Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
File: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft (raw, json)
Hash identifier: PURUoI5RWRRn1ZLCJT0fA/+Pl1mi+Ulbl9x5aZ3PWzM=
Subject key identifier: DB:F1:FA:87:C6:42:CA:27:B1:E0:C0:DC:31:A4:1B:0F:E6:6C:4E:39
Authority key identifier: D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC
Certificate issuer: /CN=d5468f54c0d49581f69b54383d5573ff775620ec
Certificate serial: 01A1DCEFC941447130CF9B7E66C7DB3AF06B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
Manifest number: 0EDF
Signing time: Sun 15 Nov 2026 02:01:04 +0000
Manifest this update: Sun 15 Nov 2026 02:01:04 +0000
Manifest next update: Mon 16 Nov 2026 02:01:04 +0000
Files and hashes: 1: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl (hash: bsEfi5LCACSpUDAPzhBHaBurnrKU/e66S028Q2lRwSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:ef:c9:41:44:71:30:cf:9b:7e:66:c7:db:3a:f0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5468f54c0d49581f69b54383d5573ff775620ec
Validity
Not Before: Nov 15 02:01:04 2026 GMT
Not After : Nov 16 02:01:04 2026 GMT
Subject: CN=dbf1fa87c642ca27b1e0c0dc31a41b0fe66c4e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:61:5c:44:45:2f:e6:8e:d0:32:c0:fd:a8:
96:9a:20:72:b1:f1:4d:fd:66:4f:0c:b5:b6:a9:e8:
cf:48:fd:d8:0a:ab:1d:5e:3e:6d:6f:2b:3d:57:8a:
4f:4b:b4:cb:3e:09:e7:9a:a7:ca:f7:f2:96:1e:5c:
29:ce:35:16:b8:59:05:71:fc:5a:84:63:1d:ac:5b:
80:bd:bf:e6:54:1a:f3:17:59:8f:f8:80:22:85:49:
b1:56:22:ce:95:a1:29:33:87:d6:23:a5:5c:0a:ed:
81:e6:97:dd:f9:77:86:c6:d5:14:11:a8:b1:4f:d3:
d9:aa:0f:58:a8:c3:58:5e:ba:9b:db:db:d8:02:ac:
00:0f:84:99:86:c4:b6:03:62:e3:4f:6b:17:4a:be:
ef:3d:a7:75:fc:87:4f:91:24:25:86:0a:52:8b:86:
9d:06:14:9e:73:b8:57:55:81:68:54:f3:97:57:70:
cc:7c:0a:47:d7:9e:92:6c:d9:be:db:82:f2:a5:c4:
03:2e:ad:b6:6f:ef:22:cd:d8:9f:f4:12:dc:69:57:
30:8d:a3:3f:0f:24:54:cf:35:a8:9f:3e:ba:d6:ba:
06:b7:f7:12:53:dd:b0:29:fc:7e:d4:4f:4d:ce:6f:
ab:88:12:fa:74:24:44:b9:53:c6:b2:2c:3c:bb:b0:
4c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F1:FA:87:C6:42:CA:27:B1:E0:C0:DC:31:A4:1B:0F:E6:6C:4E:39
X509v3 Authority Key Identifier:
keyid:D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:37:c9:9d:d5:2f:35:3d:14:e8:8e:e9:d2:46:3d:2f:3b:71:
8f:79:98:da:1b:bb:97:f0:8d:3e:18:d4:66:66:56:9f:cb:4e:
34:fe:b1:e4:e1:3f:5c:89:bc:ad:29:b5:dd:15:83:15:32:2b:
51:ec:1e:c4:80:80:7d:02:15:6b:cc:f8:62:8f:cc:98:85:e4:
09:3b:3d:37:97:6c:69:f3:67:b5:f6:f5:d5:e3:20:89:2e:1f:
9d:97:56:40:c6:88:ed:e0:96:76:4c:f0:60:d1:7c:75:ec:15:
0f:33:f7:e5:25:46:6d:08:1d:c4:84:5c:81:40:68:54:27:6f:
e0:e8:bc:85:6f:89:2e:be:7a:1c:58:e0:58:c5:c5:9d:5b:e1:
5b:22:e9:a9:ba:ab:4d:b0:e5:cc:3c:a1:fa:43:00:c7:aa:a7:
d1:e0:e1:ca:c5:f3:e1:19:42:8f:9e:e3:ee:03:4f:19:19:bc:
ad:71:11:5c:b7:d5:90:ae:f9:f1:2e:e4:89:b8:ff:98:e3:7b:
0d:25:ea:fc:25:25:69:db:f6:03:a6:b1:35:6f:c1:e3:72:89:
9a:42:b1:71:75:61:f3:34:11:0a:a9:ea:44:0b:94:2f:95:c4:
63:eb:da:96:76:b0:db:e3:80:99:af:26:f7:cc:03:15:c6:ab:
e4:5a:0b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:58:28 2026 by rpki-client