Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
File: uji5p2P2XAJ6o92th8GI2nikvZc.mft (raw, json)
Hash identifier: x+f4dOXrmIyFTZLpdCAAe8RtE51mymC6jKtn42p/SXQ=
Subject key identifier: 78:41:BD:60:61:F4:13:D8:F0:16:3A:E4:99:1D:54:C5:2B:5F:6A:35
Authority key identifier: BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
Certificate issuer: /CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Certificate serial: 019D38D2B2721D39A45BC6F0CDD9BB62A6E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 09:00:25 +0000
Manifest this update: Sun 29 Mar 2026 09:00:25 +0000
Manifest next update: Mon 30 Mar 2026 09:00:25 +0000
Files and hashes: 1: uji5p2P2XAJ6o92th8GI2nikvZc.crl (hash: qpoMuOeuVJ2oLpIVS1+U2B/Do7DD+moHwM9AONBNmiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b2:72:1d:39:a4:5b:c6:f0:cd:d9:bb:62:a6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Validity
Not Before: Mar 29 09:00:25 2026 GMT
Not After : Mar 30 09:00:25 2026 GMT
Subject: CN=7841bd6061f413d8f0163ae4991d54c52b5f6a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c7:a2:df:51:76:83:75:ff:35:17:f0:05:5d:
18:21:f7:ee:25:7e:1a:90:ed:6c:40:e0:fd:c8:c2:
96:be:c1:b0:da:bd:59:8b:51:2d:31:75:0b:ff:97:
55:9f:ce:2a:99:30:5d:9b:a4:2e:db:9a:2d:2c:fa:
1e:14:31:e3:a1:b4:5e:ca:5e:55:ec:52:4d:28:65:
20:6c:ba:9f:b3:e2:a6:64:fe:35:ef:b6:49:d3:c8:
fa:bc:24:40:29:ed:f2:7a:70:2e:28:5e:72:ef:28:
9a:69:f3:70:49:e4:4a:7b:ef:db:2c:11:b9:d0:ed:
11:1d:9f:e5:b1:6d:df:72:f0:9f:3d:48:28:09:ed:
b0:13:86:75:53:d4:c9:b2:7a:6c:8b:6d:ff:b5:06:
92:1d:d0:43:c3:d8:fe:dc:24:9d:65:77:08:ee:fe:
f1:eb:be:8d:a3:d6:29:93:70:5a:8e:a9:2c:a7:67:
cb:ee:96:61:36:97:5c:2f:4a:e7:8e:43:83:60:f8:
5e:09:81:19:76:80:b7:89:48:c1:cf:5b:da:10:1a:
01:71:1e:3a:2d:32:99:5d:fe:20:fc:d7:91:06:b9:
73:f5:73:71:57:60:b9:97:88:e8:92:e1:3f:84:b9:
d9:0c:19:c7:5e:1e:8e:e0:df:0a:1c:27:95:e8:0e:
45:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:41:BD:60:61:F4:13:D8:F0:16:3A:E4:99:1D:54:C5:2B:5F:6A:35
X509v3 Authority Key Identifier:
keyid:BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:85:c8:9d:95:14:53:0f:4c:14:0c:f0:8f:dd:eb:fe:84:78:
a5:5f:44:58:6e:42:c2:a0:0c:0b:1b:eb:73:42:33:31:64:d0:
10:ab:ae:d6:02:fc:90:9e:97:d5:cf:cd:30:72:2e:cb:9d:22:
44:60:93:97:97:ee:8b:e8:51:e1:e4:f1:a3:1f:9e:99:92:c6:
1c:dd:e1:85:63:1f:dc:a6:90:c6:2d:bf:c1:a6:0f:37:00:a4:
0c:a9:dc:3b:71:25:36:29:39:cb:6e:26:72:ce:50:b3:96:71:
ab:08:1c:7d:56:b6:dc:f3:74:a8:53:0e:19:fb:ee:77:51:cb:
62:5d:d7:2a:78:7b:11:37:5c:04:1a:ab:48:65:56:ff:1e:ff:
21:72:25:6a:b7:24:0c:e0:b1:d7:25:d4:59:56:0e:d5:46:c1:
5a:65:a2:c8:a5:cc:38:3a:a6:c8:c6:6e:28:27:d2:8a:c0:cb:
52:83:75:20:14:4c:c8:ea:7b:f4:db:29:8d:41:12:e1:48:0e:
1c:b7:08:4c:b1:45:5b:5d:8e:11:84:1a:46:90:c2:72:59:d8:
9b:b2:13:34:ea:82:04:ef:0e:a9:46:d4:29:3d:9c:7c:d9:fe:
ca:ae:63:56:3a:56:ea:98:a8:fc:95:d8:a0:5e:88:03:de:ca:
f6:63:89:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:19:26 2026 by rpki-client