Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
File: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft (raw, json)
Hash identifier: JWwcifME1ZAc9svaS2+FuRy08NQmUj0/Ps7yqqSJh2w=
Subject key identifier: 29:F6:45:61:76:D1:86:6C:C7:86:19:97:B8:C3:96:02:AF:15:1D:E0
Authority key identifier: D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC
Certificate issuer: /CN=d5468f54c0d49581f69b54383d5573ff775620ec
Certificate serial: 019E307241DC1C3A59C470635BDC1EB324C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
Manifest number: 0CF8
Signing time: Sat 16 May 2026 11:00:54 +0000
Manifest this update: Sat 16 May 2026 11:00:54 +0000
Manifest next update: Sun 17 May 2026 11:00:54 +0000
Files and hashes: 1: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl (hash: fgLjRCPBXVnBAcc1cCiakecENXXGmpVLseeg3egsjP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:41:dc:1c:3a:59:c4:70:63:5b:dc:1e:b3:24:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5468f54c0d49581f69b54383d5573ff775620ec
Validity
Not Before: May 16 11:00:54 2026 GMT
Not After : May 17 11:00:54 2026 GMT
Subject: CN=29f6456176d1866cc7861997b8c39602af151de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:83:26:2e:19:31:15:80:a8:56:db:4b:d5:36:
26:da:b6:52:7a:22:c0:52:f7:c5:75:b5:61:9b:8a:
69:eb:63:10:b7:ba:61:72:c9:e2:fb:be:ca:cc:ae:
ca:8f:6a:b2:f5:65:60:0c:98:f2:e1:dc:02:98:55:
4c:7e:88:fb:18:31:14:5b:ed:e9:ee:b3:d8:51:b7:
93:2e:6f:a3:56:30:1f:4b:bb:d0:3b:88:c6:4b:42:
ea:b9:a1:e5:3c:18:11:fc:82:ac:2b:aa:89:b5:50:
fa:36:20:77:02:83:40:54:f4:49:56:4f:c9:65:cc:
8b:f1:8d:a1:02:46:88:17:11:58:28:dd:5f:d7:64:
3c:f1:2f:f0:d5:51:86:ae:15:ad:31:a0:3a:a8:ba:
2f:f6:1d:42:2b:cc:1b:1a:28:d1:41:6c:b1:51:c7:
c9:3a:a0:94:1a:7e:2c:4d:94:a0:db:f7:47:9c:69:
b8:aa:7e:9c:98:ae:7a:99:70:fa:da:4b:13:d0:e6:
c5:a8:a4:89:05:2b:4e:5b:3b:73:46:6d:f9:fb:a2:
12:9e:05:87:c9:3a:98:e2:0e:a8:24:7c:1c:fc:63:
10:5c:90:6b:22:29:1d:71:7c:af:9a:50:d2:44:66:
02:01:2b:cb:12:f0:8a:04:f7:f2:cf:fb:69:c2:a2:
60:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F6:45:61:76:D1:86:6C:C7:86:19:97:B8:C3:96:02:AF:15:1D:E0
X509v3 Authority Key Identifier:
keyid:D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b1:cc:36:42:eb:d7:43:53:25:81:0b:e1:ea:8d:5b:dc:04:
46:e4:be:e2:3b:e2:57:5a:7c:65:e9:ea:23:ae:7d:9a:db:6d:
52:fd:96:c5:01:1b:a1:86:95:d0:76:59:66:59:7d:3a:cb:8e:
75:04:b1:5b:1d:09:92:0c:b7:7a:c3:f0:6b:4c:69:c0:65:16:
f8:76:32:5f:b9:8e:79:57:a6:66:f8:d9:cf:db:90:d0:0c:c1:
92:20:23:fd:c9:75:10:d1:28:e9:11:f1:50:f8:3a:ba:52:b4:
2c:3a:0f:96:60:da:7a:79:b7:46:de:6f:32:d9:f0:e5:5c:28:
a5:05:48:b3:49:2a:91:80:08:57:c8:a1:31:86:53:8f:35:c9:
56:c4:f5:70:7e:18:4d:36:53:e9:11:ad:92:52:86:45:51:2f:
98:70:ea:8e:37:d6:dc:f6:d5:2f:e0:3e:29:62:2e:ac:39:9b:
0c:96:00:fa:03:b4:72:87:a0:8d:96:86:66:c2:f8:b0:07:b4:
33:e7:0f:35:e2:5a:8a:9d:57:b7:c4:34:39:9b:c1:7a:b6:e1:
13:44:70:b8:50:0f:be:31:2d:4c:fc:f3:6f:fd:d8:86:8d:ce:
bd:44:65:d1:7d:0a:d2:1f:40:2e:41:3c:ff:4b:31:12:d0:56:
f9:29:6e:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wckHcHDpZxHBjW9wesyTJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NDY4ZjU0YzBkNDk1ODFmNjliNTQzODNkNTU3M2ZmNzc1
NjIwZWMwHhcNMjYwNTE2MTEwMDU0WhcNMjYwNTE3MTEwMDU0WjAzMTEwLwYDVQQD
EygyOWY2NDU2MTc2ZDE4NjZjYzc4NjE5OTdiOGMzOTYwMmFmMTUxZGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoMmLhkxFYCoVttL1TYm2rZSeiLA
UvfFdbVhm4pp62MQt7phcsni+77KzK7Kj2qy9WVgDJjy4dwCmFVMfoj7GDEUW+3p
7rPYUbeTLm+jVjAfS7vQO4jGS0LquaHlPBgR/IKsK6qJtVD6NiB3AoNAVPRJVk/J
ZcyL8Y2hAkaIFxFYKN1f12Q88S/w1VGGrhWtMaA6qLov9h1CK8wbGijRQWyxUcfJ
OqCUGn4sTZSg2/dHnGm4qn6cmK56mXD62ksT0ObFqKSJBStOWztzRm35+6ISngWH
yTqY4g6oJHwc/GMQXJBrIikdcXyvmlDSRGYCASvLEvCKBPfyz/tpwqJgMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCn2RWF20YZsx4YZl7jDlgKvFR3gMB8GA1UdIwQY
MBaAFNVGj1TA1JWB9ptUOD1Vc/93ViDsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVVhUFZNRFVsWUgybTFRNFBWVnpfM2RXSU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81ZTg0MjEtMWI0MS00NTY3LTg5YTQt
MmM1YTdhYjQ5MzE5LzEvMVVhUFZNRFVsWUgybTFRNFBWVnpfM2RXSU93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi81ZTg0MjEtMWI0MS00NTY3LTg5YTQtMmM1YTdhYjQ5MzE5
LzEvMVVhUFZNRFVsWUgybTFRNFBWVnpfM2RXSU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrHMNkLr
10NTJYEL4eqNW9wERuS+4jviV1p8ZenqI659mtttUv2WxQEboYaV0HZZZll9OsuO
dQSxWx0Jkgy3esPwa0xpwGUW+HYyX7mOeVemZvjZz9uQ0AzBkiAj/cl1ENEo6RHx
UPg6ulK0LDoPlmDaenm3Rt5vMtnw5VwopQVIs0kqkYAIV8ihMYZTjzXJVsT1cH4Y
TTZT6RGtklKGRVEvmHDqjjfW3PbVL+A+KWIurDmbDJYA+gO0coegjZaGZsL4sAe0
M+cPNeJaip1Xt8Q0OZvBerbhE0RwuFAPvjEtTPzzb/3Yho3OvURl0X0K0h9ALkE8
/0sxEtBW+SlulQ==
-----END CERTIFICATE-----
Generated at Sat May 16 17:55:21 2026 by rpki-client