Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft
File: 1-UPazrEkL_c3jI93uUDcUM03Qiw.mft (raw, json)
Hash identifier: 5WjIuez64/7IsqEmOpIWWWSuBaVsjyplmIh+KBjuqpI=
Subject key identifier: 4E:4B:52:C8:63:3E:8D:1B:70:4C:BD:E8:B4:A1:23:21:F5:4D:7F:69
Authority key identifier: F9:43:DA:CE:B1:24:2F:F7:37:8C:8F:77:B9:40:DC:50:CD:37:42:2C
Certificate issuer: /CN=f943daceb1242ff7378c8f77b940dc50cd37422c
Certificate serial: 019D26282856362E2724CDEBCCDF26BB77F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-UPazrEkL_c3jI93uUDcUM03Qiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft
Manifest number: BE
Signing time: Wed 25 Mar 2026 18:00:58 +0000
Manifest this update: Wed 25 Mar 2026 18:00:58 +0000
Manifest next update: Thu 26 Mar 2026 18:00:58 +0000
Files and hashes: 1: 1-UPazrEkL_c3jI93uUDcUM03Qiw.crl (hash: xRdkDuHN3nbAlptym95xXUxEvAn9XQZMHhsl0mouKkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-UPazrEkL_c3jI93uUDcUM03Qiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:28:56:36:2e:27:24:cd:eb:cc:df:26:bb:77:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f943daceb1242ff7378c8f77b940dc50cd37422c
Validity
Not Before: Mar 25 18:00:58 2026 GMT
Not After : Mar 26 18:00:58 2026 GMT
Subject: CN=4e4b52c8633e8d1b704cbde8b4a12321f54d7f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:39:b9:2e:46:15:d7:94:b5:de:e9:d9:f2:
b9:59:7f:b5:ed:97:45:32:36:ac:9d:ff:cf:7d:ba:
cb:e2:9b:0f:60:8b:7a:41:1d:49:51:01:08:2d:96:
6e:1a:ca:b3:e8:07:19:8f:cb:c6:bc:c7:bd:48:47:
f2:aa:a4:8e:dc:6d:27:f0:9e:45:a2:ec:24:1a:aa:
c7:5f:86:3a:c8:9c:1e:5e:55:10:98:f5:fc:3d:d8:
85:41:a6:c2:22:c5:69:07:fd:d4:72:34:79:d8:4f:
a9:dc:62:d1:5b:fb:3e:30:c6:c7:23:5a:65:82:1e:
6c:1b:7f:b6:fc:e5:eb:ca:0d:d7:20:89:a0:33:b1:
14:eb:e3:20:20:0e:b2:95:50:f9:ff:1b:f6:b3:18:
29:22:0c:4f:cb:25:65:7c:51:dd:da:39:e4:3e:dc:
d9:e2:fd:16:90:d0:01:96:31:09:60:13:0e:47:1d:
b1:5e:8e:5b:c9:9a:85:84:36:2b:5c:ff:a2:c2:89:
4f:da:3c:cf:5f:9a:ea:a1:c6:de:3e:e2:8e:f9:f8:
91:c3:1c:e1:f7:28:82:19:39:c3:e9:04:48:9f:ac:
82:03:88:40:06:e6:3a:42:4b:d1:67:fd:44:30:2a:
5f:5a:4e:0b:2a:fb:61:56:23:ae:2b:e4:05:2c:c0:
e9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4B:52:C8:63:3E:8D:1B:70:4C:BD:E8:B4:A1:23:21:F5:4D:7F:69
X509v3 Authority Key Identifier:
keyid:F9:43:DA:CE:B1:24:2F:F7:37:8C:8F:77:B9:40:DC:50:CD:37:42:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-UPazrEkL_c3jI93uUDcUM03Qiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:62:fe:37:bc:b7:15:7c:5d:d3:2c:1b:2a:30:d3:f6:2b:2d:
18:06:af:43:25:c1:04:a1:a1:88:0c:36:17:05:8a:44:e4:dd:
c9:58:da:1b:5e:4b:75:12:9c:31:3a:e0:be:0b:51:36:d1:ee:
cd:c2:51:bb:38:5f:49:f3:5a:60:05:a7:19:ab:46:a1:ad:5d:
c0:9a:42:da:c8:d0:1a:44:ac:70:54:ef:69:46:ae:59:0f:8e:
6c:c7:e8:20:10:86:6a:d3:1f:49:7e:4a:aa:b0:b4:97:c2:98:
8c:75:9d:79:e9:39:62:66:c4:01:74:74:f5:89:f9:9f:f1:59:
8a:3e:2f:ec:ec:42:f0:c8:25:92:c7:1a:23:be:cf:cb:89:96:
fc:16:57:96:f6:82:5b:2f:f1:20:5d:53:1d:62:0d:a9:72:dd:
c3:fc:1f:cf:53:0c:4f:26:e7:80:91:10:cc:20:dd:01:9d:36:
3d:30:d8:29:92:b8:7c:41:61:29:43:b8:e0:db:d6:e0:d4:8f:
0c:cf:7d:c8:17:8b:9c:4e:7a:c8:0a:43:45:54:db:7d:66:a7:
84:c7:21:84:82:3d:a2:3b:bb:a2:0d:cb:32:b5:83:48:6f:bb:
41:ff:38:a9:e8:45:a4:32:4f:50:99:e4:bf:41:9c:28:0b:f9:
36:b5:3b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:27:55 2026 by rpki-client