Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
File: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft (raw, json)
Hash identifier: B7pTXsCVM/zWEqjVmUjmRE72GxIx90L5jUB2aVljYso=
Subject key identifier: DA:AF:B9:85:ED:77:39:E3:C6:B4:9D:EB:A3:D2:3A:BD:35:73:E8:BB
Authority key identifier: F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
Certificate issuer: /CN=f94df3b8463da119fdd56d85da547a042a1798c4
Certificate serial: 019FAA199F14992380629BC61345CE722C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
Manifest number: 19CF
Signing time: Tue 28 Jul 2026 19:00:33 +0000
Manifest this update: Tue 28 Jul 2026 19:00:33 +0000
Manifest next update: Wed 29 Jul 2026 19:00:33 +0000
Files and hashes: 1: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl (hash: VxQu8oagVEBDENOIPHy4qj6viXDSbFtoQufvLE8R2p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:9f:14:99:23:80:62:9b:c6:13:45:ce:72:2c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df3b8463da119fdd56d85da547a042a1798c4
Validity
Not Before: Jul 28 19:00:33 2026 GMT
Not After : Jul 29 19:00:33 2026 GMT
Subject: CN=daafb985ed7739e3c6b49deba3d23abd3573e8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:58:5a:6f:0e:46:da:44:28:3f:c4:41:d2:71:
1b:d4:33:c9:22:0a:0d:16:db:55:c5:97:70:10:c9:
35:fb:d9:d6:36:bc:19:c7:92:9e:07:ce:62:53:de:
bb:b1:9f:99:b4:a9:82:da:07:f5:61:93:b2:32:1e:
40:0f:7a:e8:e5:62:9a:47:de:bc:5c:02:c3:ca:2e:
62:30:75:30:32:0a:b8:11:e8:92:b0:5c:e9:8d:2f:
98:c6:27:12:66:f5:0c:09:66:57:7c:65:d8:03:4f:
41:d5:da:54:8d:08:cd:cc:c7:e5:83:89:e1:5b:e9:
eb:54:54:b4:93:73:7d:8a:25:8a:06:5c:ab:8c:52:
30:e7:2e:e8:d4:7a:66:18:76:80:f1:c1:bb:26:62:
37:d7:1f:4f:27:ef:5f:5b:47:88:3e:ad:06:95:83:
27:56:83:23:a8:e8:99:02:b7:23:6d:44:57:af:3c:
5d:96:8a:ef:c6:ad:56:ed:ac:11:f5:b0:a5:da:c8:
1a:28:65:f6:a6:a8:9b:22:80:c4:f3:18:92:8f:bf:
94:71:d7:fd:43:5a:e7:3a:c6:50:33:cc:e7:ce:9b:
fb:92:5b:c2:0f:04:7a:8e:17:5d:82:a7:90:d8:8c:
e4:71:5f:5b:7e:55:f0:d5:a4:62:b4:ca:f0:3e:cd:
80:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AF:B9:85:ED:77:39:E3:C6:B4:9D:EB:A3:D2:3A:BD:35:73:E8:BB
X509v3 Authority Key Identifier:
keyid:F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:24:5e:00:65:cd:00:e9:9e:57:ac:04:f4:f1:04:c9:05:7a:
9c:a9:d9:0a:1c:67:6a:00:a9:dc:68:09:a9:2f:f6:93:12:58:
1e:ee:ce:5f:e5:1d:40:87:2f:70:c7:1e:61:7e:71:40:7f:41:
e4:f6:63:a5:53:e6:5b:36:6d:3c:fa:29:4a:21:83:c5:73:ec:
41:02:ab:43:a2:57:79:82:eb:69:78:6c:8e:18:26:64:45:cc:
9d:6c:ff:80:62:0e:a8:93:01:bb:e6:b0:07:2c:ce:6e:ad:77:
a3:0a:4e:a5:0e:d7:4b:56:7e:3d:e4:f6:71:48:b2:1a:8b:6e:
46:34:b2:f5:87:9f:3f:e1:82:94:aa:8b:93:dd:13:4d:24:2a:
16:7e:55:46:3e:85:1f:74:1e:88:38:4b:d3:51:a0:ea:4b:fe:
80:b2:19:22:17:a5:34:8f:10:82:22:a1:5e:b9:97:30:b9:af:
13:16:77:2d:b7:c9:fc:5b:bd:c5:27:4b:07:a3:28:de:bf:33:
4c:bd:06:e8:ef:4a:ee:dc:ef:10:e4:a6:11:80:26:82:40:df:
91:c8:63:29:e3:fa:7e:ae:eb:3e:2b:14:40:b2:6a:47:cd:05:
6b:95:86:b4:a5:19:66:d4:b7:7d:6d:4b:ee:ba:b5:d7:4d:93:
50:9d:d2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:13:41 2026 by rpki-client