Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
File: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft (raw, json)
Hash identifier: yKIw4BzY+OomzrUfP3Wrx8rO0HFaxyLWkGkSzeGe164=
Subject key identifier: EF:9A:EB:75:9F:EE:3E:B1:90:01:19:93:6C:B5:FC:01:3F:B8:69:BF
Authority key identifier: F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
Certificate issuer: /CN=f94df3b8463da119fdd56d85da547a042a1798c4
Certificate serial: 01A0D94C718B1CB285F7E1BE270B3F063FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
Manifest number: 1A6C
Signing time: Fri 25 Sep 2026 16:01:00 +0000
Manifest this update: Fri 25 Sep 2026 16:01:00 +0000
Manifest next update: Sat 26 Sep 2026 16:01:00 +0000
Files and hashes: 1: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl (hash: F6MhK356Qod0CZhw5cQQqN1kgADeBQpwZyqKwEBVkQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:71:8b:1c:b2:85:f7:e1:be:27:0b:3f:06:3f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df3b8463da119fdd56d85da547a042a1798c4
Validity
Not Before: Sep 25 16:01:00 2026 GMT
Not After : Sep 26 16:01:00 2026 GMT
Subject: CN=ef9aeb759fee3eb1900119936cb5fc013fb869bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f3:c8:37:80:5a:6a:30:79:73:f0:77:ef:62:
b8:2d:b3:15:58:28:f9:26:0d:c8:b7:68:84:e1:23:
6e:71:a6:3d:d2:47:43:ab:10:a5:2a:22:d9:39:25:
c5:0a:71:a1:27:ac:4f:16:64:6b:06:16:e8:ab:83:
99:e5:70:90:f8:35:bf:dc:a8:80:ae:9f:16:3b:f9:
ec:f9:22:78:a7:a9:87:1b:4a:c3:25:de:a1:96:55:
b2:ae:ae:47:c2:ae:14:37:6f:62:a6:6b:94:69:10:
75:1d:25:2d:0c:a6:68:53:c7:9c:18:34:a2:2b:b2:
fe:93:74:4a:30:c1:1f:b9:7b:b2:0e:a8:2b:16:37:
31:f7:96:64:e4:3a:1a:c9:9e:17:7e:58:26:b1:a7:
a9:56:83:f6:1c:0a:44:2c:06:b7:3c:d6:26:80:af:
0a:54:b8:ac:ba:b0:48:a6:47:eb:b4:ee:39:73:84:
24:aa:bf:2c:f0:5f:9c:de:87:d1:79:56:82:bb:ac:
8d:47:80:b6:c1:f2:b3:4d:32:fd:d0:a1:16:73:60:
43:46:86:05:a2:8a:8b:6c:0b:67:55:da:63:cb:df:
06:91:d7:5c:18:91:21:b7:45:f4:60:6b:14:aa:61:
59:0c:7c:f1:88:6c:68:4a:bc:77:fd:93:92:69:4b:
33:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9A:EB:75:9F:EE:3E:B1:90:01:19:93:6C:B5:FC:01:3F:B8:69:BF
X509v3 Authority Key Identifier:
keyid:F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c5:b5:61:00:9c:08:d5:bd:d7:f0:c3:f8:7f:cc:8d:47:e7:
7f:dd:07:95:0b:6a:81:55:e2:dc:4d:66:c2:83:cf:05:b5:35:
a0:0e:23:29:2a:79:06:1c:8e:71:f7:cb:d9:9b:c5:63:37:9e:
