Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
File: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft (raw, json)
Hash identifier: /KmYsDX2yRdtapl6i7k5whlij+qyC2ejBE1sbpeT5TA=
Subject key identifier: 3C:FD:49:F7:9D:CF:B7:BF:CA:16:76:D1:17:F1:F4:57:14:08:EB:C1
Authority key identifier: D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC
Certificate issuer: /CN=d5468f54c0d49581f69b54383d5573ff775620ec
Certificate serial: 019D375210EDA6AF7F437B66DAC30307AEC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
Manifest number: 0C77
Signing time: Sun 29 Mar 2026 02:00:18 +0000
Manifest this update: Sun 29 Mar 2026 02:00:18 +0000
Manifest next update: Mon 30 Mar 2026 02:00:18 +0000
Files and hashes: 1: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl (hash: LsUw74M0YU2WUYCxc3KRpIfEKfQUZPaqlDpmT/Mp4po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:10:ed:a6:af:7f:43:7b:66:da:c3:03:07:ae:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5468f54c0d49581f69b54383d5573ff775620ec
Validity
Not Before: Mar 29 02:00:18 2026 GMT
Not After : Mar 30 02:00:18 2026 GMT
Subject: CN=3cfd49f79dcfb7bfca1676d117f1f4571408ebc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ac:76:30:20:f0:21:e3:06:7c:54:c8:bb:ae:
30:10:df:ff:df:78:99:fd:29:8e:e7:37:8e:6b:2f:
f6:6f:54:34:c1:53:9d:31:0d:26:ab:0f:cb:91:54:
a3:17:a5:ea:89:57:5b:1f:ae:50:ad:6a:a2:fa:70:
94:af:35:c0:50:a9:d7:a4:fe:f0:0b:9e:ad:d6:54:
b3:5d:85:7f:82:6d:f9:a1:18:c5:c9:34:97:20:ae:
c3:41:f3:b9:d0:cf:cb:86:79:24:88:1f:16:ca:ca:
2d:97:a6:e9:33:ea:77:44:ce:5d:ec:1a:90:7e:b3:
80:93:72:f9:99:40:b0:83:f9:1d:32:9d:e5:ac:79:
e5:ec:14:02:94:a2:33:4e:d6:b6:f6:9d:6d:e3:de:
cb:a7:49:1f:a4:f9:af:f8:a3:7f:82:80:d7:50:cb:
2f:97:dc:f6:40:d1:cc:39:f7:c8:1a:37:7b:48:c0:
36:56:89:81:b6:84:f2:e1:be:76:19:87:71:78:69:
31:73:b7:d4:d1:b9:56:a5:11:fa:3b:9c:88:fd:a3:
6b:40:f6:6c:67:6d:a8:3c:e4:64:51:c7:78:10:6c:
4e:33:ba:8b:24:f4:73:9b:4c:8c:18:9c:2d:97:77:
74:ed:c6:9e:4c:41:3d:f6:c6:73:68:4e:19:83:2f:
34:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FD:49:F7:9D:CF:B7:BF:CA:16:76:D1:17:F1:F4:57:14:08:EB:C1
X509v3 Authority Key Identifier:
keyid:D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:00:36:28:a5:14:1e:dc:3e:43:40:6d:13:5b:b3:65:83:5c:
c2:e1:52:0c:a1:48:ac:41:b2:33:8b:2c:e6:9c:23:f3:91:d1:
ba:82:5c:31:5e:f2:bf:74:f1:e3:c8:1e:cd:69:1a:5d:64:ff:
dc:37:fb:9c:3f:11:c6:99:81:3a:fd:b2:ad:8e:d4:7e:b8:59:
c4:97:cd:f6:75:15:4d:98:71:d2:d5:58:8c:69:b4:c8:d8:fd:
0a:05:cb:52:e0:a4:0e:ac:d6:dc:e4:55:12:ce:eb:c8:02:9b:
cc:36:13:c4:e7:7b:49:f3:6f:9f:b4:61:d4:7c:08:ca:42:c2:
38:88:71:e3:81:5f:48:26:ed:f4:80:f7:2d:0d:cf:b4:1e:11:
c4:37:16:6f:5e:ff:f5:cc:56:69:70:15:1f:c0:7c:b1:18:34:
da:20:e8:d5:10:20:a4:af:94:06:10:f8:ab:70:1b:45:46:ab:
0d:17:4a:9e:46:ab:2f:44:10:11:0c:d2:a2:fe:87:15:1a:89:
46:c9:23:42:8e:0e:61:1d:4e:07:99:b7:f2:fd:52:c3:51:41:
ad:f0:8e:d3:63:14:88:47:74:57:35:e7:81:de:a2:98:3b:a9:
34:16:31:45:99:25:b7:17:bf:bf:85:0c:c3:45:e2:92:58:80:
43:f1:0b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:56 2026 by rpki-client