Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
File: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft (raw, json)
Hash identifier: oeJpLd2Bt876K4JnVLD7OajvXkqLe0nkuTueqswaSKA=
Subject key identifier: 49:D3:5E:F4:03:BB:EC:A0:69:71:73:35:5E:C9:64:56:E2:71:D8:78
Authority key identifier: D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC
Certificate issuer: /CN=d5468f54c0d49581f69b54383d5573ff775620ec
Certificate serial: 019F91DA31D0DE52675D785F216AEDE42CEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
Manifest number: 0DAF
Signing time: Fri 24 Jul 2026 02:00:23 +0000
Manifest this update: Fri 24 Jul 2026 02:00:23 +0000
Manifest next update: Sat 25 Jul 2026 02:00:23 +0000
Files and hashes: 1: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl (hash: QHo3YnAYzSL72tDEQYrosrqQYfpf03TMJM57wI39u+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:31:d0:de:52:67:5d:78:5f:21:6a:ed:e4:2c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5468f54c0d49581f69b54383d5573ff775620ec
Validity
Not Before: Jul 24 02:00:23 2026 GMT
Not After : Jul 25 02:00:23 2026 GMT
Subject: CN=49d35ef403bbeca0697173355ec96456e271d878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c6:2b:21:19:06:6d:85:37:5e:e5:75:b2:d3:
06:ca:e0:c0:6f:f1:1f:06:d5:28:ea:bf:c4:82:51:
55:12:7d:7b:aa:de:48:da:26:80:21:e7:9b:12:1c:
58:f2:a9:8b:9d:7b:c0:4c:93:05:fe:4f:80:d6:7c:
8c:67:10:bb:86:f8:03:d7:a7:f8:c4:61:61:8c:00:
0f:cf:b1:ff:75:ca:ef:56:ca:a2:9a:fb:33:53:ec:
64:f8:46:4c:81:29:e9:27:a7:50:17:bf:e5:e8:c9:
15:84:43:f9:45:7e:85:72:3c:a9:c6:d5:89:25:9b:
31:ea:4e:f1:e3:a9:88:06:8e:31:34:a6:04:a2:6a:
8d:64:b2:4e:d3:d6:4f:36:f8:f1:3c:96:cb:58:c5:
8f:aa:1d:f6:26:0b:ac:2c:0b:0c:00:5e:a8:0d:e4:
7e:bc:95:bc:39:f8:5d:50:87:0c:84:1a:07:d0:68:
f7:2e:62:9e:d1:bf:5f:69:7e:9a:24:f2:6c:65:18:
65:aa:e8:ed:57:74:ae:70:b2:97:3b:b0:04:d0:75:
85:c7:b1:f2:7b:32:69:63:f8:07:ee:86:0a:21:a8:
52:0e:dc:8c:79:86:fa:a6:18:68:15:e3:79:23:41:
ec:22:08:ad:8d:da:a3:7d:27:26:10:44:0f:ef:70:
b6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D3:5E:F4:03:BB:EC:A0:69:71:73:35:5E:C9:64:56:E2:71:D8:78
X509v3 Authority Key Identifier:
keyid:D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2b:a3:68:95:19:55:6b:2a:0e:c0:03:bb:f7:36:85:e7:ca:
1b:ab:f1:9f:3a:48:b3:7a:a2:3e:3c:25:a4:92:8f:c8:05:cb:
2e:69:5e:6f:10:0a:82:fa:b6:14:ee:62:58:52:77:9e:d8:a8:
af:a3:fd:21:6d:e6:76:9a:ec:1e:2f:91:aa:99:0a:35:0e:77:
b4:d1:b7:70:31:41:02:d2:d9:78:9a:26:0d:92:62:be:c5:b3:
62:db:6c:c7:a2:94:55:6d:5f:8d:2d:26:37:58:a3:bc:53:58:
91:12:bb:d5:76:b0:f6:ae:eb:51:2c:2a:2f:ce:65:05:3b:ed:
af:c5:56:2d:c7:7f:3e:36:35:b0:73:65:1d:dd:82:48:a8:c6:
4e:d9:71:6d:80:21:8c:fa:63:e2:a9:1e:c8:f4:e1:7f:c5:5e:
78:8f:34:19:34:f6:63:2a:27:7c:a5:68:3e:64:3b:82:bd:85:
e2:68:bb:e9:d6:84:c6:14:70:79:56:f4:94:c9:0b:e2:6e:34:
56:ca:b4:98:5c:05:9c:b4:6d:fd:56:b1:16:b4:ee:fc:ec:7a:
16:2b:1f:36:45:7f:b1:93:97:2b:9a:f4:7b:d9:cd:90:3d:40:
78:67:a1:6c:aa:e1:a2:c9:9f:22:09:b6:bd:d7:c7:b6:32:22:
85:97:35:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:49 2026 by rpki-client