Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
File: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft (raw, json)
Hash identifier: Pl78Yy9iTQeRD5QD1Q3Waa7/mvqmaOLvJcNG8Nq6DTk=
Subject key identifier: D3:F5:7D:6B:C2:67:BF:38:60:AC:FE:ED:D7:14:D0:09:CF:2C:0B:2B
Authority key identifier: BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B
Certificate issuer: /CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
Certificate serial: 019D389C0D59F4AD62C04E5D7FF07A9D0ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
Manifest number: 0616
Signing time: Sun 29 Mar 2026 08:00:44 +0000
Manifest this update: Sun 29 Mar 2026 08:00:44 +0000
Manifest next update: Mon 30 Mar 2026 08:00:44 +0000
Files and hashes: 1: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl (hash: 22iy3pitFwy54FL+vKGz4LAOFeViIq8AptI2ofmDtxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:0d:59:f4:ad:62:c0:4e:5d:7f:f0:7a:9d:0e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
Validity
Not Before: Mar 29 08:00:44 2026 GMT
Not After : Mar 30 08:00:44 2026 GMT
Subject: CN=d3f57d6bc267bf3860acfeedd714d009cf2c0b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e8:6a:86:a2:53:b9:02:c9:69:c9:7e:88:3c:
d2:52:ef:e0:a5:0c:24:6d:cb:d1:9a:dd:25:72:3c:
13:47:53:8d:f7:11:72:54:07:ae:b6:c4:a9:48:72:
a4:06:e1:4a:bc:ba:2f:f6:ce:b8:8e:69:17:23:22:
ba:c1:6e:cf:5b:8c:1e:f9:30:39:d1:cc:fc:4a:88:
2b:b2:59:63:e7:08:09:3c:ae:fd:8c:9a:fa:62:b8:
8b:df:f9:7d:06:0c:41:de:37:8c:a6:96:29:70:cc:
f4:f2:5d:84:4f:d8:55:5f:cc:dd:18:4d:64:45:60:
9b:5a:06:17:1f:0a:80:17:62:96:ec:0b:ba:cc:cb:
63:0e:93:3b:74:49:df:5d:6c:e5:d0:29:18:aa:1a:
b7:b5:c9:d6:7f:95:25:7d:20:e8:ea:e6:44:13:5f:
be:2e:45:24:88:9d:b4:1c:b7:df:5d:36:01:5c:5f:
b2:6c:7e:5e:13:d2:fc:21:43:a8:c5:a1:dc:97:25:
53:79:5d:00:14:18:e9:ee:29:71:82:17:7d:3c:79:
23:55:5a:eb:2c:cf:17:e5:06:d2:06:1c:b9:3e:58:
25:25:51:6b:f2:0a:fc:c0:9f:48:30:cf:08:02:79:
87:6e:de:26:be:e7:63:64:aa:a6:aa:61:92:c1:ed:
3f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F5:7D:6B:C2:67:BF:38:60:AC:FE:ED:D7:14:D0:09:CF:2C:0B:2B
X509v3 Authority Key Identifier:
keyid:BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7f:d5:34:30:53:7e:40:bc:7a:0a:24:d1:64:dd:08:07:1f:
60:5d:b2:23:62:05:18:b4:35:45:75:dc:82:ae:e9:5f:5f:eb:
43:36:65:3a:63:29:9e:09:c7:8b:d8:95:6e:57:9e:9f:f1:b7:
0b:28:9f:d1:8c:d2:3b:14:ef:19:e2:67:5a:7d:b3:45:62:86:
59:9c:d6:6c:94:d5:eb:e8:95:d6:b3:c0:64:be:a6:18:88:2a:
0e:61:8f:4e:ca:29:b1:77:5d:b8:94:2c:fb:31:0c:6e:fd:d8:
f2:80:7e:eb:1d:d8:ab:12:0b:51:74:b7:45:13:cc:9f:cc:c4:
d1:30:65:de:6f:ac:d5:eb:04:73:22:56:87:0d:be:81:4f:eb:
98:32:22:e9:b9:be:41:50:54:e0:09:b0:4d:99:f1:44:60:af:
f1:ff:fd:36:93:54:a4:db:9c:5b:36:4a:23:bb:1d:eb:5a:a7:
64:79:7b:0c:f7:b5:f7:da:2c:85:a5:59:91:7d:ae:70:49:47:
d6:cf:ad:d4:4f:af:c0:4f:44:87:cf:28:2c:66:24:a4:61:59:
52:3a:aa:26:41:47:ef:af:da:12:f9:9e:bf:8b:09:c2:47:a3:
24:ad:a4:d6:56:00:1a:b9:cd:22:4b:ce:9a:a9:30:b1:17:e4:
b0:4f:7c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:19 2026 by rpki-client