Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
File: U-r4Oizdyf0L4onM-vMrMjMEz04.mft (raw, json)
Hash identifier: pC4maWXOREoF2k+WPuuGwzXds/WcrLKi2Ab80Uv2UFU=
Subject key identifier: 3B:D2:FD:51:72:5C:A1:F2:C8:CB:6C:32:E3:A1:D8:81:08:67:89:98
Authority key identifier: 53:EA:F8:3A:2C:DD:C9:FD:0B:E2:89:CC:FA:F3:2B:32:33:04:CF:4E
Certificate issuer: /CN=53eaf83a2cddc9fd0be289ccfaf32b323304cf4e
Certificate serial: 019D371BF2899104D2675F2D696F92B35D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
Manifest number: 0F5C
Signing time: Sun 29 Mar 2026 01:01:11 +0000
Manifest this update: Sun 29 Mar 2026 01:01:11 +0000
Manifest next update: Mon 30 Mar 2026 01:01:11 +0000
Files and hashes: 1: U-r4Oizdyf0L4onM-vMrMjMEz04.crl (hash: 8Olamqk0JekCq0Jee28Zlx7I92G9SrPeQonVcVTI9o8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:f2:89:91:04:d2:67:5f:2d:69:6f:92:b3:5d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53eaf83a2cddc9fd0be289ccfaf32b323304cf4e
Validity
Not Before: Mar 29 01:01:11 2026 GMT
Not After : Mar 30 01:01:11 2026 GMT
Subject: CN=3bd2fd51725ca1f2c8cb6c32e3a1d88108678998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:47:2e:d9:50:38:86:ff:37:bc:ac:14:f9:fc:
b2:e1:18:40:87:5f:6d:45:79:34:86:9d:d6:7e:f2:
31:35:93:55:2f:35:f2:2c:1d:d9:00:c3:61:0f:b1:
9d:51:7d:34:a7:99:83:9c:3b:07:79:7f:21:d5:6d:
ae:66:3a:22:00:62:fc:24:6f:a9:17:7a:cb:92:c8:
c5:12:15:27:b2:d6:df:96:6e:52:89:64:d4:41:bc:
54:3f:83:a1:90:38:c2:a4:4c:fe:4f:87:cb:2a:04:
74:84:d5:ea:39:de:3d:9f:aa:9e:c2:a9:08:71:b3:
dc:c5:3d:c0:da:62:8e:66:1e:eb:98:54:6e:7c:2c:
f7:db:44:da:9b:02:6c:e3:3e:dc:dd:5b:9e:e1:b1:
1f:16:2a:d8:c9:36:e6:0e:4a:21:c9:68:18:be:d3:
a1:35:cc:19:fd:2e:8c:fe:b7:80:de:8b:10:63:8f:
5e:af:fb:08:69:ab:f8:d9:bc:5a:99:84:49:10:5c:
af:f8:f7:87:3a:25:b4:eb:e4:16:72:e8:c8:d0:c5:
59:10:68:74:55:bd:72:dc:9e:c0:cc:23:33:7b:1b:
2a:34:76:5b:90:df:5f:fd:98:69:0f:04:c5:ac:81:
71:26:d0:47:62:96:fb:c7:c4:e5:80:1a:10:73:22:
d5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D2:FD:51:72:5C:A1:F2:C8:CB:6C:32:E3:A1:D8:81:08:67:89:98
X509v3 Authority Key Identifier:
keyid:53:EA:F8:3A:2C:DD:C9:FD:0B:E2:89:CC:FA:F3:2B:32:33:04:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:55:2a:21:66:a9:91:e5:d2:1c:82:22:b1:08:bf:b0:27:30:
5b:fb:f2:6e:20:d0:be:ff:56:9c:77:7a:bb:59:ad:69:da:b5:
29:c7:f7:47:41:4f:47:49:c0:5b:7c:87:37:76:f9:8a:d8:c1:
93:73:87:b4:08:84:63:35:f7:37:c0:b0:00:11:4b:45:2d:71:
0a:35:73:96:9c:d2:17:83:1b:af:90:a4:65:3f:6d:15:c6:6b:
38:a5:81:fc:e1:c5:c8:96:98:97:35:c4:a5:a8:27:ea:df:31:
09:ee:bc:b3:e4:21:19:5b:5c:0a:c9:ca:d2:be:30:43:43:a7:
88:b2:c6:db:35:93:a3:8c:6b:f4:e9:b3:9a:d0:8d:cb:d2:27:
19:b2:65:c3:85:f0:75:f6:ba:db:0e:cd:02:a0:35:6e:21:74:
90:b4:be:b5:bc:4b:50:6b:df:7d:2e:df:41:e3:29:9a:9c:fe:
42:5f:6c:16:17:77:df:f0:d1:fb:27:c9:30:51:d0:9c:9d:9f:
c5:33:03:e8:c1:00:69:c6:f9:f0:19:a5:66:ea:37:41:4e:a9:
33:73:48:2f:92:f2:a2:bb:b1:5a:7c:b7:f9:d4:e8:11:e6:16:
3f:22:21:69:82:5f:ad:e7:97:f3:bf:d7:bd:fc:29:56:62:3b:
40:ac:e5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:18 2026 by rpki-client