Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
File: 1uDRyowZYcCxEoqlW4V5axIECpU.mft (raw, json)
Hash identifier: c164Yz0CKFobAKyQcOpTN3PSepo9fy/lM8vJZNVF9tM=
Subject key identifier: EE:11:F5:8E:DE:98:72:82:ED:35:68:C2:D1:1F:65:FA:E6:D6:C9:92
Authority key identifier: D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95
Certificate issuer: /CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
Certificate serial: 019CAB33EEB1BDDFC27DBA567BCCA1FA3404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
Manifest number: 0D51
Signing time: Sun 01 Mar 2026 21:00:33 +0000
Manifest this update: Sun 01 Mar 2026 21:00:33 +0000
Manifest next update: Mon 02 Mar 2026 21:00:33 +0000
Files and hashes: 1: 1uDRyowZYcCxEoqlW4V5axIECpU.crl (hash: iKgeusOQVqDcIChKtUGHmvWuKFJaRorAZeFqA5jTdrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:ee:b1:bd:df:c2:7d:ba:56:7b:cc:a1:fa:34:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
Validity
Not Before: Mar 1 21:00:33 2026 GMT
Not After : Mar 2 21:00:33 2026 GMT
Subject: CN=ee11f58ede987282ed3568c2d11f65fae6d6c992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:68:f8:ab:9a:c1:17:b7:4c:3e:87:a0:58:57:
cc:38:5c:29:01:92:36:fe:cd:54:7d:df:3b:9d:8f:
8d:8c:9e:5a:28:28:77:52:0b:ab:94:e5:71:9f:1d:
e6:0d:51:7a:0b:24:a2:bf:6b:15:35:1b:ab:3d:a4:
eb:a9:30:19:e1:ea:7d:01:0e:73:48:8a:c4:5a:e6:
21:1b:e8:c6:e4:7c:93:bf:cc:1f:c2:39:62:85:b2:
09:40:32:60:cd:97:09:d4:b5:b0:35:44:8d:1f:6d:
fc:1c:c5:f3:ef:ad:db:5e:df:09:4e:07:0f:b1:a0:
bd:09:7c:b5:e5:cc:ab:b7:4d:e9:a5:1d:24:18:fa:
fc:5c:49:02:14:0a:87:7f:9b:21:d3:85:b3:81:d6:
dd:8b:35:e3:0d:61:fa:e6:cf:b3:b6:01:cb:1b:c0:
16:34:ec:05:98:e0:27:b6:48:f4:6e:4a:dd:9e:b9:
dd:f7:4a:0b:00:ec:2b:bd:1a:02:5c:d5:a7:b3:f7:
b7:7a:18:3f:82:77:0c:b1:01:56:42:67:07:17:09:
64:e5:e9:76:7c:47:92:5e:3e:31:ec:fe:47:01:5a:
f0:54:b4:26:02:17:58:6a:1c:ee:4a:7f:e5:ff:f9:
b1:ce:bc:4c:17:32:46:94:49:49:9a:bd:8d:28:1d:
0f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:11:F5:8E:DE:98:72:82:ED:35:68:C2:D1:1F:65:FA:E6:D6:C9:92
X509v3 Authority Key Identifier:
keyid:D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:16:c1:11:96:49:4a:54:77:77:72:f3:f8:a7:3a:71:e2:ec:
5f:bc:93:a1:b2:f5:cd:ae:62:94:18:3b:6c:eb:7a:93:6d:49:
0c:61:35:62:d7:e4:e2:8a:84:33:c4:9b:5c:04:ab:5d:45:54:
60:75:7b:b8:13:83:06:3d:b6:75:45:e5:bf:6b:b1:00:e5:82:
fa:fb:44:e0:0c:e2:92:2f:af:35:8d:97:8c:b7:1d:c5:6d:9d:
45:2e:a9:eb:f5:33:55:17:63:4e:0f:a5:62:98:ea:43:7c:21:
8d:a4:5a:7e:30:e6:eb:b9:06:f1:e9:91:16:e2:f6:d5:9e:e0:
49:5b:c1:e7:8d:ce:9b:fb:7a:59:5d:85:3e:e0:d0:9f:b7:43:
87:5e:d2:a1:b2:b6:8b:28:8c:47:91:8f:09:d1:d4:c7:96:53:
7a:c4:ff:cd:e5:08:f2:4b:13:9e:11:f7:96:63:44:db:f2:2d:
71:4f:20:ff:cf:4d:ac:14:15:e4:1f:e0:c1:79:bd:57:69:5d:
10:fe:f2:90:fe:a6:bc:ec:63:bd:bf:3a:67:3f:b9:bf:6b:f1:
b5:f6:ae:30:27:70:b6:cf:25:00:63:eb:d8:92:03:1e:49:76:
ef:05:1c:3c:3d:9d:a3:f1:99:5e:67:84:ef:90:91:9c:66:90:
43:ca:12:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:22:56 2026 by rpki-client