
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
File: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft (raw, json)
Hash identifier: ZCsbYb5V0CzGGgEzt3uzf2oR9KMLCxe6hNuu96FWGl0=
Subject key identifier: 43:C2:F4:67:0D:31:65:FA:FE:06:41:B3:4C:A5:2B:55:BA:E6:23:EC
Authority key identifier: D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
Certificate issuer: /CN=d54b82d719144002051da0f88c768de440ac20bd
Certificate serial: 01A0D1FFE4D059BFA295E126A8D2F1D09BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
Manifest number: 1A69
Signing time: Thu 24 Sep 2026 06:00:03 +0000
Manifest this update: Thu 24 Sep 2026 06:00:03 +0000
Manifest next update: Fri 25 Sep 2026 06:00:03 +0000
Files and hashes: 1: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl (hash: ukZu4XCJ3sC8laHfOx6aqOWgtQAul/WPykIB57U3Dv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:ff:e4:d0:59:bf:a2:95:e1:26:a8:d2:f1:d0:9b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d54b82d719144002051da0f88c768de440ac20bd
Validity
Not Before: Sep 24 06:00:03 2026 GMT
Not After : Sep 25 06:00:03 2026 GMT
Subject: CN=43c2f4670d3165fafe0641b34ca52b55bae623ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0d:2e:75:e4:cc:49:07:49:10:fc:a3:72:83:
8c:27:8b:1d:e2:2c:c6:56:c1:e6:1e:1b:05:b2:75:
e8:98:13:7d:b5:20:19:f2:42:00:87:fa:45:0b:ca:
74:e8:82:9b:19:55:f4:5c:d6:5f:5c:dd:aa:95:f6:
d4:70:da:57:c5:8b:f1:2d:6c:dd:8d:6d:4f:d4:eb:
5d:b8:11:2a:61:c2:93:18:ec:cf:d7:7a:be:f3:61:
4d:e4:7a:3d:09:ff:41:cd:61:9c:1b:a2:f6:ea:bf:
c1:32:d5:f5:e2:ca:68:83:8f:5d:9b:6b:53:fa:f3:
28:96:f4:09:19:fa:17:ae:a2:9e:8e:98:09:fe:44:
b9:6b:70:1d:e7:77:2e:85:cd:27:02:61:f5:07:e4:
85:b9:36:a7:8e:8a:2a:04:2e:d2:9f:cb:c3:fd:f2:
ca:c5:79:f4:db:0e:f2:8f:48:ac:d2:11:3b:e0:8e:
3a:6b:c0:aa:b3:f1:4f:5c:ed:0a:3c:b8:19:49:8c:
83:85:a5:a7:50:e5:85:da:ab:2f:30:67:89:34:26:
66:9c:c7:21:7d:ef:e5:ad:69:8a:5f:26:67:af:b2:
3b:6e:77:82:3b:21:38:38:2b:dc:7e:44:55:4c:24:
cf:75:fc:7e:76:f5:13:ea:fc:8e:6c:e8:05:aa:81:
15:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C2:F4:67:0D:31:65:FA:FE:06:41:B3:4C:A5:2B:55:BA:E6:23:EC
X509v3 Authority Key Identifier:
keyid:D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:90:c6:ae:bd:09:fc:9b:4d:bd:1d:5f:f5:7b:59:5b:11:dd:
9f:ea:44:a3:02:cb:a5:d0:85:ce:f5:b7:90:88:38:04:01:dd:
07:71:91:d4:21:e9:31:ae:6e:c4:17:e3:a8:1a:ee:1f:46:1f:
eb:2e:91:5e:02:ee:45:3d:d9:b1:f9:04:62:29:41:fe:f6:ca:
0d:e8:4e:6e:b2:a8:b6:c6:e3:89:14:1a:b7:35:02:52:34:da:
e5:23:e4:a6:41:74:04:5f:a0:be:19:f6:fd:39:7d:f8:b2:99:
20:7c:aa:83:4d:5c:5e:13:3a:b7:3b:9c:e5:b6:04:26:4f:53:
dd:34:fc:34:15:22:7b:39:71:b7:41:ec:3b:11:7a:23:8f:cd:
64:89:2f:e4:1b:c1:79:33:6c:d6:be:18:6a:89:e0:41:1b:fe:
b4:30:66:c5:be:09:1a:d7:78:52:ee:64:1e:0a:67:30:31:55:
82:07:85:c8:ca:ed:db:08:17:07:e2:04:51:ef:48:e7:17:92:
06:95:75:57:00:cf:97:d4:6e:65:68:9b:ba:a1:0d:e0:b2:ac:
67:cd:b5:55:62:a9:ac:49:36:89:f9:f7:9e:1d:b5:7c:90:47:
f2:b2:a6:0a:3d:13:72:f9:3a:a6:c6:68:8f:ca:73:3b:5c:e4:
1d:e5:a4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:26:35 2026 by rpki-client