Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
File: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft (raw, json)
Hash identifier: yP6nMlSzo7nOjbq/i0/EdNcPfighoyt5wVOM7fupaxQ=
Subject key identifier: 3A:AD:A9:AA:23:70:1F:47:11:1A:C0:F1:D3:B6:A5:5E:8F:A5:0A:60
Authority key identifier: D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC
Certificate issuer: /CN=d5468f54c0d49581f69b54383d5573ff775620ec
Certificate serial: 019E1D2261094A690E95F0EEE7A647BAD0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
Manifest number: 0CEE
Signing time: Tue 12 May 2026 17:00:52 +0000
Manifest this update: Tue 12 May 2026 17:00:52 +0000
Manifest next update: Wed 13 May 2026 17:00:52 +0000
Files and hashes: 1: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl (hash: fscd1FVtH50yoQoXNYmBI2JPJFEnigZ8Co1NGrkBhMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:61:09:4a:69:0e:95:f0:ee:e7:a6:47:ba:d0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5468f54c0d49581f69b54383d5573ff775620ec
Validity
Not Before: May 12 17:00:52 2026 GMT
Not After : May 13 17:00:52 2026 GMT
Subject: CN=3aada9aa23701f47111ac0f1d3b6a55e8fa50a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a6:f6:c8:63:7e:5d:85:eb:d6:7f:66:8e:71:
94:df:6a:90:05:19:c2:15:98:3f:43:76:8e:17:24:
a8:1b:ba:e2:d9:6f:e4:81:95:9a:b2:03:5e:ee:6f:
09:99:02:67:56:15:34:57:c0:f8:1d:3d:21:bc:56:
22:b3:37:b8:4c:c3:a7:c6:ea:63:13:e5:75:da:49:
17:fd:15:e1:4d:5a:66:29:e8:c8:89:ce:33:81:8a:
52:59:1b:7e:d2:fa:f9:67:e6:24:d8:f9:1b:28:4e:
ab:4f:85:e3:09:e0:8a:d7:0f:98:75:66:6b:32:28:
72:8b:b4:63:f2:5d:12:46:82:52:00:e3:0c:0c:36:
57:a9:66:9d:83:6f:4f:76:cd:5b:2a:ad:e3:61:39:
28:f2:0e:07:ef:85:84:6e:64:ee:f0:0d:e5:f9:e2:
87:16:1a:55:80:0b:29:6e:a3:12:3d:58:bf:ce:f0:
05:17:22:19:78:1e:49:67:33:33:db:99:48:6f:2f:
e4:1e:62:05:28:6a:4b:2c:e3:b6:af:8a:f5:a2:84:
e4:80:93:ed:b2:1a:ae:f9:e6:0b:32:06:cd:64:eb:
d0:7b:a8:4f:db:76:4a:6b:b3:6f:81:a2:c5:fe:41:
37:c0:3d:90:91:f2:be:cf:82:43:d2:24:d0:b7:48:
59:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AD:A9:AA:23:70:1F:47:11:1A:C0:F1:D3:B6:A5:5E:8F:A5:0A:60
X509v3 Authority Key Identifier:
keyid:D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:58:90:fb:6b:0b:cd:0d:77:5e:42:18:3c:f3:8c:f1:1b:25:
4c:95:97:63:3d:01:bb:08:10:a4:7f:71:1c:1f:40:89:5c:a2:
bb:19:a1:6f:59:56:0f:b5:cc:45:22:fa:2b:5a:69:3d:6f:90:
f7:94:d1:da:3c:29:09:81:b0:18:23:54:46:95:11:68:9d:0b:
dd:66:37:84:bf:14:45:ad:24:a9:cd:9d:60:67:79:9a:8b:1f:
08:83:8d:d0:24:11:04:71:4e:54:73:d2:5b:40:95:61:82:b9:
3d:45:bf:0a:82:ca:78:1f:ee:58:4c:f3:d4:0f:82:9a:3f:c4:
1d:23:90:3e:b1:8b:09:12:cb:47:f0:6e:76:7c:68:26:a5:23:
4b:1d:46:58:0c:be:b5:b7:3a:b4:69:98:cc:67:ac:f5:f3:76:
8a:15:42:3f:d0:7c:e1:75:27:ca:da:59:df:05:43:4f:ff:35:
48:b8:eb:43:eb:e6:57:46:6f:a4:7c:e0:a6:38:b4:4f:87:e5:
c5:8c:81:27:42:9d:e9:e2:b3:79:68:56:4d:dc:a5:0c:ac:02:
f7:f7:64:73:15:f5:41:aa:af:f5:d9:0b:45:6a:2f:2d:b9:80:
e3:11:e7:9f:fb:89:a7:07:1a:13:fe:d0:c4:40:e3:0e:5a:09:
e4:34:61:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:24:57 2026 by rpki-client