Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
File: Ul0cSVWy778Anp5Bsecupt_4JLM.mft (raw, json)
Hash identifier: 03o2EfsGQP9KY3gXA1nG9pp/EiE9he4wSZCSunAMUWQ=
Subject key identifier: 81:A2:5A:4A:10:B1:8F:5C:60:5A:41:5D:13:61:13:EE:C8:32:36:34
Authority key identifier: 52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
Certificate issuer: /CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Certificate serial: 019D38D3CF8BDC8E6547DC6F5D95DC79E88F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
Manifest number: 0A21
Signing time: Sun 29 Mar 2026 09:01:38 +0000
Manifest this update: Sun 29 Mar 2026 09:01:38 +0000
Manifest next update: Mon 30 Mar 2026 09:01:38 +0000
Files and hashes: 1: Ul0cSVWy778Anp5Bsecupt_4JLM.crl (hash: /wtoMexGiD9mP97EW9kh2K6aifdIvEKxB9PlOG25MaU=)
2: XhQkb1zdm1y7HlbvFhOvdL8mB-Y.roa (hash: 6Lf0K5Aehp8CxOSNwmP8Hd5JPrDFUIPDjPGfacsaeDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:cf:8b:dc:8e:65:47:dc:6f:5d:95:dc:79:e8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Validity
Not Before: Mar 29 09:01:38 2026 GMT
Not After : Mar 30 09:01:38 2026 GMT
Subject: CN=81a25a4a10b18f5c605a415d136113eec8323634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9c:64:f3:64:f2:5f:51:17:84:77:f7:17:fb:
0c:ea:8f:d8:8f:93:1a:f1:23:da:06:63:b7:cf:d0:
2a:48:c3:d0:0b:8c:28:ef:be:e7:27:4c:91:a3:85:
d5:8b:68:13:f9:d0:ab:39:07:58:44:9e:26:72:3a:
27:d5:ec:1f:68:a4:fd:50:b7:05:fc:c9:31:8a:27:
c8:8c:2a:d8:ff:06:41:ec:09:eb:bb:76:fd:19:b0:
31:29:93:cb:61:f6:d8:29:3d:91:98:b5:a0:ae:c1:
c8:32:be:e4:46:cd:02:2e:a4:ea:67:75:3f:e6:f2:
43:4b:6b:95:70:f7:de:62:8b:a1:11:c0:ad:ad:43:
d0:6b:02:07:df:41:9c:3f:fa:6f:a2:07:71:33:ed:
33:e4:b5:c9:e9:ad:3a:22:7f:fa:a5:4e:ee:9a:89:
ae:f7:df:d7:e7:fc:c9:13:33:3d:17:75:eb:51:63:
91:eb:d1:e0:a0:af:b8:d4:ce:c7:4b:c9:dc:c2:d6:
c8:9c:18:7c:80:c6:f9:39:e7:69:b1:65:8a:2b:02:
9e:e1:7d:ea:81:49:19:6e:33:7e:63:bf:68:af:de:
ae:f6:ab:6a:05:de:3c:c7:e9:f2:2e:fc:c9:f6:a0:
0a:87:9f:ea:0e:6d:84:12:6a:b5:1c:e7:f9:5d:f5:
f2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A2:5A:4A:10:B1:8F:5C:60:5A:41:5D:13:61:13:EE:C8:32:36:34
X509v3 Authority Key Identifier:
keyid:52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d9:41:89:3a:a9:0c:38:ea:5e:f3:74:1b:66:14:e4:47:3d:
5a:46:3b:f4:01:16:51:15:94:a0:81:dc:be:ea:5e:de:dc:f7:
da:f3:39:01:d9:5e:61:d1:31:1b:72:29:b5:fc:02:77:8f:fe:
70:c6:93:b5:5b:c1:6d:07:bf:74:eb:ac:fe:a1:e2:dc:7b:94:
83:18:21:0c:50:c0:7c:2f:19:79:3c:61:b9:7c:0b:f0:d7:be:
9b:12:c9:8d:8c:00:b9:e6:47:13:ff:59:ae:17:57:21:c5:68:
ca:39:5e:48:8c:f0:b8:35:87:fc:3c:0d:6a:ec:c3:df:07:ba:
c7:73:43:b9:03:46:06:9d:5e:f6:7d:53:44:49:bf:ca:17:91:
48:41:0d:70:d4:a0:a2:46:71:c8:72:92:43:77:16:df:00:ae:
4c:c7:0b:fc:09:74:c0:d0:bd:6a:cf:50:cd:59:82:67:9d:07:
50:09:bb:d5:29:99:71:d1:80:25:dc:c8:a2:9a:12:f9:e3:25:
dd:14:2e:a4:fa:d1:24:63:d1:fe:6a:54:4f:51:80:8c:4b:fe:
9c:5a:82:75:46:4a:dc:11:41:a5:60:36:e5:04:aa:80:16:22:
b0:31:95:90:d0:20:c4:20:5c:e9:e7:73:46:7d:b9:ee:0c:47:
1f:74:d2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:55 2026 by rpki-client