Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/1-UZaQJoWcCGvs8qIXEwT05zxWdc.mft
File: 1-UZaQJoWcCGvs8qIXEwT05zxWdc.mft (raw, json)
Hash identifier: 0mn0WhLaK1oE6GjF7dvk3olDIvVIGo/N4K2Zz9rbXMQ=
Subject key identifier: 53:27:8B:ED:E7:1D:8A:EB:49:8E:D0:BF:B3:86:84:72:7C:C7:54:60
Authority key identifier: F9:46:5A:40:9A:16:70:21:AF:B3:CA:88:5C:4C:13:D3:9C:F1:59:D7
Certificate issuer: /CN=f9465a409a167021afb3ca885c4c13d39cf159d7
Certificate serial: 019E1D9125D71FA14EB089886C805B484DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-UZaQJoWcCGvs8qIXEwT05zxWdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/1-UZaQJoWcCGvs8qIXEwT05zxWdc.mft
Manifest number: 99
Signing time: Tue 12 May 2026 19:01:52 +0000
Manifest this update: Tue 12 May 2026 19:01:52 +0000
Manifest next update: Wed 13 May 2026 19:01:52 +0000
Files and hashes: 1: 1-UZaQJoWcCGvs8qIXEwT05zxWdc.crl (hash: HU7e+X42UDSuwUL3FL8kXhHfn5+GpCQ5c0Z9/2JmFF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/1-UZaQJoWcCGvs8qIXEwT05zxWdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/1-UZaQJoWcCGvs8qIXEwT05zxWdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-UZaQJoWcCGvs8qIXEwT05zxWdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:25:d7:1f:a1:4e:b0:89:88:6c:80:5b:48:4d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9465a409a167021afb3ca885c4c13d39cf159d7
Validity
Not Before: May 12 19:01:52 2026 GMT
Not After : May 13 19:01:52 2026 GMT
Subject: CN=53278bede71d8aeb498ed0bfb38684727cc75460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9c:72:2f:b5:a6:b2:65:e6:c0:04:93:75:92:
35:0e:1e:25:86:77:e8:85:1a:ce:0d:1c:ac:90:28:
8e:27:bf:07:88:2e:d1:a2:85:d2:8d:ed:d4:27:48:
e5:ad:93:a6:45:12:74:ea:e2:91:14:24:1c:c4:2f:
28:00:ba:6e:31:e7:fa:7f:bd:4a:70:fd:d2:b9:2b:
a1:59:96:ea:ec:ec:38:97:60:ab:0c:e0:e0:e1:57:
85:2e:30:c5:b8:c8:09:14:01:ec:8d:1e:bc:43:0a:
ab:a7:a3:86:ef:0e:f6:91:d8:e1:9c:10:74:02:e6:
3e:bc:01:82:dd:54:7b:10:5f:88:da:69:e8:f1:53:
89:77:de:73:26:c9:2b:51:a6:45:ad:81:b3:8d:20:
1c:b6:f9:11:db:5c:77:36:5a:29:02:26:af:e0:fc:
37:af:3d:03:6f:60:e0:4f:5b:45:a7:43:85:e0:e4:
a1:c7:2a:aa:ca:5e:e4:1e:fe:7e:8f:20:3a:bb:11:
dd:59:6e:7c:ca:c0:42:d0:f2:8d:9f:04:c9:6b:29:
92:bd:86:a0:1f:dd:ff:2d:f3:4b:b0:5a:c0:7b:0a:
86:fb:d0:c0:f5:32:6d:c9:f0:a8:d5:5a:ce:15:86:
38:c7:1f:3f:40:55:83:1a:10:72:24:dd:94:9f:f5:
55:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:27:8B:ED:E7:1D:8A:EB:49:8E:D0:BF:B3:86:84:72:7C:C7:54:60
X509v3 Authority Key Identifier:
keyid:F9:46:5A:40:9A:16:70:21:AF:B3:CA:88:5C:4C:13:D3:9C:F1:59:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-UZaQJoWcCGvs8qIXEwT05zxWdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/1-UZaQJoWcCGvs8qIXEwT05zxWdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/1-UZaQJoWcCGvs8qIXEwT05zxWdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:14:e8:b7:d9:15:88:f2:19:f5:b1:94:0a:fb:80:87:ad:2d:
77:34:66:51:ab:1f:e2:3d:5f:79:c7:14:53:68:0a:7a:4a:f2:
2d:ce:79:c0:0e:42:04:66:ea:fb:ca:40:85:0d:36:a1:2a:86:
a0:94:59:c5:aa:74:27:40:84:89:d4:58:6a:ca:d6:ef:c8:b4:
0b:94:11:a6:83:df:ed:1b:be:ed:fe:7a:65:6e:5a:16:ae:6d:
2c:8e:3b:55:d9:d5:d8:3f:35:00:01:3c:5c:72:73:70:49:e9:
86:ce:ed:10:ca:d3:92:28:27:77:27:7b:d5:5e:ef:32:e3:4c:
e9:91:3c:6b:06:c7:a9:d0:c2:51:5a:be:73:40:e5:e8:f0:a9:
b1:37:6e:f5:0e:e1:d5:96:85:85:fd:69:b8:46:59:8e:85:ad:
91:26:75:ab:d1:6c:89:88:a3:50:be:94:c2:cd:4c:d9:26:ce:
ad:a0:b8:94:90:73:e7:9f:50:1e:a8:b0:51:5b:d7:ff:cd:7f:
be:04:00:c7:66:3d:5a:b6:b4:01:93:37:d8:8b:38:8a:75:58:
3a:1a:66:28:19:87:56:c6:96:86:2a:20:e8:c8:1b:7c:e5:1b:
f3:bb:a2:a0:31:74:39:1c:60:a4:4c:9b:9d:83:cd:f5:b0:c0:
38:f1:ea:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:42:35 2026 by rpki-client