3:52:a6:ee:f3:65:0f:1f:d9:39:a9:8e:95:61:
12:00:33:3a:da:8f:9c:96:0b:15:15:aa:17:64:00:6a:86:7a:
5e:71:57:02:c6:a7:cf:50:17:50:3f:d2:7a:15:a1:60:a6:3f:
73:5a:e2:69:6b:c8:00:9a:48:cd:aa:a4:21:1b:19:2e:c9:05:
4e:a3:fd:9f:dd:54:68:18:22:c6:c9:83:81:03:a6:e7:a9:7c:
f9:20:04:7e:59:66:35:7d:39:2c:6e:6d:76:c3:fc:a4:d5:2f:
b6:25:e4:4c:39:0a:68:4b:80:7d:87:5e:cd:88:15:7e:12:88:
14:6a:af:18:01:2f:9b:a7:74:90:39:31:05:3b:26:a1:d7:dc:
3e:d5:1d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:25 2026 by rpki-client