Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
File: U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft (raw, json)
Hash identifier: SFLzyxLcpTHRur6tAseqJEKNc6cSRi1sysINN5/h0bE=
Subject key identifier: 0F:83:C1:5D:FC:E4:5B:F1:59:76:A3:42:86:01:FD:E5:09:A7:01:A5
Authority key identifier: 53:65:83:DE:83:6F:CC:28:E7:0B:F6:6E:AD:B8:D3:8F:3F:64:F4:E1
Certificate issuer: /CN=536583de836fcc28e70bf66eadb8d38f3f64f4e1
Certificate serial: 019D37C0C483474A0F7BEB1F6561984699BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2WD3oNvzCjnC_ZurbjTjz9k9OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 04:01:13 +0000
Manifest this update: Sun 29 Mar 2026 04:01:13 +0000
Manifest next update: Mon 30 Mar 2026 04:01:13 +0000
Files and hashes: 1: U2WD3oNvzCjnC_ZurbjTjz9k9OE.crl (hash: R/NGQUpH6r6gIV9B2PZx3GjfsfJtI37EWYz1FJPfRss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U2WD3oNvzCjnC_ZurbjTjz9k9OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:c4:83:47:4a:0f:7b:eb:1f:65:61:98:46:99:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=536583de836fcc28e70bf66eadb8d38f3f64f4e1
Validity
Not Before: Mar 29 04:01:13 2026 GMT
Not After : Mar 30 04:01:13 2026 GMT
Subject: CN=0f83c15dfce45bf15976a3428601fde509a701a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2e:94:40:85:f7:1c:af:82:97:40:01:88:c0:
c3:27:4f:95:38:57:f2:1a:ca:2a:7a:1f:ac:fe:8e:
b2:17:38:b9:b5:ce:52:d7:ec:ca:3c:bd:a1:85:5e:
4b:ac:09:07:65:15:3e:59:4d:9f:01:b4:2d:bf:cf:
eb:f8:3e:f2:c6:dc:73:22:e6:9e:66:81:ed:24:13:
ae:06:dc:df:27:15:00:a8:12:94:ad:a2:09:e8:53:
4a:63:68:4c:36:45:2c:e3:f3:82:a8:d3:94:d3:02:
22:34:54:bf:4a:b9:f0:80:39:e3:80:6d:17:67:cc:
f2:cf:4d:f0:5c:b1:7f:c4:88:e0:78:01:dc:b0:11:
92:f9:71:f9:48:2a:15:ba:cf:19:8e:2c:f2:c9:5b:
ac:ac:8b:f1:dd:ed:03:b6:91:0b:dc:c0:66:65:4a:
ef:1c:9e:32:98:77:a4:26:5b:0f:54:76:52:6f:47:
c1:98:95:03:75:34:c7:56:4c:96:bb:17:69:8c:e1:
f7:c8:19:88:b0:30:33:f7:30:e8:f3:a7:03:26:70:
c5:f2:5c:4d:f0:55:8b:a8:14:64:53:26:f9:16:f7:
aa:72:eb:e4:74:4e:b5:fd:a5:7e:c8:1d:12:75:36:
32:ef:64:4f:56:c8:62:f0:0a:55:bf:66:fc:6d:ff:
6e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:83:C1:5D:FC:E4:5B:F1:59:76:A3:42:86:01:FD:E5:09:A7:01:A5
X509v3 Authority Key Identifier:
keyid:53:65:83:DE:83:6F:CC:28:E7:0B:F6:6E:AD:B8:D3:8F:3F:64:F4:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2WD3oNvzCjnC_ZurbjTjz9k9OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:85:9b:8e:dd:c8:f0:0e:54:70:82:52:82:ad:f5:95:cf:0f:
ab:bf:ee:c3:3c:49:2d:e2:c6:fa:c0:15:cc:4b:18:f5:50:d3:
36:51:95:8f:09:c8:5e:13:66:ae:13:0e:b2:1d:a7:95:5c:24:
aa:a7:89:ba:89:f6:07:c7:06:84:d4:da:49:38:10:e7:23:9c:
59:ca:31:2f:08:d1:cb:2d:f0:1c:e1:87:9a:0b:b0:e1:4c:98:
98:3b:54:4f:08:a2:5c:a5:e7:2a:5c:ad:2c:a6:9c:e9:61:ff:
1c:5b:8a:0a:fc:49:77:62:56:c8:33:8e:58:25:3f:f5:d3:ba:
e4:21:c8:9a:c8:27:7f:09:b4:5c:33:b2:21:58:c6:d1:bc:ed:
28:91:88:87:1c:90:bf:a0:be:f1:f2:fc:c2:9a:66:ad:13:95:
10:2f:de:d5:03:93:e6:59:c0:ef:5b:95:f7:8c:bd:2e:02:d9:
ff:18:7d:be:21:bf:1b:c8:f5:19:ae:fb:16:13:b5:f3:8e:4a:
9c:68:52:de:24:c2:51:46:6d:67:cd:23:6f:7d:06:c7:6d:eb:
8b:bb:f9:c0:ae:32:5c:3f:e1:38:23:fa:f7:3a:54:e4:f1:ef:
cd:1a:04:d1:1a:f5:69:64:50:11:f7:76:ae:d6:a6:7e:86:d3:
03:47:d7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:58:05 2026 by rpki-client