Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
File: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft (raw, json)
Hash identifier: lUqbiN4vqurMx5/EE6Y3qqyAB/XpXYfLDp5RARo5aiE=
Subject key identifier: 76:50:CB:9B:40:47:02:BE:BA:A8:E8:1F:94:3B:CC:07:01:7E:CE:EF
Authority key identifier: F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
Certificate issuer: /CN=f94df3b8463da119fdd56d85da547a042a1798c4
Certificate serial: 01A14761011CFE17344BD0F14A8DEE7370BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
Manifest number: 1AA5
Signing time: Sat 17 Oct 2026 01:01:41 +0000
Manifest this update: Sat 17 Oct 2026 01:01:41 +0000
Manifest next update: Sun 18 Oct 2026 01:01:41 +0000
Files and hashes: 1: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl (hash: m5Vazbb73mT/iGdFA3d+6/AxTWyFXBX3PbVPQ+g6+cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:61:01:1c:fe:17:34:4b:d0:f1:4a:8d:ee:73:70:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df3b8463da119fdd56d85da547a042a1798c4
Validity
Not Before: Oct 17 01:01:41 2026 GMT
Not After : Oct 18 01:01:41 2026 GMT
Subject: CN=7650cb9b404702bebaa8e81f943bcc07017eceef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:74:96:2f:b6:5d:dd:3e:02:2b:61:26:5e:2a:
c3:ec:d7:cc:d4:3b:d2:a9:fd:ee:dd:32:62:84:9f:
47:76:b6:05:da:2e:b5:30:54:17:15:f7:e0:70:14:
5a:48:f8:c4:dd:0d:b8:c6:09:98:82:49:11:81:67:
46:3a:cb:b7:39:2f:bf:2d:d4:89:a4:a3:50:92:b9:
27:92:e7:a1:7e:06:b1:eb:7f:81:d5:03:a3:0e:78:
c6:f9:2e:6c:95:61:3d:41:4d:7e:fc:10:f9:b9:95:
31:9e:05:a3:d5:0e:cd:cb:19:75:94:93:b2:23:da:
d3:74:90:60:7f:02:0f:9f:21:61:32:bc:97:f5:e4:
ee:5f:ff:cb:1b:e4:54:6a:e9:1f:11:9f:0a:cf:42:
bf:ab:13:7f:fe:77:d6:92:41:23:cf:1c:dd:a1:84:
9f:25:a4:60:a9:3c:8f:5a:c0:9d:d7:4a:29:77:03:
c6:1b:dc:79:72:75:1c:74:19:11:0f:5e:04:28:50:
5e:77:6a:1e:bd:fd:97:e5:3b:43:33:a9:60:01:2b:
ef:e4:a5:22:f3:58:e9:ec:e3:6d:22:be:c4:93:7c:
c2:0b:0a:b5:ca:b7:50:78:a8:54:62:34:a3:a3:6b:
b5:b7:da:2f:eb:3c:04:f7:86:7f:59:6c:7d:ae:9f:
a2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:50:CB:9B:40:47:02:BE:BA:A8:E8:1F:94:3B:CC:07:01:7E:CE:EF
X509v3 Authority Key Identifier:
keyid:F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fc:f2:9e:72:3f:91:41:f0:3f:1b:cb:6a:fe:1b:58:3b:8c:
29:4f:ad:ac:66:c3:48:df:11:ec:72:a1:ea:81:be:18:11:f2:
aa:b6:63:7e:2e:60:ea:22:ba:3e:33:bb:09:de:a7:0e:e9:22:
a1:ba:84:4c:3e:4d:52:2d:53:68:68:3b:bf:14:52:37:ff:73:
d3:3d:88:e4:f6:32:a0:6c:62:02:4f:db:45:81:7b:1f:0a:c5:
56:11:53:0a:d2:0a:eb:5e:e2:e5:9a:3d:7d:2a:c2:16:c7:5a:
17:be:09:8d:94:9f:05:86:8e:84:78:b9:ff:5d:3a:0b:ae:0c:
17:72:6d:79:2f:ba:b0:88:cb:19:8c:d3:f4:c9:ef:d8:5d:e1:
f8:fa:f8:57:14:1c:3e:81:58:df:ff:21:d4:68:34:69:c1:67:
c5:f7:d1:cc:10:04:30:f5:fc:62:66:8d:a8:39:dc:19:82:e8:
cd:32:f7:48:4d:7a:86:0a:89:f4:88:65:5d:a5:59:bf:7b:ea:
f4:e1:d1:fc:64:10:75:44:8c:89:07:0d:05:66:b1:0e:15:44:
ba:51:d2:ed:a4:ff:a8:7c:27:86:3a:e7:cb:4f:d4:c4:22:a0:
5f:27:e2:bb:a2:73:23:d1:ea:7a:0b:ed:72:28:b5:5c:cb:7d:
2f:d4:fc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 08:50:57 2026 by rpki-client