
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft
File: 1-UPazrEkL_c3jI93uUDcUM03Qiw.mft (raw, json)
Hash identifier: 95aQS+vjm6C6tzoPwkgYA1CtAZsovJdkUR5SrWJtQ2E=
Subject key identifier: 85:07:A6:19:56:80:2E:71:46:0B:DC:B1:AD:78:CF:68:14:BE:57:4F
Authority key identifier: F9:43:DA:CE:B1:24:2F:F7:37:8C:8F:77:B9:40:DC:50:CD:37:42:2C
Certificate issuer: /CN=f943daceb1242ff7378c8f77b940dc50cd37422c
Certificate serial: 01A03FE0373E1449D9A4160481C52674AF6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-UPazrEkL_c3jI93uUDcUM03Qiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft
Manifest number: 0259
Signing time: Wed 26 Aug 2026 21:00:53 +0000
Manifest this update: Wed 26 Aug 2026 21:00:53 +0000
Manifest next update: Thu 27 Aug 2026 21:00:53 +0000
Files and hashes: 1: 1-UPazrEkL_c3jI93uUDcUM03Qiw.crl (hash: 7ieNl/eKmwRej+c3VcAYr3WbaOk8FjYHYOWKOuGwcxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-UPazrEkL_c3jI93uUDcUM03Qiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:e0:37:3e:14:49:d9:a4:16:04:81:c5:26:74:af:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f943daceb1242ff7378c8f77b940dc50cd37422c
Validity
Not Before: Aug 26 21:00:53 2026 GMT
Not After : Aug 27 21:00:53 2026 GMT
Subject: CN=8507a61956802e71460bdcb1ad78cf6814be574f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:81:81:2b:fe:24:19:52:84:b0:41:38:c7:45:
9a:bb:d1:d1:c1:3f:43:46:5a:38:37:0f:fc:5b:2a:
e3:7f:89:59:52:58:27:df:e7:b0:d2:8e:5b:74:b9:
28:11:43:e9:50:95:61:10:ea:aa:9e:26:a6:2e:b6:
13:95:c9:34:b4:e3:0f:cb:c0:ff:46:2e:a9:3a:3e:
9f:18:d7:e7:dd:80:72:ff:1e:5b:e1:19:1e:fe:4f:
10:f1:03:be:01:a9:c2:51:75:42:a0:41:0e:bd:c4:
c4:55:23:44:e9:d0:ac:b5:41:58:5f:02:80:84:1c:
b9:04:ae:68:25:df:82:4a:3d:3b:bc:37:61:04:3d:
90:8d:24:8e:e1:0d:52:c2:0e:56:ea:d5:58:9d:62:
11:20:03:b4:54:7b:fd:3a:25:e5:1b:76:73:7d:8e:
b6:b2:43:d4:a1:36:73:da:c2:51:90:76:10:54:84:
1d:a6:23:09:f3:6d:c2:69:e2:82:27:92:8b:bf:66:
ab:57:b8:aa:0f:bf:aa:ef:cf:a0:f7:76:2e:d0:cf:
52:54:4c:bd:71:d5:a0:20:5c:7e:57:95:c5:9b:fb:
98:1e:e6:70:50:f1:7c:a9:06:a5:1f:e0:8f:ac:3d:
db:74:5d:37:d6:8a:e7:b8:cd:38:60:38:d3:12:77:
57:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:07:A6:19:56:80:2E:71:46:0B:DC:B1:AD:78:CF:68:14:BE:57:4F
X509v3 Authority Key Identifier:
keyid:F9:43:DA:CE:B1:24:2F:F7:37:8C:8F:77:B9:40:DC:50:CD:37:42:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-UPazrEkL_c3jI93uUDcUM03Qiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:0d:8f:9a:83:8b:03:0d:63:86:c6:5d:04:3a:c9:d8:34:a2:
94:75:e0:8f:26:7e:30:a2:e1:17:9a:f4:c5:90:c2:89:86:e8:
46:c9:4a:3b:3c:5e:f5:f1:78:ef:81:64:7f:9a:be:97:4d:3d:
04:3b:b3:a3:46:da:54:3a:88:b1:ad:6c:9b:a8:54:49:eb:03:
86:f1:2b:ea:7c:db:fd:57:42:c2:16:6d:ec:80:e1:fb:da:72:
83:cb:69:c2:95:8c:0c:41:fa:67:92:36:4d:fc:8c:0b:bc:41:
d3:1b:79:db:39:e0:13:38:38:ff:09:a1:e2:dc:37:d2:19:4c:
a1:ae:9f:2c:16:24:b2:a4:0d:6c:7f:40:a5:5d:ab:af:24:6e:
e4:42:a8:6d:3e:48:e9:8f:c8:cc:4c:10:3d:a2:b5:61:ab:41:
a9:6c:5f:82:7d:74:77:19:08:8b:bb:4b:e5:8a:fa:33:5a:c4:
53:b9:0a:83:3a:28:80:ee:f2:7f:1c:63:62:cc:65:e0:04:41:
77:8c:65:8b:a3:8b:11:eb:a5:4d:77:57:c5:8a:b8:c1:3f:1f:
fd:2b:3b:e0:71:d0:dc:36:2a:69:97:97:50:b9:e5:51:1a:1d:
26:2a:58:33:9e:9f:39:96:1e:22:e8:8d:17:0b:41:e8:4c:20:
ef:7e:2b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:55 2026 by rpki-client