Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
File: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft (raw, json)
Hash identifier: SEpS/F+O05PWbQ49y0Qhi2RWr0nILITApPQ1zYOe4Uk=
Subject key identifier: 71:DE:62:C7:C3:1C:7B:3B:68:54:CF:54:15:FF:A5:13:11:D3:D9:94
Authority key identifier: F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
Certificate issuer: /CN=f94df3b8463da119fdd56d85da547a042a1798c4
Certificate serial: 019EBE7FB02216FCF3993C481DB4F573A4F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
Manifest number: 1955
Signing time: Sat 13 Jun 2026 01:01:39 +0000
Manifest this update: Sat 13 Jun 2026 01:01:39 +0000
Manifest next update: Sun 14 Jun 2026 01:01:39 +0000
Files and hashes: 1: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl (hash: BjPbu6HuutQmcWA/B/j2DocUt6qu1mBRpjMW+Vn6Yzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:b0:22:16:fc:f3:99:3c:48:1d:b4:f5:73:a4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df3b8463da119fdd56d85da547a042a1798c4
Validity
Not Before: Jun 13 01:01:39 2026 GMT
Not After : Jun 14 01:01:39 2026 GMT
Subject: CN=71de62c7c31c7b3b6854cf5415ffa51311d3d994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:77:6a:70:df:4d:27:aa:87:9f:b4:bd:3a:db:
8f:0a:3d:62:ea:de:f6:1f:cb:65:32:9e:91:72:ba:
cb:cd:92:b7:9a:4d:42:71:bb:19:ac:73:14:5c:17:
cc:03:8a:e8:b9:39:72:23:e2:36:f6:fb:7a:2f:2a:
28:5f:75:1c:a7:fd:14:3e:5c:72:5c:3b:00:c4:58:
8b:b4:57:9c:70:8b:47:5f:07:dd:06:ad:37:b1:71:
04:ff:b9:cd:bd:b0:38:d3:88:a1:53:5d:a6:e6:c1:
ec:38:de:fb:df:dc:3e:5e:0e:d5:c7:23:fd:b1:78:
0a:69:79:3c:e5:12:49:c6:4f:3d:62:49:47:24:8a:
61:0e:7e:03:72:b3:3f:68:0f:94:ba:2c:64:73:b7:
9a:bb:b3:c5:0b:4d:c7:96:3d:e6:be:7d:97:0c:1a:
23:ca:2e:e5:c4:2b:b7:5e:b4:ce:72:d0:d0:d5:ef:
cd:e0:7b:54:29:6b:97:ce:b8:d4:f4:a4:78:01:ef:
45:07:a3:55:38:f7:e7:b1:c6:f0:16:a7:bf:87:de:
6d:a9:ee:69:91:41:81:8e:eb:52:a1:2e:1d:8b:51:
c4:bc:27:b9:38:87:cf:4d:21:30:52:33:b5:91:21:
0d:dd:27:69:b9:4f:d2:2c:58:e2:e0:e0:52:08:d1:
5e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DE:62:C7:C3:1C:7B:3B:68:54:CF:54:15:FF:A5:13:11:D3:D9:94
X509v3 Authority Key Identifier:
keyid:F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9b:63:f5:34:e8:8b:85:ec:cd:8c:f5:ab:83:e4:0e:c0:32:
de:fe:cf:c9:b3:85:a3:c5:cf:40:19:c0:da:27:7c:5e:9c:e7:
be:bb:0e:49:c9:34:84:ca:74:c6:f2:8f:c5:bb:24:f5:d7:79:
20:8b:64:49:5b:5c:cd:35:cd:a6:43:2a:df:24:fa:80:35:fe:
07:c0:5f:4b:b7:47:ef:fa:66:19:67:69:0b:0a:3b:84:4e:83:
09:04:1c:62:28:59:88:f1:67:76:8b:a1:57:1a:b4:62:e2:6a:
59:89:3e:32:ee:62:75:a4:36:f1:82:bb:c9:fa:b2:d3:18:df:
3a:f9:e8:2a:e5:07:bb:81:4e:09:3c:8d:c6:cc:83:22:79:17:
53:d6:e5:a7:8d:31:07:e8:ba:3c:5d:4a:64:63:46:63:b8:73:
ec:8a:07:45:ca:b2:4d:4e:d2:26:8f:5c:4d:75:29:10:cb:6c:
2b:84:7c:81:c2:bd:61:4a:99:7c:bd:45:d6:a4:29:da:d8:8e:
69:bb:b7:93:4a:f1:70:d6:ae:59:8a:9f:39:68:63:2f:9c:31:
a7:99:f6:07:10:79:36:83:16:81:5d:96:67:4c:78:2a:c6:fa:
97:9c:4d:5c:ec:0f:73:b5:2a:50:c8:7e:b4:8b:be:d5:0c:ac:
7b:ba:f0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:57:56 2026 by rpki-client