
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft
File: 1-UPazrEkL_c3jI93uUDcUM03Qiw.mft (raw, json)
Hash identifier: i42FfjqVIIonspG+CQmMj89qbMKNdWf5i0eP/s8JflQ=
Subject key identifier: E2:79:67:B9:2F:92:6F:5F:F8:46:ED:F2:55:23:30:19:FE:E8:A1:71
Authority key identifier: F9:43:DA:CE:B1:24:2F:F7:37:8C:8F:77:B9:40:DC:50:CD:37:42:2C
Certificate issuer: /CN=f943daceb1242ff7378c8f77b940dc50cd37422c
Certificate serial: 01A0CEC7EFC136AECE55F762BC18B07A5434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-UPazrEkL_c3jI93uUDcUM03Qiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft
Manifest number: 02A3
Signing time: Wed 23 Sep 2026 15:00:04 +0000
Manifest this update: Wed 23 Sep 2026 15:00:04 +0000
Manifest next update: Thu 24 Sep 2026 15:00:04 +0000
Files and hashes: 1: 1-UPazrEkL_c3jI93uUDcUM03Qiw.crl (hash: GLE3o1gjinoSfzhPS7P6QU4mNewn3mUY/2SVz8ustAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-UPazrEkL_c3jI93uUDcUM03Qiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c7:ef:c1:36:ae:ce:55:f7:62:bc:18:b0:7a:54:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f943daceb1242ff7378c8f77b940dc50cd37422c
Validity
Not Before: Sep 23 15:00:04 2026 GMT
Not After : Sep 24 15:00:04 2026 GMT
Subject: CN=e27967b92f926f5ff846edf255233019fee8a171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a0:b3:da:54:35:ef:b2:de:e0:74:6a:62:b9:
f2:dc:e3:04:3a:27:e4:2e:f8:88:58:96:d1:66:c6:
d1:ba:08:34:b1:56:fd:9a:3c:32:59:ae:a0:06:80:
af:12:97:a8:7c:72:16:aa:ca:6c:f2:a1:ad:de:e1:
22:bf:6d:e7:28:ad:5c:6d:9f:3a:27:e5:0f:44:fc:
95:6e:84:2c:42:aa:3d:70:17:6d:f4:9b:60:c5:02:
b4:1d:49:8b:32:9f:94:e5:09:5b:99:da:bb:f3:c6:
15:e3:17:dc:12:4b:32:c0:31:df:2e:55:b4:34:02:
c6:14:e4:22:8f:bd:7a:2f:f4:81:b3:77:0a:21:9a:
b7:58:d2:b2:48:70:b6:17:3a:44:b8:48:dd:3e:8e:
f7:98:9e:43:34:80:0b:b6:f2:ac:d8:06:36:83:0a:
1d:15:27:3d:71:d3:af:f6:24:64:5f:92:79:6e:54:
0b:37:e3:52:66:e6:44:34:b0:d6:a4:7b:f8:5b:b3:
8e:c4:a7:97:52:38:f7:ab:d5:1e:c6:55:f4:49:58:
f9:89:1e:18:af:e4:89:98:90:da:80:88:ee:72:5f:
6c:ce:d1:d8:f7:7e:61:1f:f7:24:8b:02:ff:02:c4:
33:db:4b:8e:77:5a:d3:fc:90:da:ea:c5:da:a6:e1:
02:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:79:67:B9:2F:92:6F:5F:F8:46:ED:F2:55:23:30:19:FE:E8:A1:71
X509v3 Authority Key Identifier:
keyid:F9:43:DA:CE:B1:24:2F:F7:37:8C:8F:77:B9:40:DC:50:CD:37:42:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-UPazrEkL_c3jI93uUDcUM03Qiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:50:e5:67:c3:19:f8:19:1a:f1:6f:e3:ce:f2:20:b1:cf:15:
89:b9:49:e1:1d:ef:21:b4:e4:53:30:46:7c:1c:1c:c6:3d:15:
f5:0d:cf:9d:bb:c5:9f:c3:a8:e4:46:e0:16:c0:11:29:fc:73:
31:cd:ea:1d:6d:40:dc:c1:16:a9:76:e8:be:58:6f:32:a6:d9:
11:07:d9:7f:07:3c:4c:f5:58:95:9f:9d:37:69:a9:60:aa:3b:
ca:f2:1a:d6:e6:e2:35:79:66:a4:44:d0:7e:74:b6:cc:ce:e4:
69:7f:05:df:a1:97:f8:25:06:12:0a:c7:a2:7f:49:3d:a5:3a:
ff:51:c9:f0:13:aa:ac:27:8a:df:4c:79:da:62:ce:59:01:47:
a3:49:61:e6:63:8c:16:f5:92:ac:93:90:ef:8a:dd:91:2d:ba:
3b:7e:e5:ef:6a:9c:a2:c8:a9:31:36:1a:a8:cf:e4:f6:e1:3f:
f6:93:a7:cb:34:6e:42:f8:f0:f7:e9:56:db:fd:8f:11:81:a4:
a9:ab:15:36:b0:a2:ad:30:d4:15:f9:e3:8a:c1:1c:76:fd:8d:
f9:ce:6f:a0:3c:4d:5e:33:17:e9:48:67:8e:0d:21:38:a5:27:
11:d5:97:df:61:06:37:05:b2:58:f4:94:81:f2:51:9e:3e:c3:
ad:fa:bd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:43:31 2026 by rpki-client