Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
File: rUskfyJRG39TOwAtmfvsK1WbbC8.mft (raw, json)
Hash identifier: fPUCaoy/lRtGlPBaa0TShIVcaCsI7uaoy7CUciMQnc0=
Subject key identifier: 36:AF:90:9C:FD:F5:19:B6:69:8B:65:56:5D:10:0B:CC:E9:A9:8E:AA
Authority key identifier: AD:4B:24:7F:22:51:1B:7F:53:3B:00:2D:99:FB:EC:2B:55:9B:6C:2F
Certificate issuer: /CN=ad4b247f22511b7f533b002d99fbec2b559b6c2f
Certificate serial: 019D37F7320BEB49E8784C53F41FDDB739B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
Manifest number: 0718
Signing time: Sun 29 Mar 2026 05:00:40 +0000
Manifest this update: Sun 29 Mar 2026 05:00:40 +0000
Manifest next update: Mon 30 Mar 2026 05:00:40 +0000
Files and hashes: 1: rUskfyJRG39TOwAtmfvsK1WbbC8.crl (hash: x/DfU8zFZhYM3q/I0sH2+OemyOkq/ehy8ZLVMQsajMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:32:0b:eb:49:e8:78:4c:53:f4:1f:dd:b7:39:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4b247f22511b7f533b002d99fbec2b559b6c2f
Validity
Not Before: Mar 29 05:00:40 2026 GMT
Not After : Mar 30 05:00:40 2026 GMT
Subject: CN=36af909cfdf519b6698b65565d100bcce9a98eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:32:b2:d7:3f:1f:41:96:69:ee:71:64:ba:
c4:24:dc:bf:ae:a4:ac:b1:b0:dc:80:c9:c1:7b:ba:
db:5a:f7:bb:1b:e5:60:6e:23:24:c7:d9:c9:9e:6d:
de:66:b8:e0:eb:32:fc:bc:b9:49:3a:e9:a1:d2:34:
54:8f:30:f4:13:6f:b7:c9:f3:e6:4b:5a:f1:89:87:
97:48:ae:04:67:e7:9b:f3:b1:f2:83:e1:62:dd:d0:
f8:8e:5b:b1:ac:5f:9e:2d:c7:8e:55:1c:4c:4e:d3:
3d:09:03:7f:f7:68:19:43:9a:59:5b:b7:d4:c8:73:
2b:7c:3e:de:5e:fc:01:ab:d5:01:fa:bd:97:90:52:
f1:01:a9:1a:18:22:63:a6:ae:31:38:1d:c8:18:f8:
47:38:4a:89:99:e2:dd:aa:c8:2c:4c:a3:ec:bb:02:
3d:b6:ee:a9:09:42:47:bc:6b:c3:e8:25:36:36:1c:
20:b4:31:b1:d2:79:d0:1e:a5:e1:3b:c7:3a:6f:d1:
f8:ff:56:56:5c:95:7d:21:af:8b:aa:46:99:c4:b5:
0d:77:ef:7d:99:e5:67:89:0f:34:d5:db:24:0a:60:
c6:3e:2e:f3:10:1d:35:47:68:4a:f3:fa:ae:a3:37:
06:81:60:23:bc:22:56:8a:08:34:a4:a3:51:ae:b2:
14:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AF:90:9C:FD:F5:19:B6:69:8B:65:56:5D:10:0B:CC:E9:A9:8E:AA
X509v3 Authority Key Identifier:
keyid:AD:4B:24:7F:22:51:1B:7F:53:3B:00:2D:99:FB:EC:2B:55:9B:6C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:36:12:0c:92:7c:07:c2:89:38:e7:d0:63:eb:f6:dd:c1:a1:
a7:45:ea:e3:aa:73:ee:d0:4f:89:c0:27:2e:57:3d:87:2f:18:
96:1a:f0:33:aa:c0:a6:d8:23:8e:07:90:59:fd:37:2d:ed:a3:
d3:9d:61:68:08:02:87:2b:1c:8f:12:11:0c:59:51:34:b7:51:
67:1c:ca:29:f5:51:7a:e2:9d:35:a4:95:20:63:65:44:2f:26:
bb:f5:86:ea:cd:83:14:0d:ea:67:d2:47:0e:4f:31:4f:ce:c0:
34:99:8f:8f:78:ba:02:77:97:4d:d4:38:13:db:ac:fa:bc:20:
a3:e8:90:dd:ff:46:c3:e5:d2:10:e3:89:e2:51:90:39:23:fc:
4b:ba:67:f7:57:f2:f3:51:68:5a:dd:dc:25:6a:f6:a3:35:89:
42:84:f1:0a:f2:30:2a:08:f9:da:3e:ee:cf:1a:da:c1:95:21:
3f:56:c7:6c:f4:3a:0c:14:0e:74:01:ea:81:55:59:60:af:96:
10:62:d2:e8:62:bb:7b:01:c6:51:66:62:68:92:38:71:1a:af:
47:cc:a2:65:7d:ef:d3:fa:0d:ab:47:a5:74:80:f2:e0:10:56:
24:c3:d8:e2:05:e3:89:44:2f:0b:c7:93:cd:6b:3e:1f:d9:7b:
25:3d:1a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:19 2026 by rpki-client