
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
File: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft (raw, json)
Hash identifier: rsbM0O9/EteUQAx8j5a49OIr7JFF4BwfT9JvaAj/Bg8=
Subject key identifier: 0D:E1:CF:2D:4F:CB:76:23:24:22:98:FF:8A:11:D4:37:D4:AB:F3:5C
Authority key identifier: F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
Certificate issuer: /CN=f94df3b8463da119fdd56d85da547a042a1798c4
Certificate serial: 019F90FF108EB5D39375B28C0B7DECD64497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
Manifest number: 19C2
Signing time: Thu 23 Jul 2026 22:01:02 +0000
Manifest this update: Thu 23 Jul 2026 22:01:02 +0000
Manifest next update: Fri 24 Jul 2026 22:01:02 +0000
Files and hashes: 1: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl (hash: SqlBfN6k2gp/U09sReWzL75q2EGJ65XCI8b8uXk+eSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:10:8e:b5:d3:93:75:b2:8c:0b:7d:ec:d6:44:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df3b8463da119fdd56d85da547a042a1798c4
Validity
Not Before: Jul 23 22:01:02 2026 GMT
Not After : Jul 24 22:01:02 2026 GMT
Subject: CN=0de1cf2d4fcb7623242298ff8a11d437d4abf35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fc:83:01:a0:7b:9e:87:8f:a3:5a:e7:90:ae:
70:91:13:ac:7b:87:58:f6:51:99:a0:07:1e:f5:12:
8a:f9:d4:3f:a3:d9:a9:39:73:a0:8f:ef:fa:c0:2f:
b7:58:83:91:9a:6a:37:c4:03:e2:fc:c3:50:50:b0:
f1:d0:3e:51:71:cf:af:bf:df:68:57:8c:75:26:89:
1a:5b:d7:23:44:a7:b8:22:ea:f7:c3:6d:f1:d8:e4:
a4:02:9e:10:91:20:69:c7:6f:20:00:88:2a:f6:00:
df:f9:c6:3a:70:b1:56:73:ca:d2:19:5d:7e:ec:c3:
ed:da:a5:a8:d8:07:e7:88:23:c2:6f:d4:fa:42:7c:
fa:cf:1e:e5:4d:48:a2:03:c3:f1:aa:1f:a1:7e:e6:
90:f1:aa:a3:88:ae:5e:3d:8a:fb:0f:4e:7c:36:ff:
f1:e7:91:a4:02:45:e5:27:b7:f7:56:59:2c:cb:a0:
04:9f:3e:e0:12:3e:87:6e:1b:46:e4:8c:87:1a:c8:
a7:fc:10:17:e8:0e:55:15:57:3d:2a:17:a8:b6:23:
1a:39:4d:9a:c3:7e:3e:f7:e1:9f:20:96:4f:d8:93:
04:88:21:fd:49:0e:4c:7a:fc:99:88:4f:5c:95:ca:
13:d2:f7:67:fa:cc:21:c6:9a:8b:82:15:e8:36:07:
41:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E1:CF:2D:4F:CB:76:23:24:22:98:FF:8A:11:D4:37:D4:AB:F3:5C
X509v3 Authority Key Identifier:
keyid:F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:25:3a:1a:a9:bf:63:be:0c:d9:79:c9:f1:4d:5f:df:1b:20:
a2:31:f7:43:28:c0:68:a0:f0:67:4d:a4:8b:91:28:bd:a4:0b:
66:9c:2f:77:30:89:b9:6b:f8:da:60:53:ca:f4:67:c6:33:36:
1d:6d:00:0e:ba:e1:a6:db:45:e6:aa:0d:5f:ff:ae:b9:e1:9c:
b2:50:0c:72:aa:be:fe:13:9f:eb:c2:78:27:3b:4f:ad:ff:6a:
8f:2a:c4:59:10:62:9a:56:1d:55:2e:6c:b1:88:86:1e:f9:01:
48:38:57:58:8c:8e:c7:2f:ff:19:c9:eb:a1:1f:5b:01:90:8d:
2d:23:57:4e:cf:cf:3c:df:a6:c6:0c:5f:cd:8e:0a:cb:e7:be:
78:16:56:db:c0:5a:ac:12:a2:ab:69:4e:71:31:5c:3b:4b:d1:
91:e8:26:19:3c:2d:40:ff:8b:a7:7b:04:57:e7:89:0b:da:f3:
c2:9f:77:46:3d:1b:0d:f5:b6:bd:71:e2:88:c5:62:97:c7:a2:
74:53:fd:85:c7:61:89:e2:01:26:fc:97:8c:13:0c:bf:b5:69:
15:c9:b8:df:88:f9:34:fb:3a:d6:32:fe:03:8f:97:d7:19:aa:
46:6c:aa:a5:f2:66:62:a7:0e:7c:0a:8f:a6:c3:33:07:80:f0:
3f:1a:9a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:27:52 2026 by rpki-client