Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
File: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft (raw, json)
Hash identifier: +A0eVqgisqz6UaHB3LNnLhQZnopRjEOOCnQxQujmYm0=
Subject key identifier: F8:7B:1A:98:F5:57:78:CA:35:D6:99:12:8E:99:A0:1A:2B:2D:E9:85
Authority key identifier: D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC
Certificate issuer: /CN=d5468f54c0d49581f69b54383d5573ff775620ec
Certificate serial: 01A001DCA80466FDF1644A66BC53588D172A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
Manifest number: 0DE9
Signing time: Fri 14 Aug 2026 20:00:32 +0000
Manifest this update: Fri 14 Aug 2026 20:00:32 +0000
Manifest next update: Sat 15 Aug 2026 20:00:32 +0000
Files and hashes: 1: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl (hash: T8algjIFZEwEHhBiajT9wzcLoVJvhWSG+rLY32zyGYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:a8:04:66:fd:f1:64:4a:66:bc:53:58:8d:17:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5468f54c0d49581f69b54383d5573ff775620ec
Validity
Not Before: Aug 14 20:00:32 2026 GMT
Not After : Aug 15 20:00:32 2026 GMT
Subject: CN=f87b1a98f55778ca35d699128e99a01a2b2de985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:73:01:77:f2:7a:1f:2b:d7:26:a2:4d:95:
ca:65:41:82:3a:a6:6b:4c:d1:3b:b0:73:79:47:7c:
7a:9c:e2:f4:83:ab:c9:30:2b:fc:c6:c3:fc:9d:1c:
d2:3b:41:6e:5f:e8:f5:9f:ff:9d:82:6f:1f:55:2c:
93:0e:c9:84:3e:70:43:ab:5f:ef:2e:bc:d1:af:e3:
47:cc:b2:b6:66:70:11:8c:50:eb:a5:28:67:b7:29:
dc:a1:6d:5d:05:dd:aa:e4:00:f2:4c:52:11:9c:65:
28:ec:58:fb:09:82:bc:4a:65:cf:11:ab:02:33:58:
c7:49:85:a4:67:1b:1d:83:f1:c4:55:ef:fe:c4:cd:
fb:4b:46:e6:70:7e:21:e0:68:2b:a0:5d:b9:31:a8:
ee:25:a1:96:8f:c8:84:f0:86:0a:82:e8:9d:a6:32:
8f:69:8d:c4:b0:4e:15:15:97:9c:bf:4e:a9:cf:13:
2b:30:71:2a:30:ee:f2:23:6b:3a:30:dc:94:19:ba:
e5:dc:67:47:1c:23:80:a8:27:c7:7f:8a:ec:8d:41:
12:f7:60:3c:61:d8:a1:f1:ce:79:f7:69:9e:c6:ca:
7a:a9:8b:c6:92:30:a3:50:3c:d5:eb:95:d7:c7:c4:
c9:55:dc:c0:cb:b7:4f:32:a6:1f:fd:46:cf:bd:c3:
3f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7B:1A:98:F5:57:78:CA:35:D6:99:12:8E:99:A0:1A:2B:2D:E9:85
X509v3 Authority Key Identifier:
keyid:D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:24:09:78:25:bd:d5:a4:a4:dd:35:df:2e:36:07:08:b3:7e:
8f:03:0d:dc:50:2d:29:78:a7:fe:4c:b5:4c:42:88:d9:1d:80:
d6:d5:ef:c9:ea:de:ad:11:d0:cc:99:de:4a:13:3c:6c:8c:6e:
b1:9b:3c:27:b2:90:3e:b3:64:9b:cf:cc:b1:ca:38:7a:3a:c8:
3b:9a:91:02:af:e5:75:1c:c6:98:75:6c:96:a7:af:84:4d:e2:
d0:1a:f1:8d:a6:6d:5e:b0:ee:19:b3:9d:88:1a:b6:af:06:b0:
f0:ce:47:f6:03:2c:c4:e9:5f:a1:1e:d3:d7:8c:4c:ca:ae:65:
bc:b9:f5:27:7b:c3:64:67:83:51:84:28:86:80:15:87:43:86:
17:ab:00:2b:79:29:aa:7e:7e:d7:8f:b6:f5:57:78:23:69:16:
a0:ce:12:72:1d:eb:43:5e:87:76:fc:ed:d7:0e:db:cb:dd:2b:
73:5e:f6:88:f4:02:b4:1e:e9:bd:30:e2:70:7b:14:9e:25:d9:
4a:59:a6:12:2d:2c:68:d3:0c:c4:1b:21:34:48:d9:78:8e:f2:
2b:de:bd:c4:12:ee:37:5f:89:61:96:fa:c0:92:c1:15:8c:f2:
4e:6a:cb:bc:e8:e5:9d:8a:5c:30:f0:37:f4:8f:1f:1b:98:e6:
12:6a:b3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:36 2026 by rpki-client