Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft
File: 1-UPazrEkL_c3jI93uUDcUM03Qiw.mft (raw, json)
Hash identifier: P6zl008xFIIr8xIMqSB0aDDeisv3Wltzz9iEx+bUQWw=
Subject key identifier: DB:27:F5:28:9F:E3:8D:BB:98:AA:5F:31:49:BC:D3:7A:F6:DA:21:12
Authority key identifier: F9:43:DA:CE:B1:24:2F:F7:37:8C:8F:77:B9:40:DC:50:CD:37:42:2C
Certificate issuer: /CN=f943daceb1242ff7378c8f77b940dc50cd37422c
Certificate serial: 019E1D59D4293A44D8AB85D7FCA6916E30B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-UPazrEkL_c3jI93uUDcUM03Qiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft
Manifest number: 013E
Signing time: Tue 12 May 2026 18:01:26 +0000
Manifest this update: Tue 12 May 2026 18:01:26 +0000
Manifest next update: Wed 13 May 2026 18:01:26 +0000
Files and hashes: 1: 1-UPazrEkL_c3jI93uUDcUM03Qiw.crl (hash: zeII7D/x316jS0dE9MSxVPO/EcEzY3EbCtire4Nq3O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-UPazrEkL_c3jI93uUDcUM03Qiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:d4:29:3a:44:d8:ab:85:d7:fc:a6:91:6e:30:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f943daceb1242ff7378c8f77b940dc50cd37422c
Validity
Not Before: May 12 18:01:26 2026 GMT
Not After : May 13 18:01:26 2026 GMT
Subject: CN=db27f5289fe38dbb98aa5f3149bcd37af6da2112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:a8:af:f3:c6:d5:c2:50:d7:8e:7e:e2:36:
e1:cc:9d:01:23:dc:64:61:f9:b7:56:83:3a:18:40:
cd:1a:f7:88:59:e7:d0:25:af:d4:81:8b:38:45:26:
f4:ab:24:1d:9d:9e:7e:01:93:1d:b8:99:72:31:68:
44:b8:27:95:92:08:af:0c:47:0f:e0:08:d5:3f:11:
e9:49:e2:56:ec:9d:8e:81:37:46:3e:db:6f:51:4d:
8f:94:0e:ac:3b:51:3e:49:bf:d2:d4:89:f4:e3:80:
7c:7d:fc:5e:03:9f:71:af:6a:db:34:3f:4c:31:77:
0a:89:a0:08:81:48:2d:70:61:9d:22:07:9d:97:58:
33:6d:b6:d5:99:69:0b:fd:77:bc:ff:77:c1:14:3c:
4f:f8:4c:28:e1:02:81:bd:09:df:d4:f0:39:15:c1:
5d:cd:3d:c9:75:6b:84:7a:d0:7e:b5:7a:c4:92:3e:
85:f0:9e:6c:be:30:2a:f4:a6:01:12:ad:fb:d8:9a:
34:46:cc:f3:56:3d:2c:41:2c:98:98:b3:8a:8d:d6:
39:eb:63:9b:45:2d:ee:cc:f6:a0:bc:58:c7:62:c0:
c9:5f:1b:4a:99:42:05:72:f2:60:f7:e4:84:83:17:
38:df:ed:49:1c:53:5a:0b:90:4f:4a:b9:fb:97:c3:
6c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:27:F5:28:9F:E3:8D:BB:98:AA:5F:31:49:BC:D3:7A:F6:DA:21:12
X509v3 Authority Key Identifier:
keyid:F9:43:DA:CE:B1:24:2F:F7:37:8C:8F:77:B9:40:DC:50:CD:37:42:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-UPazrEkL_c3jI93uUDcUM03Qiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e0:aa:ad:82:d7:e7:b8:84:34:80:4d:9b:04:27:5e:c8:8e:
cf:b2:57:bd:f9:8e:38:eb:a7:94:d0:5d:d0:69:ba:71:0c:62:
27:68:d3:75:a0:c0:7c:f1:95:82:90:20:03:5e:e9:3b:f1:c4:
a0:44:f5:1b:cd:21:04:81:91:38:8c:a1:ec:b8:ea:2d:03:de:
d7:61:f1:3f:8c:7c:b2:2a:51:15:c8:85:62:7b:68:a0:93:ad:
47:b7:6e:7d:62:80:a2:7e:ab:c9:8a:f4:fc:b2:b4:8e:9c:3a:
f5:84:45:75:e3:18:83:ef:dc:46:df:93:5d:44:13:5d:9e:d5:
a6:e5:b4:06:dc:34:db:b3:66:86:b7:ab:da:4e:ba:23:14:00:
51:58:c2:1a:fc:b3:91:cd:66:f5:a1:c1:74:95:53:4e:7b:71:
11:ae:b8:ab:ad:95:84:84:39:5f:ae:cd:81:e0:d0:bc:9a:5d:
88:df:7a:98:44:17:77:04:80:6b:b6:61:2a:87:12:c0:4a:89:
dd:6b:36:87:28:11:07:6b:10:46:2a:54:df:55:03:c1:aa:cd:
21:4a:53:f3:9d:a6:6c:d2:1c:0c:64:43:a6:9e:62:45:9d:34:
49:47:dc:6a:d5:e7:b1:ea:c2:68:1e:1d:87:e8:b5:b2:06:1c:
fe:5f:4a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:45:57 2026 by rpki-client