Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
File: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft (raw, json)
Hash identifier: /VQGkFkjbAOG7ajnhUsNDRlVxpb4ZkbHFk431INlwJg=
Subject key identifier: 03:B2:75:2F:63:63:1C:E3:1F:4D:8C:EC:6F:98:63:AF:A5:7A:5D:36
Authority key identifier: F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
Certificate issuer: /CN=f94df3b8463da119fdd56d85da547a042a1798c4
Certificate serial: 019E1E351F8DF59CB5BA5A5EBF3E000B79E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
Manifest number: 1902
Signing time: Tue 12 May 2026 22:00:58 +0000
Manifest this update: Tue 12 May 2026 22:00:58 +0000
Manifest next update: Wed 13 May 2026 22:00:58 +0000
Files and hashes: 1: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl (hash: UxU+e/S6tSht9Z/jsO87qsZi7rZac89cPbg4078G85c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:1f:8d:f5:9c:b5:ba:5a:5e:bf:3e:00:0b:79:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df3b8463da119fdd56d85da547a042a1798c4
Validity
Not Before: May 12 22:00:58 2026 GMT
Not After : May 13 22:00:58 2026 GMT
Subject: CN=03b2752f63631ce31f4d8cec6f9863afa57a5d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2c:26:0d:2f:f6:e3:56:55:60:a5:b7:d6:17:
f2:57:ce:78:19:c3:c3:a0:17:af:f9:19:a4:4c:80:
4d:84:d6:3d:fa:18:7b:41:ff:09:a1:ed:40:b1:1e:
5e:56:b8:5a:2d:83:2b:03:09:22:17:63:fa:eb:e4:
90:da:fe:20:75:87:b0:b5:a6:7e:9f:ea:b7:35:28:
bc:a1:32:79:50:26:bc:72:2e:f8:1b:1f:1f:c4:68:
bd:ed:7a:7e:da:1c:79:42:ec:ef:b9:ec:0a:99:75:
60:d0:bb:f5:da:22:49:77:e7:6a:ab:07:a3:0d:68:
96:0c:17:db:ab:f3:b1:c5:a4:17:f5:7a:4d:e3:51:
fa:83:b2:58:7c:43:64:29:be:26:3b:2d:c7:2a:ad:
13:37:07:0a:26:69:81:3a:51:b0:99:f8:dc:23:da:
f6:b5:64:3d:91:cf:9a:a5:4f:58:e6:f9:d3:16:5c:
24:9a:2a:79:49:fc:bd:87:a6:ba:fb:c9:5d:cd:b4:
a7:8c:47:a6:5f:f6:56:da:db:7d:1d:f3:e7:17:c6:
41:e3:5c:88:ae:52:fc:4e:a8:c2:ae:cf:17:8c:ca:
e1:1f:ab:32:b1:db:70:50:cd:ba:a2:15:64:9e:9a:
84:47:71:72:57:c5:48:15:ef:4b:c2:90:53:c3:5e:
51:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B2:75:2F:63:63:1C:E3:1F:4D:8C:EC:6F:98:63:AF:A5:7A:5D:36
X509v3 Authority Key Identifier:
keyid:F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b9:27:85:6b:b7:70:38:c9:aa:52:df:e6:c2:91:10:dd:93:
f6:8e:48:58:fc:0d:da:9e:2e:f3:ab:22:f3:5b:54:03:3a:76:
b7:dc:0a:30:c2:39:8e:8c:5c:6e:c0:8d:99:35:c3:83:6c:5d:
75:ce:9b:af:ed:20:a3:6d:ec:fd:55:e8:a9:3f:6c:79:af:f9:
f2:fc:7e:36:02:ee:91:fb:72:cd:13:f3:0b:ae:eb:86:fc:10:
3f:62:05:c3:61:c5:53:be:b5:a2:69:69:ce:14:d4:dd:6e:9e:
83:9e:cc:bf:57:3c:5f:37:0e:33:4b:12:41:01:32:00:23:20:
c4:0a:0c:c3:68:08:1d:90:4d:13:a7:17:ad:f0:ec:56:44:95:
ca:26:fe:6a:09:af:8c:f9:aa:0f:ea:c3:f5:c8:78:88:d8:e1:
91:c7:dd:82:13:00:80:39:9e:3d:42:9c:03:e8:e4:31:0b:d9:
3a:b4:f1:be:fc:78:2a:ca:1f:f7:70:3d:9b:b6:dc:b3:68:be:
34:05:c6:45:c1:da:43:b6:d8:28:06:85:90:d3:07:69:3d:bc:
f1:4d:34:fe:1e:02:1a:52:bf:e6:8c:df:51:55:9c:86:b5:d7:
36:64:0d:e5:d2:03:1e:03:31:81:6b:73:bf:d7:ce:6e:01:1e:
63:ae:c9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:27 2026 by rpki-client