Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
File: uo1nmL3QsriAXUOzRV92c5uUbx0.mft (raw, json)
Hash identifier: 1i8NfsfVQh7TIL5QMgr3FCSATmhk0JZ3o9ydjdQNdvA=
Subject key identifier: 14:06:5A:8C:1F:29:FB:4C:E6:25:54:47:A5:4D:35:A5:7B:F7:E1:15
Authority key identifier: BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D
Certificate issuer: /CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d
Certificate serial: 019D38662103485993621035713D2E025B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
Manifest number: 181E
Signing time: Sun 29 Mar 2026 07:01:50 +0000
Manifest this update: Sun 29 Mar 2026 07:01:50 +0000
Manifest next update: Mon 30 Mar 2026 07:01:50 +0000
Files and hashes: 1: uo1nmL3QsriAXUOzRV92c5uUbx0.crl (hash: eDnL8fudsybU+xSncvgO1rwWwh4OwL/wJ82gImR2qto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:21:03:48:59:93:62:10:35:71:3d:2e:02:5b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d
Validity
Not Before: Mar 29 07:01:50 2026 GMT
Not After : Mar 30 07:01:50 2026 GMT
Subject: CN=14065a8c1f29fb4ce6255447a54d35a57bf7e115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:70:9b:ac:ba:18:68:6d:aa:ca:52:1e:11:2c:
b9:3a:45:24:7b:f0:ce:89:b9:02:e6:9b:63:85:e5:
f8:98:95:e4:1a:40:90:0d:7f:e8:89:63:f0:84:2d:
16:bf:fc:65:6c:8d:4a:96:c4:5c:c9:b6:49:4e:ad:
c6:2d:69:26:4e:89:69:ff:d7:46:e7:ff:94:a4:d9:
30:90:8a:6c:73:f0:92:38:2b:f3:bf:7f:4b:a6:dc:
cc:ae:58:60:23:e1:f7:08:a2:c5:ff:fd:06:6f:2d:
03:96:5c:36:9b:6d:a5:b8:26:11:55:40:23:02:4d:
76:bf:82:39:1e:67:0e:c6:49:98:dd:b5:62:d7:71:
b4:28:71:3c:b9:7d:31:b1:33:3a:05:dd:a1:a9:ae:
3d:42:36:1b:78:f3:08:a5:31:67:2f:c1:f3:89:c9:
06:b5:77:67:c0:c7:f4:cd:15:f9:d9:e4:24:5b:65:
4b:1f:9b:97:d0:ba:b8:b2:18:75:6f:41:98:87:9a:
52:75:de:8a:13:6a:0d:54:07:74:74:b8:90:4f:3c:
e4:a3:72:69:b0:e5:95:c1:32:29:b4:c5:6d:9d:c8:
f8:24:cf:90:15:37:6e:fd:54:54:df:71:b0:62:b2:
70:25:a1:8a:3b:b0:3a:ef:98:f7:15:56:3d:cd:09:
bc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:06:5A:8C:1F:29:FB:4C:E6:25:54:47:A5:4D:35:A5:7B:F7:E1:15
X509v3 Authority Key Identifier:
keyid:BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:56:71:3b:fe:43:a7:08:d5:c8:7e:5b:41:43:da:f4:5f:a1:
57:9a:d4:e5:b9:e7:72:44:a6:88:b9:63:f0:af:ba:8f:ab:5a:
6b:05:0d:df:bc:b4:8c:26:23:c4:e2:94:72:08:f3:0f:89:1a:
4f:5c:72:75:82:38:64:be:88:39:9f:ef:21:3a:c8:7f:25:f4:
2a:fd:95:ee:0f:42:5b:1b:48:a3:95:98:3d:ad:52:f1:cb:d0:
ec:0b:64:70:da:6f:76:d1:02:91:86:f5:89:3d:11:c2:61:db:
10:0e:50:6e:2f:6e:b5:6e:de:82:37:c8:28:ae:97:da:89:6a:
76:00:c9:09:75:9f:d2:db:b5:af:55:f8:49:a8:8a:ef:0d:16:
c4:0f:c2:97:d2:b7:5f:e6:ae:64:20:1d:1c:d9:a5:76:79:02:
45:0f:8e:97:95:db:b6:05:eb:5f:69:8f:6a:81:52:54:15:17:
27:59:30:46:96:0b:10:fc:55:e6:4e:3c:e9:d2:41:9d:f0:50:
9a:9f:38:64:6d:08:40:3a:1d:98:f2:0d:17:43:0d:59:9a:36:
b3:53:d6:80:2a:c8:07:f7:cb:52:ee:36:e2:c3:f3:bb:d8:c2:
77:76:d8:15:47:22:da:e6:42:35:54:b8:ed:b3:c5:52:7e:05:
46:3d:83:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:49 2026 by rpki-client