Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.mft
File: uiaKbxMfI9Z6-DESZSOTC_7oDxs.mft (raw, json)
Hash identifier: sTjxSRJzYUilNhOSuDs0mvXFMa/JZZd2rVlfF54kehI=
Subject key identifier: 6B:02:E2:C4:30:9C:B4:C0:C7:B5:F5:DF:9E:28:60:FF:CE:9B:E3:1A
Authority key identifier: BA:26:8A:6F:13:1F:23:D6:7A:F8:31:12:65:23:93:0B:FE:E8:0F:1B
Certificate issuer: /CN=ba268a6f131f23d67af831126523930bfee80f1b
Certificate serial: 019D3AC0FBED661CFDCF8638321905F716FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uiaKbxMfI9Z6-DESZSOTC_7oDxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.mft
Manifest number: 01CD
Signing time: Sun 29 Mar 2026 18:00:18 +0000
Manifest this update: Sun 29 Mar 2026 18:00:18 +0000
Manifest next update: Mon 30 Mar 2026 18:00:18 +0000
Files and hashes: 1: uiaKbxMfI9Z6-DESZSOTC_7oDxs.crl (hash: S4uXENakO55UBEQOB8248q9uIY/xrywz6onf09fli4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uiaKbxMfI9Z6-DESZSOTC_7oDxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c0:fb:ed:66:1c:fd:cf:86:38:32:19:05:f7:16:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba268a6f131f23d67af831126523930bfee80f1b
Validity
Not Before: Mar 29 18:00:18 2026 GMT
Not After : Mar 30 18:00:18 2026 GMT
Subject: CN=6b02e2c4309cb4c0c7b5f5df9e2860ffce9be31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:f4:a1:80:7f:70:fb:82:f6:fd:de:04:13:
db:20:96:01:6b:ea:44:aa:70:79:87:36:cd:3d:8b:
13:eb:38:32:d6:be:56:70:8b:5e:8d:90:72:7f:e8:
3a:ea:5d:88:11:b4:bc:e7:3d:a8:e2:28:1f:bb:29:
9f:e1:91:85:73:94:fe:4d:db:4e:c0:07:55:80:41:
87:ca:bd:a4:44:1a:e1:16:36:01:4f:10:2e:b3:82:
ce:01:04:56:94:7b:3d:20:bf:22:bf:52:24:b8:71:
3f:6f:60:08:ca:95:11:b2:37:3c:ca:6a:4c:f2:44:
25:6d:0b:9f:dc:4c:48:3f:08:98:c2:a2:e3:fc:b7:
08:b9:b5:8c:c4:21:7f:39:fa:fb:c4:28:97:da:5d:
fb:39:a4:cd:13:cd:73:73:d0:e5:8f:5e:02:48:65:
23:5f:c1:22:fc:46:ac:c5:0f:c3:1e:ad:c3:1c:c3:
d0:61:9e:16:fa:37:4c:76:fc:f6:e7:08:18:84:1b:
ea:93:bc:47:78:5a:a1:4c:2e:b8:fd:d2:94:d0:07:
53:6e:23:9f:cc:f0:71:2b:5f:36:42:33:66:6b:87:
11:97:cd:d6:db:bb:0a:d3:66:18:32:bd:de:46:6d:
f9:4b:5d:9f:ee:57:e8:6e:f2:c6:2f:a6:4f:fc:a4:
85:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:02:E2:C4:30:9C:B4:C0:C7:B5:F5:DF:9E:28:60:FF:CE:9B:E3:1A
X509v3 Authority Key Identifier:
keyid:BA:26:8A:6F:13:1F:23:D6:7A:F8:31:12:65:23:93:0B:FE:E8:0F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiaKbxMfI9Z6-DESZSOTC_7oDxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f7:b2:2b:99:b9:c2:5d:ea:d4:b9:c3:fe:a1:2f:24:61:35:
a3:2d:b7:d2:d5:b5:0d:6b:9c:e9:13:ec:f3:37:d2:a8:40:90:
40:52:df:71:e9:6a:7a:2d:85:16:44:7e:60:7d:41:4a:89:18:
d3:8d:93:40:28:0c:17:0b:6c:1c:02:53:ba:fd:a9:46:f1:36:
22:9b:a2:25:8a:97:14:fc:79:f4:ca:9f:9f:b9:c7:83:f6:81:
e6:f7:cc:00:e0:39:61:c6:53:88:d9:e7:20:da:e7:18:81:17:
16:69:22:e2:e7:86:92:d4:45:01:40:10:8f:39:18:8e:99:32:
78:79:cc:72:be:6c:19:b6:7f:29:32:f1:ec:c2:91:94:c9:09:
a8:fd:74:0a:b1:1b:7d:d0:57:32:78:62:a4:fc:cb:4b:f6:ac:
dc:c3:fb:88:69:0b:3b:3d:64:86:97:11:1a:de:a8:fc:3b:b8:
fe:52:d0:36:d9:1a:88:e0:98:de:36:f5:75:4d:05:0a:44:67:
72:e6:9e:3d:32:cb:e7:b5:c9:56:94:57:04:d7:13:f7:88:04:
9e:fb:c8:96:0e:db:9f:48:26:32:23:95:87:ca:36:84:91:37:
a8:5b:6f:24:a3:c0:34:7b:23:e4:f1:68:f6:bc:72:58:89:78:
3b:36:4f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:06:16 2026 by rpki-client