Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/1-UZaQJoWcCGvs8qIXEwT05zxWdc.mft
File: 1-UZaQJoWcCGvs8qIXEwT05zxWdc.mft (raw, json)
Hash identifier: o9pJEsw8PxfzUh2FxLBAEX6CptoG/XrUGtWR+QkjbAg=
Subject key identifier: B8:CC:EA:4A:DD:41:83:FB:2B:3A:F0:7F:54:67:C7:17:26:E0:61:92
Authority key identifier: F9:46:5A:40:9A:16:70:21:AF:B3:CA:88:5C:4C:13:D3:9C:F1:59:D7
Certificate issuer: /CN=f9465a409a167021afb3ca885c4c13d39cf159d7
Certificate serial: 019D33E3B50FFA853B7A9FD5AD3D36FAD4DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-UZaQJoWcCGvs8qIXEwT05zxWdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/1-UZaQJoWcCGvs8qIXEwT05zxWdc.mft
Manifest number: 20
Signing time: Sat 28 Mar 2026 10:00:54 +0000
Manifest this update: Sat 28 Mar 2026 10:00:54 +0000
Manifest next update: Sun 29 Mar 2026 10:00:54 +0000
Files and hashes: 1: 1-UZaQJoWcCGvs8qIXEwT05zxWdc.crl (hash: ZEGDYO+yqquB+8RirK6EgHnT4JPpt1oWk9+kPBPQXXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/1-UZaQJoWcCGvs8qIXEwT05zxWdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/1-UZaQJoWcCGvs8qIXEwT05zxWdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-UZaQJoWcCGvs8qIXEwT05zxWdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:b5:0f:fa:85:3b:7a:9f:d5:ad:3d:36:fa:d4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9465a409a167021afb3ca885c4c13d39cf159d7
Validity
Not Before: Mar 28 10:00:54 2026 GMT
Not After : Mar 29 10:00:54 2026 GMT
Subject: CN=b8ccea4add4183fb2b3af07f5467c71726e06192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:68:a5:1f:38:89:bd:2d:a8:10:4a:95:2d:18:
dd:2e:a9:ee:a6:f5:68:cc:e2:f8:78:5d:ab:92:c7:
c3:b4:45:a0:c1:e4:b7:3d:a1:15:ee:fb:5c:a9:7e:
9d:98:89:d0:54:c1:76:76:08:60:bf:ec:54:71:7e:
ac:c0:ff:1e:98:94:be:66:a2:11:32:f7:3f:11:46:
d3:1a:ca:83:8b:bd:fa:34:b6:a6:7a:ea:c7:a0:54:
da:53:e3:7d:ae:70:23:0c:74:33:9d:72:30:06:ac:
e7:4f:68:12:15:da:56:f4:87:af:52:8f:09:c8:f4:
5b:ab:49:b0:46:69:5c:ac:59:b3:9c:5d:e6:5d:2a:
3d:ef:49:f7:48:c3:57:dc:a7:87:c9:01:63:41:3c:
b7:c0:d6:c9:57:55:a2:f5:9f:fc:03:09:5e:43:9b:
bd:48:ac:c2:09:cd:20:d0:e1:04:ae:51:fb:09:d8:
b7:40:80:0d:95:32:5e:00:7a:a2:44:b3:44:d7:05:
0d:2d:4f:4f:6a:23:4a:d1:e4:36:54:8e:d3:49:57:
70:b7:11:bb:0d:dc:59:91:73:81:41:34:69:c2:af:
9d:7f:15:db:36:35:69:93:3d:e1:38:81:99:c4:f1:
b9:5a:78:a0:51:1c:f7:d9:39:3d:6e:a8:95:62:3a:
a4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CC:EA:4A:DD:41:83:FB:2B:3A:F0:7F:54:67:C7:17:26:E0:61:92
X509v3 Authority Key Identifier:
keyid:F9:46:5A:40:9A:16:70:21:AF:B3:CA:88:5C:4C:13:D3:9C:F1:59:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-UZaQJoWcCGvs8qIXEwT05zxWdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/1-UZaQJoWcCGvs8qIXEwT05zxWdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/1-UZaQJoWcCGvs8qIXEwT05zxWdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:eb:67:4c:42:a9:da:36:2b:e4:38:bd:a0:62:a5:00:55:1e:
2e:80:64:fa:12:d9:a6:d0:8b:a1:15:38:a1:15:d3:d0:20:93:
b8:a8:65:f3:ae:db:57:36:c3:d7:20:08:b5:df:2d:0f:ee:02:
09:e3:a2:ef:65:65:44:a0:0e:c1:91:34:d3:f2:ec:d8:30:ef:
e7:d2:39:54:57:8d:e9:dd:eb:ef:3d:16:bc:e7:58:78:02:ed:
d1:e4:b4:0b:f1:80:5a:c8:9c:fb:8c:77:d6:a0:7b:63:2e:9b:
1a:2f:58:50:f2:34:3a:37:e6:33:37:80:20:3b:a3:22:f3:34:
c5:ff:d2:53:e6:9e:e4:db:7d:52:a3:3d:41:8b:89:41:7c:86:
93:a7:2e:b3:2d:f4:b6:94:77:54:ad:25:c2:88:e3:b6:45:4e:
0a:38:62:24:16:49:3f:a8:01:c0:b9:8a:a9:dc:70:b0:a7:26:
25:53:79:08:af:93:ab:44:85:7d:b1:c9:86:5b:7a:7e:bd:f6:
de:9f:61:54:8f:53:e3:0b:ed:9a:d2:dd:03:66:3f:19:e0:4c:
32:3d:a1:b6:e1:79:62:71:69:75:ce:04:39:37:c8:e0:dc:b8:
58:04:09:b9:f0:6d:06:fc:33:8a:cb:49:df:2e:45:b4:5e:0e:
b8:81:4b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:38 2026 by rpki-client