Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
File: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft (raw, json)
Hash identifier: WcUyHCur7QTT3l2TrdFx/NfJvgRfTx25PaRkRahhDmQ=
Subject key identifier: 95:E0:A9:C0:01:CA:A0:36:81:A9:F5:9C:BC:48:D4:D2:EB:9E:42:C2
Authority key identifier: FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B
Certificate issuer: /CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
Certificate serial: 019D39418569F326C1732EEA0E28C9393214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
Manifest number: 05A4
Signing time: Sun 29 Mar 2026 11:01:28 +0000
Manifest this update: Sun 29 Mar 2026 11:01:28 +0000
Manifest next update: Mon 30 Mar 2026 11:01:28 +0000
Files and hashes: 1: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl (hash: WXmLruRA3HCYSmIq35KDzqsJkxsKyu407vOy95+0Fmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:85:69:f3:26:c1:73:2e:ea:0e:28:c9:39:32:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
Validity
Not Before: Mar 29 11:01:28 2026 GMT
Not After : Mar 30 11:01:28 2026 GMT
Subject: CN=95e0a9c001caa03681a9f59cbc48d4d2eb9e42c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:44:be:c5:ce:92:58:8f:cf:d8:9d:29:81:62:
aa:1b:5a:ca:4c:90:a3:62:37:43:ba:de:4d:25:77:
e9:58:ee:57:1c:5f:6f:47:e9:38:a0:7d:61:87:4d:
9c:d7:a3:c8:b9:56:0b:c3:35:5a:57:6a:fa:8f:52:
25:7c:09:0d:78:9e:0e:8d:de:7c:28:6c:1a:fc:6a:
d1:70:ee:91:5b:18:8b:4d:f7:df:10:05:06:76:04:
c9:2f:49:a6:28:02:7e:1d:0a:bf:67:68:a8:93:0e:
0e:25:e6:b0:52:77:34:93:73:a8:98:b6:40:3d:f1:
89:57:75:f1:62:58:b9:12:4b:d3:61:b9:b9:ca:1e:
84:ab:a9:4f:2e:fc:de:61:fa:91:55:b3:21:d2:9b:
5b:01:43:e8:50:73:76:25:90:d6:0b:d9:87:44:58:
d2:ec:05:39:b0:a4:41:ba:c2:25:dc:54:be:85:f6:
35:38:ca:08:81:72:47:2a:e2:a2:b0:5a:93:c8:84:
70:dc:16:47:94:62:21:87:9e:1b:67:68:17:d0:e2:
df:89:e5:78:df:fb:35:22:8b:43:03:4a:31:07:4b:
7f:3c:ba:fc:44:1c:36:5d:fa:94:e1:d5:8f:9e:27:
62:fa:7a:0e:6d:9e:58:53:10:8c:55:39:29:a6:61:
09:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E0:A9:C0:01:CA:A0:36:81:A9:F5:9C:BC:48:D4:D2:EB:9E:42:C2
X509v3 Authority Key Identifier:
keyid:FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a0:81:70:d4:36:ac:61:16:84:b3:7d:e3:f9:53:48:eb:db:
11:42:7d:e7:d7:0c:a9:42:8a:6c:84:3c:3b:8e:02:f3:48:16:
f8:e0:f3:f3:fa:a7:55:40:53:71:52:f2:4a:b6:ea:54:47:e4:
0e:18:55:1e:ec:5e:5c:62:08:91:e8:15:9f:32:a0:c3:fe:84:
3e:2d:9a:11:b7:75:9c:2d:74:11:90:7c:a1:01:2b:7a:ca:2a:
12:9c:3c:f6:53:36:d1:f6:e5:a2:2c:14:97:d1:9b:7d:e5:c8:
a8:98:6e:8d:59:df:26:1b:ce:c0:5d:35:4b:3d:c0:00:3b:2d:
69:70:ba:96:b0:9f:6a:eb:1a:8e:12:e6:ad:92:3f:5a:17:22:
73:cf:d1:48:7a:70:48:7e:cc:c0:c4:80:8a:28:cc:fb:67:d4:
d3:6d:f4:0a:59:a7:d5:07:15:93:a0:ea:ef:cc:3a:2d:c4:14:
95:c3:e9:18:b7:4c:4b:29:58:5f:7d:43:aa:e6:ef:88:ec:a8:
27:c0:95:a6:8c:d3:4d:4f:d3:38:6a:c7:bb:11:d3:83:d9:63:
66:ec:ae:98:c8:ca:9e:b6:17:f8:d0:3d:e8:7d:d7:83:52:14:
91:17:f3:8a:1b:1f:f5:f7:29:4b:02:de:b1:47:d1:08:28:08:
af:5f:9e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:46:25 2026 by rpki-client