Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/bbb948-fa13-4619-89ae-5561b078fb95/1/uprVMfVGd8FxqPFBDTr9vwGquis.mft
File: uprVMfVGd8FxqPFBDTr9vwGquis.mft (raw, json)
Hash identifier: TX60/73F2+pJ1AKrDeAis0P/1kmQKjWEpR+opgY4CdA=
Subject key identifier: 7E:29:B4:CF:6E:2B:FF:DD:FB:E6:1D:4E:FA:C6:CB:74:8B:83:F4:8F
Authority key identifier: BA:9A:D5:31:F5:46:77:C1:71:A8:F1:41:0D:3A:FD:BF:01:AA:BA:2B
Certificate issuer: /CN=ba9ad531f54677c171a8f1410d3afdbf01aaba2b
Certificate serial: 019D3789B1C1C5202CF1934F7F3616340168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uprVMfVGd8FxqPFBDTr9vwGquis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/bbb948-fa13-4619-89ae-5561b078fb95/1/uprVMfVGd8FxqPFBDTr9vwGquis.mft
Manifest number: 75
Signing time: Sun 29 Mar 2026 03:01:03 +0000
Manifest this update: Sun 29 Mar 2026 03:01:03 +0000
Manifest next update: Mon 30 Mar 2026 03:01:03 +0000
Files and hashes: 1: uprVMfVGd8FxqPFBDTr9vwGquis.crl (hash: VbSyv3HXp1gXeEYINLnvmQVSJwrAL1xI3lyodvg29LY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/bbb948-fa13-4619-89ae-5561b078fb95/1/uprVMfVGd8FxqPFBDTr9vwGquis.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/bbb948-fa13-4619-89ae-5561b078fb95/1/uprVMfVGd8FxqPFBDTr9vwGquis.mft
rsync://rpki.ripe.net/repository/DEFAULT/uprVMfVGd8FxqPFBDTr9vwGquis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:b1:c1:c5:20:2c:f1:93:4f:7f:36:16:34:01:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9ad531f54677c171a8f1410d3afdbf01aaba2b
Validity
Not Before: Mar 29 03:01:03 2026 GMT
Not After : Mar 30 03:01:03 2026 GMT
Subject: CN=7e29b4cf6e2bffddfbe61d4efac6cb748b83f48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:12:8d:7a:98:9f:05:05:99:5c:ed:ea:29:bc:
1a:33:1d:b9:dd:5c:a7:56:9a:fd:1f:c4:ab:86:11:
60:e6:cf:40:78:6b:09:38:31:61:ec:cf:41:f6:84:
80:5b:ce:07:3b:55:46:0c:02:bb:52:2d:3c:6c:08:
f8:5e:8c:a1:00:56:70:e8:10:27:15:70:c7:f7:6f:
bc:46:cc:82:ca:72:74:15:80:55:3e:10:74:75:62:
bc:71:66:06:52:a3:07:4d:b7:f6:6a:af:c3:98:2a:
0a:de:c2:95:52:57:b2:1b:6c:f4:2b:df:08:d0:08:
31:35:44:92:df:d4:f2:bf:3e:6d:d1:59:b6:e9:a1:
e1:d2:1c:f9:4e:1d:12:5d:eb:36:7c:72:98:a1:06:
a0:39:1f:6e:6b:02:b8:15:64:f2:6e:80:4b:59:8f:
d3:32:96:05:12:1b:29:00:ee:b3:79:6a:a0:ed:df:
a8:57:21:a3:06:1f:7a:be:58:86:79:e3:40:6d:f9:
29:75:3b:55:46:ba:5c:02:1c:e8:f9:37:10:86:1a:
42:0f:91:35:dd:c7:3f:ed:1e:ba:67:ba:79:43:04:
8b:ba:03:fe:0e:e1:4e:cd:d5:28:21:2e:3a:1a:3d:
3d:03:5b:2b:e5:33:bc:94:6e:ad:21:91:1a:ad:06:
00:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:29:B4:CF:6E:2B:FF:DD:FB:E6:1D:4E:FA:C6:CB:74:8B:83:F4:8F
X509v3 Authority Key Identifier:
keyid:BA:9A:D5:31:F5:46:77:C1:71:A8:F1:41:0D:3A:FD:BF:01:AA:BA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uprVMfVGd8FxqPFBDTr9vwGquis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bbb948-fa13-4619-89ae-5561b078fb95/1/uprVMfVGd8FxqPFBDTr9vwGquis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bbb948-fa13-4619-89ae-5561b078fb95/1/uprVMfVGd8FxqPFBDTr9vwGquis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8a:05:3b:79:b7:b0:38:ca:a4:29:cb:73:f4:17:cf:0a:33:
d7:52:09:30:5c:73:bc:49:bc:f2:51:b4:aa:0c:5b:24:20:d7:
12:37:7f:d4:86:e0:86:13:c8:34:24:02:83:95:50:9c:c8:4e:
c2:91:38:67:4b:a0:fe:27:d1:48:79:9c:24:2b:26:ee:cf:20:
5b:56:ac:94:9d:b1:e0:43:37:e0:13:50:ab:6d:62:cc:e4:ee:
d1:eb:d0:7a:0e:16:b7:e6:13:d8:a8:c9:e1:c5:3e:8a:ca:79:
c8:67:9f:50:2c:36:19:99:fb:c1:e8:5f:f7:1b:29:0a:bb:58:
d1:c4:b6:8f:b4:08:98:ea:86:d7:11:bf:21:31:6d:0b:a7:fb:
db:60:d2:56:0e:b2:68:09:89:50:5d:f3:60:c8:45:3d:38:f9:
f5:ea:d1:e7:6c:10:ef:9e:b3:0b:74:d9:86:78:6e:57:7f:e4:
25:bd:3b:13:65:5d:6a:7e:86:1e:47:58:ac:4c:bb:6b:86:2f:
af:65:e0:ec:80:43:73:62:df:c5:98:76:43:b4:74:8d:9d:25:
af:91:fe:a4:bb:82:f9:60:22:50:79:8b:38:8c:df:fa:e2:49:
79:a3:46:13:a4:82:34:4f:c4:00:46:22:3d:d8:4d:88:03:31:
10:23:b7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:27:45 2026 by rpki-client