Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
File: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft (raw, json)
Hash identifier: WN3QnKvLfR2O1FwQuHg83hW0SqyvbdRNM27VXMwOfyA=
Subject key identifier: D0:53:FC:8B:5C:6B:13:52:13:52:16:2A:5A:48:DD:F0:ED:D0:15:7E
Authority key identifier: F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
Certificate issuer: /CN=f94df3b8463da119fdd56d85da547a042a1798c4
Certificate serial: 019CAB6BA464E149501ED7524089ED872F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:01:24 +0000
Manifest this update: Sun 01 Mar 2026 22:01:24 +0000
Manifest next update: Mon 02 Mar 2026 22:01:24 +0000
Files and hashes: 1: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl (hash: jBXTMVZnCHJuGQOw/nH7jyRaTRt5esucRvRZZWzAyvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:a4:64:e1:49:50:1e:d7:52:40:89:ed:87:2f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df3b8463da119fdd56d85da547a042a1798c4
Validity
Not Before: Mar 1 22:01:24 2026 GMT
Not After : Mar 2 22:01:24 2026 GMT
Subject: CN=d053fc8b5c6b13521352162a5a48ddf0edd0157e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ef:c3:25:3d:78:63:29:68:7e:bb:79:d4:8d:
4a:92:ca:e9:35:ec:ce:b4:ba:9a:68:fd:e2:12:af:
a8:18:0e:ee:24:f0:0e:fc:1b:5e:19:5f:4e:63:07:
a1:7d:0b:84:03:8e:60:3a:fa:1d:af:11:f4:8f:2c:
19:8e:d9:70:d2:89:e8:70:19:73:de:f9:b7:af:8b:
78:4e:f3:b3:71:f5:50:b0:d2:5d:af:bd:1f:70:ff:
14:eb:18:2e:33:9f:20:e9:39:50:76:58:42:2e:cc:
dc:5c:af:bd:23:1a:11:e9:82:56:f6:c3:31:fe:3d:
fc:3d:17:c2:cf:71:36:43:5c:97:12:cd:ba:97:02:
d5:e2:df:04:5d:9a:89:b2:3f:25:38:32:d8:02:1d:
49:17:2b:89:2f:e6:d7:c6:03:d3:fd:8d:ba:1c:e7:
b5:ef:c9:1e:9e:8e:c3:ac:56:1d:27:46:04:8d:7d:
cc:ef:07:f0:70:08:60:23:d8:3c:4b:f9:07:be:0a:
d6:2d:bc:6b:e1:e2:dc:6d:f1:ba:d3:fc:48:8e:e6:
a4:f7:83:ce:6f:36:f7:0d:74:da:f5:14:c2:73:88:
bf:2c:97:d8:b2:45:f1:77:ef:9f:b6:d4:8b:84:bb:
da:bf:af:1e:49:84:77:99:89:40:9b:3d:f7:4e:c1:
64:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:53:FC:8B:5C:6B:13:52:13:52:16:2A:5A:48:DD:F0:ED:D0:15:7E
X509v3 Authority Key Identifier:
keyid:F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e2:cb:72:39:ea:ec:4c:c7:dc:ef:d5:73:65:dc:79:99:e7:
5f:3a:1c:3f:9f:85:70:53:7c:40:e3:32:81:de:24:33:9d:e5:
c9:59:7c:0a:6d:e8:11:6c:6f:32:04:a1:6f:5c:f3:6e:1e:32:
d1:1f:b3:14:14:27:78:5c:e6:3e:4b:71:52:6c:3e:c7:de:86:
61:4a:4f:c6:de:93:d1:79:4b:b1:4d:3d:cd:be:23:13:b5:ea:
51:58:2d:37:9f:79:8d:a1:d1:87:27:b2:ab:55:0a:05:5a:0d:
b0:e8:a8:4d:97:f7:e4:b4:0a:2e:ca:a9:a7:b6:07:e1:e9:47:
b9:b9:dd:94:05:97:1c:75:d6:d3:86:38:bc:90:65:8b:eb:5c:
2d:4a:b8:58:e7:55:09:b7:84:93:b2:67:7b:98:4a:75:ea:4e:
f5:09:22:b7:19:c0:2f:b3:11:06:55:4a:eb:3e:d8:cf:dd:dc:
95:22:65:df:c5:5b:3d:e8:b1:6a:83:5f:4f:22:9b:e3:6e:9b:
26:95:54:b0:86:f1:52:63:3e:02:80:87:eb:b0:3f:4c:8f:cd:
3f:20:44:4b:a6:8c:96:17:46:6f:97:e3:db:8e:81:39:c3:97:
e8:d1:92:e0:08:7c:a0:f9:26:05:1e:03:10:0b:74:a4:8d:90:
e5:1b:3f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:37:32 2026 by rpki-client