Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
File: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft (raw, json)
Hash identifier: iH2t7C6abN1K9b5UR7sQ0YgT2mpBEwsduzewx71B0nA=
Subject key identifier: 2B:31:80:B9:A6:B0:69:EB:C4:E9:D6:B2:0C:6B:0A:80:4D:B1:90:6F
Authority key identifier: F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
Certificate issuer: /CN=f94df3b8463da119fdd56d85da547a042a1798c4
Certificate serial: 019D386641912B640BDD4BEBB9C8F2FC445C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:01:58 +0000
Manifest this update: Sun 29 Mar 2026 07:01:58 +0000
Manifest next update: Mon 30 Mar 2026 07:01:58 +0000
Files and hashes: 1: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl (hash: hvrwmmy0XaXl9ZRC7V4gIsjjvLQ5LANwCkxaMwgnsZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:41:91:2b:64:0b:dd:4b:eb:b9:c8:f2:fc:44:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df3b8463da119fdd56d85da547a042a1798c4
Validity
Not Before: Mar 29 07:01:58 2026 GMT
Not After : Mar 30 07:01:58 2026 GMT
Subject: CN=2b3180b9a6b069ebc4e9d6b20c6b0a804db1906f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:33:38:18:97:2d:a9:d4:3e:db:ce:72:03:61:
18:17:e4:a9:7d:b3:c1:52:01:8c:49:f2:72:c7:8e:
c2:f0:50:ac:34:51:e5:74:98:8e:d2:73:dc:02:79:
fd:83:50:d2:39:ba:0e:aa:d0:ef:c7:fc:ad:71:3b:
8f:82:46:d8:2c:96:c0:fe:ef:7f:4d:0a:d2:26:0e:
23:a4:48:88:79:b0:b8:09:81:4d:93:d0:4e:0e:57:
75:03:9f:c6:88:9e:84:a6:07:39:b8:05:aa:7b:fe:
d1:36:e3:65:9a:8b:15:c7:18:28:03:46:4f:8e:5c:
43:7b:c1:1d:bb:bb:06:a1:97:cb:01:a2:d2:7f:13:
79:66:e2:1c:70:a5:6c:7f:a5:4c:df:84:24:75:e4:
fa:c3:d1:be:24:0a:9c:c6:a3:d8:01:52:20:06:73:
84:34:f9:c0:d6:a5:e1:31:10:8a:30:b7:8f:1f:02:
25:ee:d6:30:cf:37:ac:c1:e3:81:8b:b3:b1:3b:94:
63:a6:0d:1e:fc:0a:c4:c2:d3:d2:83:f9:d7:8d:39:
d1:40:e8:10:4e:af:8d:9b:92:ed:bd:48:1c:d1:9f:
ab:0d:8a:01:7a:6f:55:bc:36:e7:63:ea:ce:3c:c3:
70:9f:01:e7:e9:32:23:29:1b:23:05:a7:1f:60:ac:
d4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:31:80:B9:A6:B0:69:EB:C4:E9:D6:B2:0C:6B:0A:80:4D:B1:90:6F
X509v3 Authority Key Identifier:
keyid:F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:d2:3f:b9:d8:01:59:1f:79:84:ee:9e:a2:ce:39:e7:75:42:
a5:81:3c:f7:08:df:c4:1a:83:40:9e:fd:bb:58:cf:8b:9e:3c:
b0:1f:04:66:64:26:42:1e:8e:9f:2a:75:eb:d7:21:ab:97:10:
d1:16:52:0d:e5:ef:2e:9f:7e:e2:25:c5:55:07:cd:f9:0b:0f:
70:c6:fa:28:95:3d:14:0d:b4:a0:9c:42:e8:49:7f:57:76:c2:
d0:05:18:80:1f:70:39:7e:6f:8f:1d:3e:8e:79:c6:a4:a5:d5:
93:95:c9:de:dd:d2:d8:a5:39:c8:bf:47:05:71:d0:e4:52:06:
97:1c:8e:3e:39:05:66:10:d8:d7:c7:03:2e:04:b7:79:ed:c2:
37:0c:72:d5:50:bd:c1:05:48:1c:a1:04:df:05:f5:4d:05:da:
73:71:15:59:e9:2e:84:5d:ff:9d:b6:3b:7d:f5:c3:03:d6:0c:
02:95:ac:03:21:39:6a:a6:76:5e:2d:44:e0:a2:98:e0:ac:b7:
a4:de:f1:d4:c4:20:c0:6b:20:3d:36:e5:10:3d:48:21:e9:a8:
ab:97:8a:ba:13:42:a6:6f:65:0f:bf:3c:60:c7:88:ca:91:d6:
9e:eb:96:61:10:67:8f:82:36:4b:d0:89:5d:0c:f3:7e:c7:ab:
6c:3a:46:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:23 2026 by rpki-client