Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/1-UZaQJoWcCGvs8qIXEwT05zxWdc.mft
File: 1-UZaQJoWcCGvs8qIXEwT05zxWdc.mft (raw, json)
Hash identifier: 5rjv0XRl2f6OywXjMGuT9D4687ZXCpB6kZ/ziSYHyFw=
Subject key identifier: F6:7D:B6:A9:7D:3F:7B:4F:60:F3:E6:2C:E8:37:9D:2F:03:76:74:B7
Authority key identifier: F9:46:5A:40:9A:16:70:21:AF:B3:CA:88:5C:4C:13:D3:9C:F1:59:D7
Certificate issuer: /CN=f9465a409a167021afb3ca885c4c13d39cf159d7
Certificate serial: 019D39AED885C02F5A86B17C8D50D3AA5B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-UZaQJoWcCGvs8qIXEwT05zxWdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/1-UZaQJoWcCGvs8qIXEwT05zxWdc.mft
Manifest number: 23
Signing time: Sun 29 Mar 2026 13:00:53 +0000
Manifest this update: Sun 29 Mar 2026 13:00:53 +0000
Manifest next update: Mon 30 Mar 2026 13:00:53 +0000
Files and hashes: 1: 1-UZaQJoWcCGvs8qIXEwT05zxWdc.crl (hash: zZi1qly+yQYHtadsUVWPkV+CmSRfU93IX3woLmnMp5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/1-UZaQJoWcCGvs8qIXEwT05zxWdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/1-UZaQJoWcCGvs8qIXEwT05zxWdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-UZaQJoWcCGvs8qIXEwT05zxWdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:d8:85:c0:2f:5a:86:b1:7c:8d:50:d3:aa:5b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9465a409a167021afb3ca885c4c13d39cf159d7
Validity
Not Before: Mar 29 13:00:53 2026 GMT
Not After : Mar 30 13:00:53 2026 GMT
Subject: CN=f67db6a97d3f7b4f60f3e62ce8379d2f037674b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:29:bf:e9:77:b0:01:fb:fb:f8:51:69:cf:
b9:a1:b3:b3:0c:bb:38:f8:04:7f:04:3a:47:28:69:
5e:ca:e6:95:ef:19:ba:b2:4a:70:f8:b7:7d:01:57:
01:25:4f:2d:74:c1:8e:70:c2:94:3b:43:ed:98:b7:
25:19:39:8b:53:db:7c:f3:2b:c6:a4:d2:e2:18:35:
b9:6f:7c:16:12:66:bc:7b:ef:60:8f:b1:c5:31:09:
aa:9f:06:c9:4a:03:f2:2d:de:2a:39:26:c3:69:66:
b0:f4:2f:80:31:58:52:c3:24:ea:a9:e6:cf:68:bf:
1b:0b:06:63:91:a2:fb:18:58:bb:88:23:59:74:51:
e5:d0:de:59:68:4e:f5:0a:e4:39:66:fa:55:53:f3:
fd:6b:f5:2e:f0:97:e8:91:e2:3c:85:f1:f3:ed:c3:
2d:7c:59:a2:f6:f1:ae:6f:e3:95:7d:30:78:e5:17:
b4:04:99:67:b9:f3:1e:40:8b:3c:85:0a:85:37:d5:
1b:ef:80:c8:18:cb:f6:da:d3:d0:ff:77:7f:4b:99:
89:53:ec:49:4d:00:5c:fd:58:b6:ab:46:88:48:2e:
dc:0b:92:d0:c6:26:cc:60:31:29:95:7d:a0:fe:91:
40:b7:8c:2d:72:df:0b:9d:9a:79:01:28:23:5a:15:
6b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7D:B6:A9:7D:3F:7B:4F:60:F3:E6:2C:E8:37:9D:2F:03:76:74:B7
X509v3 Authority Key Identifier:
keyid:F9:46:5A:40:9A:16:70:21:AF:B3:CA:88:5C:4C:13:D3:9C:F1:59:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-UZaQJoWcCGvs8qIXEwT05zxWdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/1-UZaQJoWcCGvs8qIXEwT05zxWdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/1-UZaQJoWcCGvs8qIXEwT05zxWdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:44:84:ea:bd:0b:b4:58:75:d2:63:64:35:e8:4e:e1:ba:b1:
06:a6:85:83:de:da:ae:fc:16:37:ef:19:f8:70:e6:b9:d8:eb:
76:f3:f4:60:e4:c5:9d:b6:81:cd:1a:45:af:cd:ea:ef:a0:d0:
26:08:ca:c4:64:de:a8:cc:2d:e2:b5:c7:6a:bc:0e:e3:68:46:
27:f8:1a:80:cd:2c:37:ed:b9:06:89:8f:38:54:34:43:90:44:
d2:d3:34:eb:54:87:eb:cb:a8:6c:e3:7f:7d:09:8b:9e:cb:18:
75:0c:c7:38:02:37:33:a2:bf:56:9f:13:77:f1:8b:91:11:7a:
c9:bd:c7:7f:e3:20:1b:a3:6f:df:bc:45:e0:40:2b:d5:04:78:
a9:da:5e:82:6d:c7:c6:ef:33:ae:ce:28:56:6d:cf:2e:fa:77:
25:7a:00:3b:c7:2b:78:96:f7:10:72:34:3e:e4:f9:49:81:87:
4e:d4:06:f7:3b:9a:b5:e4:d9:e0:90:4c:07:19:3c:1a:90:61:
6b:62:e2:01:c9:80:24:07:d3:42:17:1f:b2:69:b1:de:c6:3c:
8f:f1:3d:45:34:52:0d:2f:ed:fc:e2:08:d6:1c:ec:bd:13:b6:
f2:ff:9a:fe:d4:9d:3c:b1:e9:73:df:d9:f8:05:0b:69:63:d6:
68:24:e2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:15:20 2026 by rpki-client