Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
File: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft (raw, json)
Hash identifier: DsijnJsaj5FWN+Oh+qLxjYLGA8U7ng5XqGdxvVaIR/E=
Subject key identifier: 9B:EB:4B:6F:9B:D6:33:6C:D7:C6:F3:48:C2:00:C9:E3:C4:4A:CA:F4
Authority key identifier: FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B
Certificate issuer: /CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
Certificate serial: 019D99D0E265E302600F44E9FB2ED429CC07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
Manifest number: 05D6
Signing time: Fri 17 Apr 2026 05:01:36 +0000
Manifest this update: Fri 17 Apr 2026 05:01:36 +0000
Manifest next update: Sat 18 Apr 2026 05:01:36 +0000
Files and hashes: 1: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl (hash: Hi4lNDN1iCpUrET87djsnC7YhGaA/peQGOAMljqKjq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:e2:65:e3:02:60:0f:44:e9:fb:2e:d4:29:cc:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
Validity
Not Before: Apr 17 05:01:36 2026 GMT
Not After : Apr 18 05:01:36 2026 GMT
Subject: CN=9beb4b6f9bd6336cd7c6f348c200c9e3c44acaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6b:3b:c9:b7:5a:1c:81:ec:3f:a1:99:1e:ee:
26:46:bd:2d:1e:29:f2:53:8b:e3:b3:c9:ac:b8:eb:
c8:cf:24:91:e0:2e:db:be:30:e2:1d:29:57:cc:8d:
1e:e8:ed:c6:37:8b:ff:39:78:97:ed:ee:0c:0a:ce:
73:b6:b0:f6:f7:2f:4f:fd:60:ac:5f:f5:0e:0e:6e:
15:19:8c:f8:26:8f:10:18:12:8a:e4:26:3f:2f:aa:
f1:79:7b:5f:85:b5:33:74:c7:2d:f2:b6:34:b8:43:
fb:80:5e:7b:6f:e4:32:0a:e9:3b:86:7a:12:19:c8:
81:37:35:df:ce:93:13:ef:46:b3:40:3b:04:ac:8d:
2b:10:17:cc:8b:a2:19:17:c7:0b:35:38:ba:07:3b:
05:35:85:fc:3a:c0:61:51:19:83:72:8c:a5:82:8a:
37:bd:52:f3:91:df:ec:ec:30:51:2b:86:15:4d:bf:
14:fe:14:07:5a:3d:0c:e8:6a:90:06:ad:88:92:1f:
e0:c0:d3:60:47:8a:c1:2a:cd:9e:c9:8c:9b:5b:d2:
5b:1d:53:9a:22:cd:f6:be:ab:12:25:0d:77:70:0c:
d5:b9:ac:cd:d6:3a:b9:bd:e2:47:db:25:4b:5d:5c:
94:e1:12:4f:f7:08:07:2e:64:7a:d6:54:cc:6d:2d:
52:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EB:4B:6F:9B:D6:33:6C:D7:C6:F3:48:C2:00:C9:E3:C4:4A:CA:F4
X509v3 Authority Key Identifier:
keyid:FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:0d:24:35:d0:15:13:24:da:63:07:d5:54:a8:eb:95:f8:c7:
31:42:1d:65:29:2e:65:73:9e:17:b6:ae:6e:90:4e:e4:ac:91:
c0:26:d2:6f:43:31:8e:14:b5:5d:5a:5c:82:9b:51:77:3a:59:
26:53:fb:3b:5b:2c:11:14:26:51:b9:8e:be:60:bf:3a:9f:ca:
b7:26:a8:0d:1d:e2:6f:c4:dc:1d:96:4a:ce:6a:8b:75:55:0e:
be:57:36:75:88:fc:9a:28:ac:d4:72:c7:d4:70:db:6d:0b:ee:
6d:6f:8e:b6:76:dd:e2:00:84:2d:03:3f:93:75:3f:f0:60:f7:
fe:1a:cb:7d:0e:48:98:96:bf:c3:38:f4:c5:43:ef:0b:d1:3b:
fc:01:87:82:06:3a:2e:3f:03:04:ba:48:47:fb:e5:98:e1:0b:
1a:21:64:f3:12:9f:3e:81:da:76:26:b3:f7:e0:81:e1:2c:2a:
ba:a9:ed:14:01:9a:3b:19:91:ed:71:4a:40:7c:d6:d7:70:66:
d5:92:3e:10:d7:fc:18:2d:15:0e:16:9a:f1:0c:4c:cd:9b:68:
3d:b1:73:be:1f:29:b3:ff:4e:ea:88:98:89:79:90:59:12:d0:
56:c7:ec:8e:da:bf:c9:2e:e1:d7:b1:fe:61:fc:07:4a:3f:8e:
60:a2:27:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:32 2026 by rpki-client