Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
File: uXhT3Vdz8qawcYefW567Dm9Ofao.mft (raw, json)
Hash identifier: gQFrAiTCjSJQHEeJ4CGTvaJVDEoqStynnx4XIET2qwU=
Subject key identifier: 81:D7:42:CF:B2:67:0A:F5:44:1B:0B:CB:87:47:70:FF:E1:89:27:00
Authority key identifier: B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
Certificate issuer: /CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Certificate serial: 019D38D36085876DB6AF637227D859CF8A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 09:01:10 +0000
Manifest this update: Sun 29 Mar 2026 09:01:10 +0000
Manifest next update: Mon 30 Mar 2026 09:01:10 +0000
Files and hashes: 1: uXhT3Vdz8qawcYefW567Dm9Ofao.crl (hash: puuGL0J1joWb/daVRNnWIOh8mBed/TnZoo9tdYiNRyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:60:85:87:6d:b6:af:63:72:27:d8:59:cf:8a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Validity
Not Before: Mar 29 09:01:10 2026 GMT
Not After : Mar 30 09:01:10 2026 GMT
Subject: CN=81d742cfb2670af5441b0bcb874770ffe1892700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:bc:9f:7b:d4:4a:2d:af:d3:fd:a4:96:bd:
f1:f8:7e:fd:25:c2:e0:70:fc:63:b7:08:a0:8c:25:
94:f0:8a:08:46:57:06:16:af:7c:ae:4e:c1:14:83:
63:b5:30:fc:61:6b:e8:e3:45:8d:73:5f:07:8d:24:
38:75:22:c3:a0:63:14:00:41:a1:63:31:c9:c4:36:
f7:bb:5a:c9:97:a0:1e:c5:ca:fd:c3:16:87:ea:80:
91:94:4d:ef:59:d0:74:f3:ab:17:30:e4:bd:62:04:
69:b5:86:e3:ee:d4:bd:60:46:c3:42:32:df:c4:79:
45:ee:d5:18:4e:7f:3d:c5:54:fa:2d:4d:5b:27:eb:
85:dc:73:a5:b5:43:ce:0c:90:50:5b:15:55:b5:7a:
52:5c:30:aa:53:2c:b5:26:89:18:99:8b:cb:d4:0e:
56:9f:78:6c:fe:72:cf:8a:7d:26:08:c1:f6:a1:07:
a2:0f:71:38:38:54:50:11:7f:54:c2:b2:9b:d9:78:
22:3e:23:23:2d:ea:e5:33:4a:9d:5f:ac:36:58:21:
d3:f1:46:1e:3f:c9:fb:19:c3:cc:d4:c9:b9:a0:e0:
30:bf:0c:12:c7:11:60:b2:79:93:12:1a:bf:1a:37:
d2:03:80:53:a7:05:40:e8:ac:10:61:34:1d:19:98:
e9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D7:42:CF:B2:67:0A:F5:44:1B:0B:CB:87:47:70:FF:E1:89:27:00
X509v3 Authority Key Identifier:
keyid:B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:82:a1:fb:04:54:92:1c:64:8c:07:7d:85:f0:75:53:3e:92:
99:e1:ac:f6:30:84:2d:ff:cc:8e:4c:a1:29:8e:3e:98:ef:e3:
06:ec:a8:d2:c0:ef:3f:bf:44:bb:2b:33:59:95:2f:4c:e3:85:
31:17:fb:b0:bc:b8:77:b1:9d:33:1f:00:e1:21:40:f8:3d:56:
aa:eb:7b:c4:7b:cf:4e:8e:8e:4f:e6:b6:2a:83:54:67:cb:30:
05:3a:d9:82:9f:44:32:af:47:c8:75:86:a7:4b:b2:d3:6d:ce:
a9:7c:71:c7:ab:a3:cc:1b:79:a6:0e:e5:35:96:76:8b:6e:91:
4f:fb:0c:e4:81:44:e9:35:b5:5d:ad:ed:7e:be:f6:ec:de:85:
35:b4:d0:7e:04:0e:76:99:81:b7:34:1c:4c:17:4b:18:1d:8d:
d0:d0:aa:20:60:fc:3d:2b:bf:6b:76:9a:bf:7e:63:08:e4:8c:
9a:29:68:56:0d:aa:95:6a:d8:40:da:a7:7f:03:3d:01:12:49:
9a:bc:ec:98:a4:d5:61:3a:d1:9b:7e:61:83:80:3d:44:e9:1e:
b9:3f:d9:23:17:70:9e:45:8c:df:61:cf:14:d5:84:29:70:f9:
82:4f:5d:b7:d0:92:30:52:45:28:fa:c3:76:13:f9:cb:b5:68:
4d:96:38:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:47 2026 by rpki-client