Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
File: 1uDRyowZYcCxEoqlW4V5axIECpU.mft (raw, json)
Hash identifier: gR7bd/+iy3fSTvEj3PsGKV3QkvnEFRftdAEkI+gonx0=
Subject key identifier: C1:36:F2:13:6D:09:71:2F:BA:E2:CC:ED:F5:47:72:9D:63:BE:03:D9
Authority key identifier: D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95
Certificate issuer: /CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
Certificate serial: 019DA453C2D12480430A9CF0E23A91C80553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
Manifest number: 0DD2
Signing time: Sun 19 Apr 2026 06:00:45 +0000
Manifest this update: Sun 19 Apr 2026 06:00:45 +0000
Manifest next update: Mon 20 Apr 2026 06:00:45 +0000
Files and hashes: 1: 1uDRyowZYcCxEoqlW4V5axIECpU.crl (hash: Xpqd8/mVYWrv48lgQIvMlAY9tbCwk9kMFlnN9fDHKYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:c2:d1:24:80:43:0a:9c:f0:e2:3a:91:c8:05:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
Validity
Not Before: Apr 19 06:00:45 2026 GMT
Not After : Apr 20 06:00:45 2026 GMT
Subject: CN=c136f2136d09712fbae2ccedf547729d63be03d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:c8:36:eb:de:bc:26:5f:74:1d:63:ba:62:
f6:59:ec:5b:77:bb:c7:da:c7:16:c6:c8:9c:01:3c:
7f:26:76:a4:5c:9c:0a:42:20:d6:d9:38:b3:c5:79:
f3:33:52:79:58:7a:a1:71:8c:cc:c2:71:e3:13:17:
fc:9f:4d:82:f5:a0:43:a7:68:94:61:10:15:95:3f:
64:93:1e:a4:e8:54:39:07:92:e4:c4:a5:d0:d2:64:
19:12:36:19:6b:01:29:22:6b:4b:40:f3:c5:b4:c5:
e0:90:7c:11:a9:fe:c0:32:3b:74:43:34:26:d1:ff:
69:01:1f:13:97:9d:bb:4c:18:7b:a5:2d:da:b3:eb:
9c:14:a5:aa:a8:1f:e1:23:d6:19:bd:26:7c:2b:6c:
34:90:57:0e:6b:89:0e:8a:bd:b4:81:f0:c3:36:20:
d6:34:71:80:00:d5:38:aa:f4:bd:53:34:14:dc:05:
48:6c:6b:60:da:0a:e9:8d:13:41:9e:0e:2a:af:23:
da:56:f4:97:10:b9:46:74:28:fd:ac:8b:fc:3a:3f:
fa:c0:63:40:23:0e:fe:d7:23:3f:83:a0:15:75:1a:
c7:29:56:02:2a:dc:fc:2a:4c:9a:d8:b0:76:f7:2a:
5a:50:1a:c6:4a:d4:7a:a7:a4:b9:b4:8d:58:e0:63:
6d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:36:F2:13:6D:09:71:2F:BA:E2:CC:ED:F5:47:72:9D:63:BE:03:D9
X509v3 Authority Key Identifier:
keyid:D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d6:45:2d:35:5c:14:ef:99:e4:b5:4b:f6:f5:29:36:a5:0e:
70:57:65:91:28:4e:8d:88:b9:6d:62:1e:9e:e2:40:33:3e:c3:
e1:f4:41:fd:3f:12:59:f8:84:94:8c:01:1c:bc:1e:0a:c7:da:
93:5c:e8:e1:f6:d4:51:e1:f6:a8:70:04:c9:cf:be:39:e4:8a:
69:9f:5d:a0:03:4e:8f:3e:c9:56:a2:2e:4e:c3:ed:72:51:c3:
46:09:6e:fd:b6:54:ea:10:64:a3:08:7d:3d:a9:43:2e:68:f3:
6a:80:51:20:3e:b6:08:d2:91:cd:a3:8a:9d:b1:cb:b7:c2:9b:
c0:af:a1:4f:c3:0e:95:48:de:51:79:46:9c:ab:5b:2a:cc:95:
9a:6e:da:dc:fa:a9:d5:62:b8:2e:e5:68:9f:8c:2e:2a:34:f2:
d3:9a:50:8b:bd:dc:1a:61:e9:67:aa:d2:6e:79:bc:43:83:ef:
38:cb:bb:43:f2:2d:fb:8f:cc:9f:c5:ef:95:e8:e2:1b:8b:ce:
38:9b:7c:22:9c:07:55:ff:16:76:c8:ed:b2:86:4a:e1:8f:77:
78:ba:83:72:4d:e5:85:19:77:d3:ab:8d:10:61:db:86:da:1f:
7b:0b:30:3e:41:73:46:cf:1c:9f:67:c9:59:3a:19:cb:85:1a:
39:65:ce:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kU8LRJIBDCpzw4jqRyAVTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZTBkMWNhOGMxOTYxYzBiMTEyOGFhNTViODU3OTZiMTIw
NDBhOTUwHhcNMjYwNDE5MDYwMDQ1WhcNMjYwNDIwMDYwMDQ1WjAzMTEwLwYDVQQD
EyhjMTM2ZjIxMzZkMDk3MTJmYmFlMmNjZWRmNTQ3NzI5ZDYzYmUwM2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4rINuvevCZfdB1jumL2Wexbd7vH
2scWxsicATx/JnakXJwKQiDW2TizxXnzM1J5WHqhcYzMwnHjExf8n02C9aBDp2iU
YRAVlT9kkx6k6FQ5B5LkxKXQ0mQZEjYZawEpImtLQPPFtMXgkHwRqf7AMjt0QzQm
0f9pAR8Tl527TBh7pS3as+ucFKWqqB/hI9YZvSZ8K2w0kFcOa4kOir20gfDDNiDW
NHGAANU4qvS9UzQU3AVIbGtg2grpjRNBng4qryPaVvSXELlGdCj9rIv8Oj/6wGNA
Iw7+1yM/g6AVdRrHKVYCKtz8Kkya2LB29ypaUBrGStR6p6S5tI1Y4GNtxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFME28hNtCXEvuuLM7fVHcp1jvgPZMB8GA1UdIwQY
MBaAFNbg0cqMGWHAsRKKpVuFeWsSBAqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXVEUnlvd1pZY0N4RW9xbFc0VjVheElFQ3BVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mZGUyNmItZTJhZi00Y2VmLThkYzkt
NDdjZDQ2NDE5MmU3LzEvMXVEUnlvd1pZY0N4RW9xbFc0VjVheElFQ3BVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mZGUyNmItZTJhZi00Y2VmLThkYzktNDdjZDQ2NDE5MmU3
LzEvMXVEUnlvd1pZY0N4RW9xbFc0VjVheElFQ3BVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9ZFLTVc
FO+Z5LVL9vUpNqUOcFdlkShOjYi5bWIenuJAMz7D4fRB/T8SWfiElIwBHLweCsfa
k1zo4fbUUeH2qHAEyc++OeSKaZ9doANOjz7JVqIuTsPtclHDRglu/bZU6hBkowh9
PalDLmjzaoBRID62CNKRzaOKnbHLt8KbwK+hT8MOlUjeUXlGnKtbKsyVmm7a3Pqp
1WK4LuVon4wuKjTy05pQi73cGmHpZ6rSbnm8Q4PvOMu7Q/It+4/Mn8XvlejiG4vO
OJt8IpwHVf8WdsjtsoZK4Y93eLqDck3lhRl306uNEGHbhtofewswPkFzRs8cn2fJ
WToZy4UaOWXOPg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:49:44 2026 by rpki-client