Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
File: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft (raw, json)
Hash identifier: 7b4pg/SVtAcTWJeL9DbYvCMNviCAYii7fdyaLtwChsY=
Subject key identifier: 54:8C:10:58:7A:C4:68:2B:EE:66:0F:47:3C:34:7E:40:B3:B3:B1:AD
Authority key identifier: F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
Certificate issuer: /CN=f94df3b8463da119fdd56d85da547a042a1798c4
Certificate serial: 01A00101DBBFA340FDAD90B640719C34B3F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
Manifest number: 19FC
Signing time: Fri 14 Aug 2026 16:01:34 +0000
Manifest this update: Fri 14 Aug 2026 16:01:34 +0000
Manifest next update: Sat 15 Aug 2026 16:01:34 +0000
Files and hashes: 1: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl (hash: a6hUpVY9bdiFkRNBXM9HwHt2hsFyvJfkcrZUcfHMmvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:db:bf:a3:40:fd:ad:90:b6:40:71:9c:34:b3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df3b8463da119fdd56d85da547a042a1798c4
Validity
Not Before: Aug 14 16:01:34 2026 GMT
Not After : Aug 15 16:01:34 2026 GMT
Subject: CN=548c10587ac4682bee660f473c347e40b3b3b1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:a7:84:57:4a:49:9e:fe:79:d1:f6:66:e6:
32:4a:76:5d:84:b4:ad:a6:d3:e1:d3:f1:ca:34:04:
92:75:da:bd:32:27:25:d8:00:a1:d3:c7:66:cb:de:
bc:92:69:a0:8c:40:d0:8f:9f:40:8d:9f:33:49:19:
73:28:72:46:5d:16:d1:77:8b:31:8c:6e:ce:8b:8c:
56:00:cd:50:cf:cb:12:c6:4b:14:3a:83:46:5f:cd:
30:c2:39:45:e2:43:b7:22:8b:43:9e:d9:18:70:32:
8e:27:26:44:e3:3d:c0:5a:62:86:85:24:ee:6e:ed:
de:cd:3f:e3:e1:a7:a2:77:3b:78:ae:bc:59:28:ab:
dd:f1:36:1d:b0:fa:17:62:e1:39:cf:54:d8:92:56:
8f:82:4b:4e:13:d2:ff:91:36:cf:ff:82:3a:a0:63:
97:6f:6d:c5:aa:31:ee:40:9f:4e:33:c6:19:b5:e5:
67:f5:05:82:58:a6:90:94:6c:c1:fd:ea:3a:5e:7c:
d0:cf:35:39:32:ee:0a:11:52:73:53:da:d5:86:db:
b1:d3:47:55:3e:7c:14:ab:c3:2e:8e:72:b9:03:74:
9f:40:9d:08:02:55:73:5a:a7:ee:18:0d:be:26:e3:
f3:bd:69:8b:bb:20:79:c7:94:e8:e9:a6:fa:44:19:
a8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8C:10:58:7A:C4:68:2B:EE:66:0F:47:3C:34:7E:40:B3:B3:B1:AD
X509v3 Authority Key Identifier:
keyid:F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:09:06:e7:3d:92:ef:8f:bb:41:b5:e7:c0:41:36:7e:33:b3:
71:ef:3b:ac:70:2f:90:6b:37:d2:6e:bc:f7:f7:df:85:8e:4b:
99:11:52:d6:f8:52:46:5f:bf:1b:a3:0c:0f:5b:d0:df:98:54:
1c:bd:ee:8b:5d:1e:7b:cf:19:93:0f:a3:09:b6:f6:69:00:99:
65:7b:27:ef:f4:06:31:66:59:3d:ce:99:4d:06:50:8a:6c:20:
6e:7e:3a:36:0a:f3:7d:2c:dd:20:48:ed:c1:36:e8:1e:23:ec:
ed:b5:01:8b:37:0c:90:dc:ab:b0:2f:89:35:3d:5e:30:8e:79:
84:ca:45:29:d4:f5:02:6b:a2:86:55:74:dd:b1:a5:34:7a:ea:
f1:93:c4:f1:4f:1f:0e:bd:f0:5c:c8:3c:24:f6:c0:f1:20:e9:
86:7a:0c:30:61:40:6b:ee:01:b1:61:df:ae:76:33:66:14:2f:
ad:53:5e:c0:ef:20:b9:09:c0:f5:e7:64:7d:0d:05:0b:09:65:
2e:96:7e:91:18:3f:19:ad:57:d9:7e:d5:f9:37:73:c6:7f:7f:
21:17:ea:08:f7:c1:b1:3d:f7:d2:0f:19:d2:87:e7:96:cb:7e:
c8:c6:02:05:d4:aa:1b:90:82:4a:02:b3:2d:3e:6a:de:72:95:
18:a4:af:5d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaABAdu/o0D9rZC2QHGcNLPzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NGRmM2I4NDYzZGExMTlmZGQ1NmQ4NWRhNTQ3YTA0MmEx
Nzk4YzQwHhcNMjYwODE0MTYwMTM0WhcNMjYwODE1MTYwMTM0WjAzMTEwLwYDVQQD
Eyg1NDhjMTA1ODdhYzQ2ODJiZWU2NjBmNDczYzM0N2U0MGIzYjNiMWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6SnhFdKSZ7+edH2ZuYySnZdhLSt
ptPh0/HKNASSddq9Micl2ACh08dmy968kmmgjEDQj59AjZ8zSRlzKHJGXRbRd4sx
jG7Oi4xWAM1Qz8sSxksUOoNGX80wwjlF4kO3IotDntkYcDKOJyZE4z3AWmKGhSTu
bu3ezT/j4aeidzt4rrxZKKvd8TYdsPoXYuE5z1TYklaPgktOE9L/kTbP/4I6oGOX
b23FqjHuQJ9OM8YZteVn9QWCWKaQlGzB/eo6XnzQzzU5Mu4KEVJzU9rVhtux00dV
PnwUq8MujnK5A3SfQJ0IAlVzWqfuGA2+JuPzvWmLuyB5x5To6ab6RBmo2QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFSMEFh6xGgr7mYPRzw0fkCzs7GtMB8GA1UdIwQY
MBaAFPlN87hGPaEZ/dVthdpUegQqF5jEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1VM3p1RVk5b1JuOTFXMkYybFI2QkNvWG1NUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvOWM5MzIzLTQ4MDAtNDFhYy05OGUy
LTI1ZTg2MWNkNmIzNC8xLzEtVTN6dUVZOW9SbjkxVzJGMmxSNkJDb1htTVEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzVkLzljOTMyMy00ODAwLTQxYWMtOThlMi0yNWU4NjFjZDZi
MzQvMS8xLVUzenVFWTlvUm45MVcyRjJsUjZCQ29YbU1RLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAkG
5z2S74+7QbXnwEE2fjOzce87rHAvkGs30m689/ffhY5LmRFS1vhSRl+/G6MMD1vQ
35hUHL3ui10ee88Zkw+jCbb2aQCZZXsn7/QGMWZZPc6ZTQZQimwgbn46NgrzfSzd
IEjtwTboHiPs7bUBizcMkNyrsC+JNT1eMI55hMpFKdT1AmuihlV03bGlNHrq8ZPE
8U8fDr3wXMg8JPbA8SDphnoMMGFAa+4BsWHfrnYzZhQvrVNewO8guQnA9edkfQ0F
CwllLpZ+kRg/Ga1X2X7V+Tdzxn9/IRfqCPfBsT330g8Z0ofnlst+yMYCBdSqG5CC
SgKzLT5q3nKVGKSvXQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:31 2026 by rpki-client