Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
File: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft (raw, json)
Hash identifier: 3eOXtSQMdn2GGYjp+lnse/OGHeDGQgYmRPBE9CL2pkM=
Subject key identifier: 45:F7:58:75:63:D7:54:35:C2:D0:E5:EF:03:6C:2E:D5:C3:1D:8B:64
Authority key identifier: D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC
Certificate issuer: /CN=d5468f54c0d49581f69b54383d5573ff775620ec
Certificate serial: 019DA378CF505AEC98B8A5526608F0B63AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
Manifest number: 0CAF
Signing time: Sun 19 Apr 2026 02:01:36 +0000
Manifest this update: Sun 19 Apr 2026 02:01:36 +0000
Manifest next update: Mon 20 Apr 2026 02:01:36 +0000
Files and hashes: 1: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl (hash: f8outWKeXI3BIrqgHbJ9/xKrw5Yfn8VoVPlZUrpUEsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:cf:50:5a:ec:98:b8:a5:52:66:08:f0:b6:3a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5468f54c0d49581f69b54383d5573ff775620ec
Validity
Not Before: Apr 19 02:01:36 2026 GMT
Not After : Apr 20 02:01:36 2026 GMT
Subject: CN=45f7587563d75435c2d0e5ef036c2ed5c31d8b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:8a:3e:1b:18:9b:06:7d:f1:88:aa:de:90:
e3:68:f1:bf:34:85:b7:79:58:3c:e2:02:01:4c:71:
2b:f3:18:1a:d4:86:f3:ab:15:c5:01:4c:5d:f2:cd:
81:57:ff:fc:00:10:e4:17:ec:a6:f7:79:5f:44:ac:
8d:73:b4:09:78:98:c8:2c:03:df:f0:78:2c:78:ac:
68:ea:54:56:bb:0b:a3:02:7f:16:78:02:91:db:96:
39:88:64:4f:1e:e2:24:f8:53:d4:c0:97:d4:ab:64:
34:06:7e:d4:b8:56:81:fa:c2:41:0c:92:f5:27:3b:
f1:dd:63:01:68:09:34:d1:3a:99:18:18:2b:48:e5:
9c:48:a0:7e:9c:ec:f5:e6:75:93:44:8e:e2:84:d0:
3f:e7:60:0e:09:f4:94:34:8d:2d:ae:38:fb:4d:cb:
68:b0:bb:8b:a5:76:ae:ac:8e:80:9e:f1:f0:bd:7f:
92:80:4a:93:5f:2d:fc:98:1d:1f:ba:a9:b3:2e:32:
20:d8:6f:a7:2c:06:67:b9:8b:34:60:ff:c7:dd:00:
a5:c2:de:d2:84:07:40:0f:d2:1e:93:8a:19:c3:85:
95:74:fa:d0:27:da:09:50:50:a4:18:1a:4f:e1:dc:
ec:3d:ce:da:fd:91:1d:38:52:d3:9f:f1:94:a2:3e:
15:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F7:58:75:63:D7:54:35:C2:D0:E5:EF:03:6C:2E:D5:C3:1D:8B:64
X509v3 Authority Key Identifier:
keyid:D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:49:73:5b:9e:74:fe:85:32:29:af:de:ac:37:1f:7d:b1:24:
43:2f:51:33:a4:5f:7e:55:f3:62:ab:3b:80:15:9f:03:eb:45:
0e:9f:d5:fe:13:85:18:c8:e9:ab:c8:f8:84:1f:e0:03:4c:2e:
4f:b2:61:f0:bf:53:69:2f:f4:af:fc:d6:2a:47:ac:a1:09:0a:
08:6c:6b:ef:cb:18:3f:ef:61:24:23:1b:01:f2:e6:76:ba:8c:
d0:31:9d:2b:eb:67:78:a5:2b:3c:b4:d2:ac:9a:15:0a:b3:e9:
86:f3:16:01:fb:31:fc:ac:e8:28:72:1f:a6:3c:d6:40:96:bb:
56:90:8d:94:65:70:72:e2:14:3e:3f:f8:0a:de:6b:06:2e:1a:
b5:40:7c:24:f0:6c:b1:0c:26:b4:64:3c:dc:11:cb:e7:a8:40:
11:af:7c:7a:3e:5c:fd:ac:ef:e0:2b:07:8a:59:f6:40:e6:93:
59:0e:d0:96:28:1e:f4:83:74:f3:57:aa:9a:e1:0c:ec:6a:4d:
d7:e1:56:61:64:54:8b:fd:6b:2f:02:be:2d:38:dc:1f:e2:fe:
f3:5f:73:72:7c:41:16:db:b2:c0:d8:8d:c0:b3:35:13:89:bd:
55:77:b6:44:03:63:7b:99:b9:d1:b0:d7:af:c2:65:1c:af:1d:
ed:1b:8b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:51 2026 by rpki-client