Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
File: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft (raw, json)
Hash identifier: xYhsqpHAJYQXjUQ9UXXIadTVewSbNBxiPOrdvPQGFH8=
Subject key identifier: 57:0F:FA:8C:2A:54:D3:41:98:70:84:C4:69:86:08:1D:CE:A4:D7:38
Authority key identifier: FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B
Certificate issuer: /CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
Certificate serial: 019E307240764C011B37696BDE94FB8AD613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
Manifest number: 0624
Signing time: Sat 16 May 2026 11:00:54 +0000
Manifest this update: Sat 16 May 2026 11:00:54 +0000
Manifest next update: Sun 17 May 2026 11:00:54 +0000
Files and hashes: 1: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl (hash: 8/9Nh03rVQRrdaiN9jYb0sFCDaN9aHFivCWjxcJaZYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:40:76:4c:01:1b:37:69:6b:de:94:fb:8a:d6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
Validity
Not Before: May 16 11:00:54 2026 GMT
Not After : May 17 11:00:54 2026 GMT
Subject: CN=570ffa8c2a54d341987084c46986081dcea4d738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:80:8f:3f:6a:e3:d0:b2:26:80:9c:46:16:f9:
c5:19:41:85:61:66:82:a5:dc:15:18:79:88:ed:d8:
29:72:0c:7e:75:37:24:88:60:cb:0a:dd:e9:2d:eb:
8f:b8:a9:7a:c6:46:2f:23:34:fc:07:01:9d:81:c6:
cb:f4:49:88:50:55:9c:23:66:e7:04:af:e0:c8:8f:
76:1a:16:c5:c5:59:31:26:22:c7:dd:69:f1:be:df:
a3:0c:d0:44:5c:55:13:5f:54:40:bc:5d:ad:35:9f:
98:55:a4:9a:01:d5:ad:23:f8:9d:c3:75:bf:24:57:
6e:f4:3f:4c:70:b0:57:71:ed:73:2e:02:70:a4:64:
4b:74:4f:76:c8:5a:f2:f4:d6:f6:66:ed:4b:cd:eb:
44:a8:71:dc:43:a7:16:61:3d:12:3f:34:be:f9:0c:
20:d9:11:ef:db:90:51:8d:25:70:d8:48:2b:f1:41:
f1:0b:7f:ac:7b:9d:42:b9:d8:69:02:54:a8:00:a8:
73:7d:00:46:90:50:19:df:bc:81:06:96:45:48:f1:
7b:82:77:e8:2b:5b:2d:bf:5f:ca:15:1f:46:11:3d:
17:6d:5b:9e:0b:f5:df:1e:cb:bd:ec:ca:ee:85:b4:
42:1b:77:2e:61:16:bc:2f:94:81:9b:ac:7d:2b:15:
87:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0F:FA:8C:2A:54:D3:41:98:70:84:C4:69:86:08:1D:CE:A4:D7:38
X509v3 Authority Key Identifier:
keyid:FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:df:a6:18:dc:62:96:eb:1a:97:27:5a:ad:58:ba:ed:77:ae:
b2:5d:27:e0:58:f0:64:96:ce:fb:b2:ef:76:b7:f1:84:28:f5:
dd:01:d7:b7:0f:4a:85:f2:ef:54:20:62:b4:1b:af:75:eb:d8:
0a:4f:cb:04:61:e7:22:4f:bd:99:35:79:db:5d:5d:7a:ba:f5:
fe:a8:75:8f:fa:de:7f:f7:ca:5d:91:2f:2a:c3:7b:2c:d7:ae:
73:7f:a5:e3:6d:01:de:a0:00:9a:38:ce:0f:24:00:ad:28:b3:
50:c8:9d:ba:c0:ba:83:e2:31:a3:85:85:e4:2e:6d:92:9a:66:
94:fe:1e:1e:5d:20:6f:07:98:c4:09:b2:f6:8e:9b:00:db:d2:
4b:57:e8:f4:ed:2f:26:c1:b9:2d:73:a8:a5:31:37:a1:e1:77:
c8:6b:d7:af:60:37:2e:24:2f:fa:60:7a:05:31:77:d6:b9:bf:
65:0a:35:3f:3f:24:00:4d:d4:27:dd:46:f3:45:1d:55:ae:e7:
bc:ef:a2:1f:d7:da:ad:08:cd:9a:10:52:c7:d1:9e:03:06:06:
9e:d2:5a:a9:64:1f:f2:3e:7a:20:eb:96:fc:96:a6:da:95:0e:
df:d8:f0:f2:5e:7f:b4:1e:68:40:0c:70:2c:2c:63:99:4f:7c:
94:48:6e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:10 2026 by rpki-client