Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/1-UZaQJoWcCGvs8qIXEwT05zxWdc.mft
File: 1-UZaQJoWcCGvs8qIXEwT05zxWdc.mft (raw, json)
Hash identifier: 6An0Y0x6fuax3wjCeZfGTDvD0k37EUa/Zu9osDm1hG4=
Subject key identifier: 89:C5:7E:41:44:7D:E2:21:E5:A5:8A:F7:F9:0D:5F:9A:5E:32:10:BA
Authority key identifier: F9:46:5A:40:9A:16:70:21:AF:B3:CA:88:5C:4C:13:D3:9C:F1:59:D7
Certificate issuer: /CN=f9465a409a167021afb3ca885c4c13d39cf159d7
Certificate serial: 019F905A95752E10BE78702DE3F0B56A4A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-UZaQJoWcCGvs8qIXEwT05zxWdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/1-UZaQJoWcCGvs8qIXEwT05zxWdc.mft
Manifest number: 0159
Signing time: Thu 23 Jul 2026 19:01:23 +0000
Manifest this update: Thu 23 Jul 2026 19:01:23 +0000
Manifest next update: Fri 24 Jul 2026 19:01:23 +0000
Files and hashes: 1: 1-UZaQJoWcCGvs8qIXEwT05zxWdc.crl (hash: 5c3BziPJ25ceUtPfrK2ZJzJkI69e24cFHuTqsE5jmww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/1-UZaQJoWcCGvs8qIXEwT05zxWdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/1-UZaQJoWcCGvs8qIXEwT05zxWdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-UZaQJoWcCGvs8qIXEwT05zxWdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:95:75:2e:10:be:78:70:2d:e3:f0:b5:6a:4a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9465a409a167021afb3ca885c4c13d39cf159d7
Validity
Not Before: Jul 23 19:01:23 2026 GMT
Not After : Jul 24 19:01:23 2026 GMT
Subject: CN=89c57e41447de221e5a58af7f90d5f9a5e3210ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5a:c8:f1:46:1f:c6:d0:a9:21:3d:04:ff:0f:
b2:3e:8b:e2:c6:fd:9b:7f:98:db:5f:bb:ea:1e:f9:
1c:65:05:6c:54:28:0f:a5:dd:e6:6a:4d:5f:5a:ad:
82:74:e9:51:ba:fb:22:0e:fb:10:20:cc:52:e6:2d:
6e:c5:78:6e:72:92:4d:3e:97:32:57:d9:f6:75:0d:
b5:37:3f:79:a9:82:f5:b1:c1:6a:bd:1a:fe:48:1a:
4b:52:69:6e:a1:ef:90:36:36:c3:36:72:f1:0c:6c:
08:cf:1f:7e:a8:0a:4e:29:95:ad:cd:7d:f1:f5:70:
c8:4b:87:14:ef:31:cd:bc:c7:b9:e6:41:2c:da:59:
6b:ab:47:c2:b8:c5:b5:b8:43:95:f3:91:f3:34:6e:
44:88:d1:4c:07:43:83:4e:9a:6a:89:d4:7d:f1:eb:
57:05:70:72:90:6d:35:2f:1a:84:8f:9e:c4:54:f5:
52:2a:59:62:40:8e:df:b3:40:26:23:1d:51:da:2e:
e8:81:25:67:d2:07:f8:0c:52:23:cb:45:e0:15:a8:
b9:37:6e:16:f1:0e:50:bb:ff:c4:11:7f:1f:58:2b:
62:6e:93:2f:99:bd:62:d1:4d:8a:ef:a0:85:44:a2:
74:de:a6:7e:5b:bf:78:81:34:98:91:5f:4e:99:5f:
93:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C5:7E:41:44:7D:E2:21:E5:A5:8A:F7:F9:0D:5F:9A:5E:32:10:BA
X509v3 Authority Key Identifier:
keyid:F9:46:5A:40:9A:16:70:21:AF:B3:CA:88:5C:4C:13:D3:9C:F1:59:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-UZaQJoWcCGvs8qIXEwT05zxWdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/1-UZaQJoWcCGvs8qIXEwT05zxWdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/1-UZaQJoWcCGvs8qIXEwT05zxWdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ac:b4:b9:5a:42:4b:54:65:dd:aa:b3:bd:54:3c:37:ec:93:
15:93:de:01:e7:8d:8e:68:30:c3:0e:ad:2a:2b:5e:d0:fa:1f:
e1:5f:fa:2b:33:4f:a8:a3:5f:d8:4e:96:9f:68:d7:b1:7c:47:
a0:68:1d:e4:ab:18:10:f5:33:76:7b:d0:b0:4a:0d:24:3b:e8:
4b:bf:49:a8:00:e6:76:fc:5e:f4:ed:36:80:f9:a1:3e:ca:fe:
37:cc:e6:dd:d4:6a:cd:56:ac:dc:e9:86:dd:b9:75:5b:17:5d:
72:1a:0b:b7:61:7d:6e:8e:b6:ab:a7:1a:02:4e:24:fc:3b:2d:
c6:af:4b:fc:05:e0:dc:c2:9e:14:76:b7:bb:d5:55:e3:83:e5:
59:88:04:e0:40:87:cf:d2:49:db:0b:f5:64:d9:eb:5d:08:0f:
5f:43:df:90:e9:e3:6a:f6:a9:59:1e:90:83:06:1c:43:d9:8c:
6b:66:25:e2:03:d3:07:e4:cf:e8:ef:b1:d9:e5:18:e5:ff:5c:
3e:e4:33:ce:8b:47:b7:26:88:85:3e:25:94:a1:14:5b:8f:26:
f1:6e:5d:8e:7a:c3:47:75:34:85:e0:4e:e1:18:17:99:63:0e:
e4:cb:88:34:5f:95:41:6d:b7:ce:a5:b4:12:51:8f:7a:1d:d7:
e7:4a:6b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:54:50 2026 by rpki-client