Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.mft
File: 1-uVkXZvEmKXdjb7pPxd8AvmmEmo.mft (raw, json)
Hash identifier: qbQCNPf3A3I++zKZAP6q+P39duxxFI0N7HtNi5+TwgA=
Subject key identifier: A8:8A:B7:80:8A:8D:87:2C:8B:8A:50:54:E2:A4:4E:60:68:30:A0:4B
Authority key identifier: FA:E5:64:5D:9B:C4:98:A5:DD:8D:BE:E9:3F:17:7C:02:F9:A6:12:6A
Certificate issuer: /CN=fae5645d9bc498a5dd8dbee93f177c02f9a6126a
Certificate serial: 019F8F7E7378758C03FB8C6F0E53BAC71098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:56 +0000
Manifest this update: Thu 23 Jul 2026 15:00:56 +0000
Manifest next update: Fri 24 Jul 2026 15:00:56 +0000
Files and hashes: 1: 1-uVkXZvEmKXdjb7pPxd8AvmmEmo.crl (hash: bLLj7L0fsZ+Sbcn54bfle38/IrSl+J7UdaNHEI9jYPA=)
2: uwzxrH7NIE-q1j_lxiuYaoOWd50.asa (hash: tiF0BpVFfc++mp+oDIIX0YXSnNLzkExC3lldvN2c2+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:73:78:75:8c:03:fb:8c:6f:0e:53:ba:c7:10:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae5645d9bc498a5dd8dbee93f177c02f9a6126a
Validity
Not Before: Jul 23 15:00:56 2026 GMT
Not After : Jul 24 15:00:56 2026 GMT
Subject: CN=a88ab7808a8d872c8b8a5054e2a44e606830a04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:be:12:e5:b0:ff:9a:25:44:b6:f9:32:10:d5:
fa:1f:6a:b2:2b:c3:58:cf:e1:bc:65:04:cd:84:ad:
21:c6:5d:c4:fe:c5:f8:ee:bf:4f:b9:1f:16:91:66:
4d:10:c2:9a:e2:66:70:4f:94:26:0f:16:32:a1:e7:
25:00:b6:c2:24:36:b8:f5:f3:91:ab:f1:08:78:72:
14:e6:0a:e2:ba:29:11:6e:d6:63:20:3c:a3:13:e0:
f1:ee:77:25:22:bc:a1:c4:04:17:56:4f:34:20:d0:
fd:a2:32:8a:3a:2d:0f:11:43:95:08:5a:f8:e4:74:
17:f5:27:64:ab:0d:42:ae:94:54:6f:91:44:3f:cd:
86:5d:c3:39:a7:ac:97:48:c5:56:ca:3f:35:92:8c:
3f:2b:59:f2:96:32:ce:b5:f3:c0:3b:c7:cf:2e:d9:
5a:3c:c7:2c:e2:ed:5e:be:29:d6:b9:a2:e6:57:64:
47:b6:30:35:0a:56:c4:28:7d:15:b6:ab:7c:4e:5d:
ec:2f:1d:5c:4e:69:ac:a0:62:09:3f:61:a4:1d:38:
f6:08:f7:23:62:49:1e:08:63:6c:fe:8f:15:b4:f3:
77:85:16:f9:ab:ce:c2:c3:74:12:d1:b0:49:e9:7a:
af:26:ab:8d:5d:5f:8b:74:9e:22:05:17:4c:97:dc:
17:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8A:B7:80:8A:8D:87:2C:8B:8A:50:54:E2:A4:4E:60:68:30:A0:4B
X509v3 Authority Key Identifier:
keyid:FA:E5:64:5D:9B:C4:98:A5:DD:8D:BE:E9:3F:17:7C:02:F9:A6:12:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:7d:4d:03:60:94:11:bd:51:d4:b3:17:7c:df:c8:dc:8c:88:
7f:68:ea:eb:05:aa:66:f4:ac:fb:9f:41:d0:8c:b3:7f:c4:39:
a1:37:81:0f:b4:a7:28:ba:41:33:0a:4e:2e:52:a5:de:22:24:
84:c8:b2:85:9e:bf:1d:56:c2:4e:93:eb:a5:af:87:c3:88:a9:
ad:02:76:a2:f7:c5:69:7e:f6:a8:3d:f4:8b:23:91:e4:96:34:
55:93:d1:82:1e:50:f0:65:05:cc:cb:ba:31:55:c4:da:18:b9:
b1:b9:bf:5f:75:b5:ee:aa:ae:dd:a8:ec:c2:18:cc:b9:1d:31:
52:da:12:9a:fc:b1:f4:ac:b3:0f:9b:04:40:13:2d:7a:a3:80:
39:28:8d:1f:38:47:31:29:32:56:1a:35:fc:db:c8:93:dc:4a:
b8:cd:51:94:0c:c7:de:1d:75:d9:df:65:48:9e:c7:31:2d:1a:
a8:b5:d2:5b:1a:8f:4f:c4:32:f5:88:86:57:c8:8e:62:df:fe:
be:8f:1f:4a:66:02:df:97:a6:28:94:a8:3f:ec:98:7b:62:bd:
12:77:e1:42:74:47:76:e4:3c:79:60:0a:d3:d6:e1:33:b8:6d:
00:90:23:7a:53:6b:01:2e:d8:a4:14:f9:26:0e:35:fe:6e:a4:
e8:b1:3b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:54:42 2026 by rpki-client