87:7c:4c:5d:8a:b4:49:68:15:e7:c6:ed:36:b3:7f:80:3d:45:
63:f5:76:2a:8d:be:0c:0a:4f:ce:c0:b9:a4:05:e9:9d:1f:df:
3f:c1:5e:b8:c4:ee:f5:e5:d5:0d:10:4d:c6:d2:19:9a:ac:16:
5e:a5:d6:bb:cc:25:3d:21:e2:5f:b8:94:6d:4d:22:44:b2:62:
9b:ed:44:fa:57:e2:78:f9:4b:81:4e:ee:4b:4a:d6:63:34:5c:
b3:ca:a2:63:7b:d3:52:9c:21:eb:16:b5:0d:67:a3:5a:89:ef:
8d:65:1f:85:ad:8d:5a:dc:01:07:cc:9c:02:88:c4:af:1d:e5:
94:08:6c:9d:a7:8c:bf:6e:5a:7e:e8:f8:f4:dd:cd:70:77:3a:
47:89:cf:fa:49:4d:ce:d5:b4:a6:f2:d6:10:1f:da:93:a1:2c:
da:d5:8b:92:01:79:53:9c:3b:1b:19:b3:58:e9:e7:88:fa:0a:
03:c4:2e:cb:03:a5:be:e3:0b:ce:61:2b:89:cd:3e:a1:42:6c:
dc:c1:cc:7d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDZTHGLHLKF9+G+Jws/Bj/uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NGRmM2I4NDYzZGExMTlmZGQ1NmQ4NWRhNTQ3YTA0MmEx
Nzk4YzQwHhcNMjYwOTI1MTYwMTAwWhcNMjYwOTI2MTYwMTAwWjAzMTEwLwYDVQQD
EyhlZjlhZWI3NTlmZWUzZWIxOTAwMTE5OTM2Y2I1ZmMwMTNmYjg2OWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivPIN4BaajB5c/B372K4LbMVWCj5
Jg3It2iE4SNucaY90kdDqxClKiLZOSXFCnGhJ6xPFmRrBhboq4OZ5XCQ+DW/3KiA
rp8WO/ns+SJ4p6mHG0rDJd6hllWyrq5Hwq4UN29ipmuUaRB1HSUtDKZoU8ecGDSi
K7L+k3RKMMEfuXuyDqgrFjcx95Zk5DoayZ4XflgmsaepVoP2HApELAa3PNYmgK8K
VLisurBIpkfrtO45c4Qkqr8s8F+c3ofReVaCu6yNR4C2wfKzTTL90KEWc2BDRoYF
ooqLbAtnVdpjy98GkddcGJEht0X0YGsUqmFZDHzxiGxoSrx3/ZOSaUsztwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFO+a63Wf7j6xkAEZk2y1/AE/uGm/MB8GA1UdIwQY
MBaAFPlN87hGPaEZ/dVthdpUegQqF5jEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1VM3p1RVk5b1JuOTFXMkYybFI2QkNvWG1NUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvOWM5MzIzLTQ4MDAtNDFhYy05OGUy
LTI1ZTg2MWNkNmIzNC8xLzEtVTN6dUVZOW9SbjkxVzJGMmxSNkJDb1htTVEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzVkLzljOTMyMy00ODAwLTQxYWMtOThlMi0yNWU4NjFjZDZi
MzQvMS8xLVUzenVFWTlvUm45MVcyRjJsUjZCQ29YbU1RLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArMW1
YQCcCNW91/DD+H/MjUfnf90HlQtqgVXi3E1mwoPPBbU1oA4jKSp5BhyOcffL2ZvF
Yzeeh3xMXYq0SWgV58btNrN/gD1FY/V2Ko2+DApPzsC5pAXpnR/fP8FeuMTu9eXV
DRBNxtIZmqwWXqXWu8wlPSHiX7iUbU0iRLJim+1E+lfiePlLgU7uS0rWYzRcs8qi
Y3vTUpwh6xa1DWejWonvjWUfha2NWtwBB8ycAojErx3llAhsnaeMv25afuj49N3N
cHc6R4nP+klNztW0pvLWEB/ak6Es2tWLkgF5U5w7GxmzWOnniPoKA8QuywOlvuML
zmEric0+oUJs3MHMfQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:41:33 2026 by rpki-client