Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
File: 0_ULT8CViQuDHAPZliXA7lQZ01o.mft (raw, json)
Hash identifier: qG6E7h8V07wifUqAUSjOdiimO7t/25go0bdnI1ScPoo=
Subject key identifier: C3:02:D2:62:A5:14:4D:41:E9:E7:A9:D5:D4:97:EE:FB:20:F8:DD:F7
Authority key identifier: D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A
Certificate issuer: /CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
Certificate serial: 019D39415AB07AFD54097E4CFC7CCAB400A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
Manifest number: 1741
Signing time: Sun 29 Mar 2026 11:01:17 +0000
Manifest this update: Sun 29 Mar 2026 11:01:17 +0000
Manifest next update: Mon 30 Mar 2026 11:01:17 +0000
Files and hashes: 1: 0_ULT8CViQuDHAPZliXA7lQZ01o.crl (hash: orgmSO368ra+QETja1T5hUN6AZTna3Mar9KzP/H3xq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:5a:b0:7a:fd:54:09:7e:4c:fc:7c:ca:b4:00:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
Validity
Not Before: Mar 29 11:01:17 2026 GMT
Not After : Mar 30 11:01:17 2026 GMT
Subject: CN=c302d262a5144d41e9e7a9d5d497eefb20f8ddf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3f:09:fe:bd:8e:98:2f:c7:44:3f:fd:a6:4a:
0a:f3:71:56:8d:6b:4b:4a:c7:fa:72:8c:9a:cb:ce:
df:20:d5:3f:3a:aa:15:e5:f0:63:11:dc:48:e2:88:
df:5b:01:73:2a:94:3c:cd:82:09:bc:b1:83:3f:e0:
9d:b3:01:2a:1d:79:bc:29:9c:3c:08:97:c3:0e:aa:
f9:df:67:3d:8b:6a:50:79:4b:ef:7d:ab:1f:18:71:
3a:a8:83:6a:51:ef:d1:87:1d:e9:d6:0f:95:c8:43:
2e:18:b5:15:99:91:92:dc:b2:b4:4c:3b:c4:99:8e:
2a:95:d1:86:f0:61:7a:e6:19:62:17:51:8c:c9:fe:
d9:d1:01:d5:c6:b8:50:f7:6c:58:e6:17:34:eb:05:
99:4b:d9:50:19:c9:e2:33:1b:f3:19:04:e1:f0:97:
58:3c:4c:51:28:ef:53:ad:96:e0:47:48:5c:3c:57:
72:6a:df:45:df:55:19:bb:32:51:5e:07:8d:b5:b9:
c3:14:cb:2e:f1:ca:f8:e1:0b:59:da:c5:36:8c:bd:
18:47:de:1e:7b:48:37:ec:29:fc:75:d1:0b:71:1d:
33:7c:55:8e:5a:6f:28:0a:45:d4:9c:c3:35:77:5f:
23:08:3f:99:51:ac:97:cf:8d:92:d1:57:01:d5:5f:
1b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:02:D2:62:A5:14:4D:41:E9:E7:A9:D5:D4:97:EE:FB:20:F8:DD:F7
X509v3 Authority Key Identifier:
keyid:D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7a:0f:dc:10:04:26:7e:24:49:f2:28:af:92:ca:7e:79:74:
53:28:64:c7:99:97:85:d2:87:82:68:83:83:e5:10:36:33:e4:
87:40:7d:e3:f1:9a:9e:b6:78:73:ca:33:5c:f9:22:c0:b9:44:
0c:3a:7f:c3:79:c5:98:a5:e9:16:33:16:36:94:12:77:97:ef:
7a:74:89:80:4c:35:81:2c:54:4e:d8:91:65:11:06:f9:e5:b6:
be:0b:83:6c:c8:80:1f:f0:dc:f1:f6:04:f0:18:57:73:29:cd:
1d:30:36:5c:bb:2c:16:2b:90:31:78:eb:77:cd:c1:e3:06:67:
51:3c:c1:4a:8b:f2:16:15:e7:c3:0e:1c:c6:ae:84:e2:fc:62:
82:61:42:79:8a:64:07:6e:ba:e3:c0:69:ab:98:f3:cc:fe:31:
fe:d4:fa:d7:9b:bf:50:eb:6e:20:6b:9b:c1:26:f8:f8:f2:3e:
96:0d:b3:22:62:f1:02:d5:2c:d9:8d:0a:e3:df:61:f3:93:de:
f4:9f:c0:49:f4:4c:b6:cc:bb:ce:68:24:05:e9:33:1c:27:50:
44:ae:c6:d2:24:ad:89:58:d0:75:bd:bb:ef:8b:22:ef:7b:46:
2a:56:80:fe:cc:31:d3:59:f8:13:ec:43:f5:87:34:5f:bf:b7:
09:f8:a6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:00 2026 by rpki-client