Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft
File: 1-UPazrEkL_c3jI93uUDcUM03Qiw.mft (raw, json)
Hash identifier: DvDagKdWt1MyL2WnJgos0/MxKDGxewoPA5U0gGxZj9M=
Subject key identifier: 1A:8D:99:C7:0C:05:F2:8D:E6:29:2F:B8:C0:3E:BD:D0:BF:D9:D6:A8
Authority key identifier: F9:43:DA:CE:B1:24:2F:F7:37:8C:8F:77:B9:40:DC:50:CD:37:42:2C
Certificate issuer: /CN=f943daceb1242ff7378c8f77b940dc50cd37422c
Certificate serial: 019D378996807D9BA3AA3FD01FD2B2B863F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-UPazrEkL_c3jI93uUDcUM03Qiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft
Manifest number: C7
Signing time: Sun 29 Mar 2026 03:00:56 +0000
Manifest this update: Sun 29 Mar 2026 03:00:56 +0000
Manifest next update: Mon 30 Mar 2026 03:00:56 +0000
Files and hashes: 1: 1-UPazrEkL_c3jI93uUDcUM03Qiw.crl (hash: mpRoA776RbTGNgjmjVZeo8V4IlcI8MZH6KjyCYb2xQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-UPazrEkL_c3jI93uUDcUM03Qiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:96:80:7d:9b:a3:aa:3f:d0:1f:d2:b2:b8:63:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f943daceb1242ff7378c8f77b940dc50cd37422c
Validity
Not Before: Mar 29 03:00:56 2026 GMT
Not After : Mar 30 03:00:56 2026 GMT
Subject: CN=1a8d99c70c05f28de6292fb8c03ebdd0bfd9d6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:a2:5c:6c:16:5e:93:ec:5e:75:fb:f0:52:
0c:68:9f:51:2c:45:32:02:39:f1:26:e0:00:29:5c:
a7:af:dd:09:aa:88:3e:1b:00:5d:9b:d7:bd:09:f9:
4c:e3:25:e4:9d:11:f9:ea:14:8e:b9:66:8d:0e:19:
40:bb:24:a4:06:0a:0c:c3:df:f6:fd:5a:e9:b0:59:
04:eb:61:9c:52:41:9f:e0:b4:cb:e2:54:73:f3:35:
67:b6:bc:9c:00:10:1c:98:9e:45:6a:b7:84:cc:ce:
1b:f1:e7:66:f3:c3:6b:ad:82:b4:af:a4:da:9d:a2:
be:fa:c6:49:fb:d0:cd:58:81:f1:45:6c:ab:6b:fd:
f8:e9:e5:30:ca:62:c0:75:33:ef:d4:16:9f:e4:a3:
63:9e:fa:57:48:b9:1c:d5:65:0e:e8:72:07:ea:66:
ef:ab:dd:0c:43:6b:3b:71:e2:1b:a4:84:27:5b:99:
ae:37:37:6a:05:71:02:39:2f:97:56:c9:84:98:e5:
6a:d4:ff:db:53:89:33:8a:be:c5:0a:3e:2b:63:0d:
b4:9e:21:26:c5:f1:98:d9:cd:42:cb:5f:18:29:7f:
0d:28:2e:3e:1b:26:14:85:57:04:13:9f:fe:5d:33:
f3:b2:59:3a:56:8e:ff:bd:48:ce:46:44:87:ed:8d:
9b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8D:99:C7:0C:05:F2:8D:E6:29:2F:B8:C0:3E:BD:D0:BF:D9:D6:A8
X509v3 Authority Key Identifier:
keyid:F9:43:DA:CE:B1:24:2F:F7:37:8C:8F:77:B9:40:DC:50:CD:37:42:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-UPazrEkL_c3jI93uUDcUM03Qiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d0:02:57:52:4f:ce:57:5f:5a:6c:cf:09:06:52:d9:5e:85:
bc:1f:7c:d6:b6:4b:3a:22:d8:b9:e2:4d:31:3c:a8:94:1b:8c:
13:e7:b4:6a:4e:3b:77:ac:91:c2:c1:a7:9a:15:93:0d:9f:11:
03:ff:83:4b:2a:9d:11:fc:be:73:eb:71:d9:f8:8c:c8:98:73:
95:13:e6:85:b7:1e:e7:1e:e3:73:68:6d:1c:f0:f9:c9:37:1f:
43:70:6b:18:8e:7d:72:9e:87:cb:c3:b6:71:f5:29:a4:ea:e4:
ab:2c:75:ca:59:1b:4f:dd:f2:bb:25:f9:15:4c:a2:27:39:27:
28:4c:5e:c9:10:a0:8c:5c:3b:7e:0d:c8:a7:87:c6:cb:13:81:
03:03:c6:bf:4e:05:53:3c:ff:03:54:1a:b6:d9:1d:dc:16:a8:
b9:3c:52:f1:86:0b:31:ee:31:eb:04:94:53:a7:63:10:2b:c4:
9d:84:7b:64:13:a1:75:f1:ad:48:15:41:75:9e:8a:ff:3d:32:
a7:15:49:07:62:c6:66:d0:2f:70:0c:e4:cf:e5:fa:11:33:02:
24:1c:5c:4e:52:de:1d:68:86:16:17:f9:11:1d:01:82:84:f4:
48:73:5c:d6:7e:32:01:82:3a:82:86:f7:7e:e5:2e:e4:e5:2c:
8b:1f:4d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:12 2026 by rpki-client