Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
File: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft (raw, json)
Hash identifier: 3kQh2EI/6UEeSpIm/+LHH6FcRcUkgAeLpMV37y0LOg4=
Subject key identifier: E0:FA:53:ED:99:0B:91:22:A7:EB:BD:A3:C5:AC:4D:40:8A:58:3D:BC
Authority key identifier: D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC
Certificate issuer: /CN=d5468f54c0d49581f69b54383d5573ff775620ec
Certificate serial: 019FAAF511A5EE7D130D2BD72E3787072F31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
Manifest number: 0DBC
Signing time: Tue 28 Jul 2026 23:00:15 +0000
Manifest this update: Tue 28 Jul 2026 23:00:15 +0000
Manifest next update: Wed 29 Jul 2026 23:00:15 +0000
Files and hashes: 1: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl (hash: wJVbCqfxg/5Uhe1VP7tG17dSfo2aOjoj4ED9aTID4WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:11:a5:ee:7d:13:0d:2b:d7:2e:37:87:07:2f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5468f54c0d49581f69b54383d5573ff775620ec
Validity
Not Before: Jul 28 23:00:15 2026 GMT
Not After : Jul 29 23:00:15 2026 GMT
Subject: CN=e0fa53ed990b9122a7ebbda3c5ac4d408a583dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:5a:92:3b:ac:82:2b:16:9b:f7:60:8c:46:
91:c7:4e:59:8a:7e:48:86:4a:35:bc:cd:e2:9e:b3:
44:10:88:36:41:22:e7:23:bc:ce:9a:91:bd:fb:8d:
b7:c1:a8:10:6f:d0:08:84:a4:74:d2:63:97:2e:d8:
e0:95:46:42:c0:8c:03:21:4c:f7:fe:0a:5a:b5:f4:
9c:25:22:d1:48:0e:22:a6:ca:38:6a:21:0b:a2:6c:
3a:90:aa:55:56:af:13:c4:af:42:e0:14:7a:dc:42:
54:b3:a5:a4:58:5a:04:4c:b4:6c:c7:11:e0:aa:fa:
40:d2:13:17:21:3c:b9:46:0d:3c:4f:d8:d7:4e:16:
ef:d2:ac:fd:93:2d:42:83:e3:0a:4f:7b:30:1b:9e:
2e:0a:d5:f3:92:f6:83:58:7b:fa:db:fb:82:33:8b:
a2:d2:be:eb:44:7d:82:6c:91:0f:c7:61:9a:b7:cd:
64:1b:0e:33:dd:fa:74:d4:99:2d:70:b1:03:60:d5:
98:2d:6f:2a:ec:3f:16:31:1d:3d:64:3e:70:69:37:
d8:96:57:d0:82:18:f5:b4:50:7b:9d:55:a3:4c:1d:
13:3a:6d:c9:61:ba:b6:c5:14:84:4a:e1:02:83:5b:
c3:d0:45:9a:4c:39:e3:3e:ee:2c:13:d9:47:fe:be:
17:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FA:53:ED:99:0B:91:22:A7:EB:BD:A3:C5:AC:4D:40:8A:58:3D:BC
X509v3 Authority Key Identifier:
keyid:D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f3:2f:76:03:d6:72:c8:8b:ef:36:c7:91:c9:64:67:2c:82:
7b:e1:5d:27:62:99:f3:01:ab:2d:17:10:b7:11:a3:5b:5f:30:
01:c5:c1:50:3e:c2:b2:48:da:d7:36:6f:a5:22:a3:63:0d:7d:
99:3f:28:ad:16:b2:b6:92:1e:12:09:85:0b:32:8a:e9:4b:8a:
d3:7a:21:42:df:22:e7:01:c2:db:0e:1f:a8:10:cc:84:99:59:
0c:a7:fc:b1:25:12:b2:0a:ba:bc:31:fa:0e:0c:1e:94:8f:aa:
36:a5:51:b4:e1:77:33:b6:6f:9c:f0:74:45:02:bc:a2:20:81:
3d:94:12:c1:a7:35:29:c8:16:54:06:e0:f5:90:ab:7a:23:60:
f1:31:dc:c6:27:11:75:b2:bb:8a:b6:0e:fa:51:5f:bf:2f:90:
cd:10:1b:85:a8:df:af:38:73:93:43:25:52:12:06:6a:ce:fd:
df:ef:19:c4:16:e4:2e:12:d3:1c:d9:54:c2:62:8f:7b:c2:d8:
7c:7c:0b:ab:c0:a9:49:9b:29:89:a3:52:27:3c:bb:a6:5d:31:
1d:6b:50:79:9c:25:e3:0d:8c:db:0d:99:f3:8d:ec:24:b1:ae:
42:f6:35:23:ba:c2:84:ff:50:09:f1:8e:94:f8:0f:bd:34:93:
04:f7:43:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9RGl7n0TDSvXLjeHBy8xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NDY4ZjU0YzBkNDk1ODFmNjliNTQzODNkNTU3M2ZmNzc1
NjIwZWMwHhcNMjYwNzI4MjMwMDE1WhcNMjYwNzI5MjMwMDE1WjAzMTEwLwYDVQQD
EyhlMGZhNTNlZDk5MGI5MTIyYTdlYmJkYTNjNWFjNGQ0MDhhNTgzZGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWtakjusgisWm/dgjEaRx05Zin5I
hko1vM3inrNEEIg2QSLnI7zOmpG9+423wagQb9AIhKR00mOXLtjglUZCwIwDIUz3
/gpatfScJSLRSA4ipso4aiELomw6kKpVVq8TxK9C4BR63EJUs6WkWFoETLRsxxHg
qvpA0hMXITy5Rg08T9jXThbv0qz9ky1Cg+MKT3swG54uCtXzkvaDWHv62/uCM4ui
0r7rRH2CbJEPx2Gat81kGw4z3fp01JktcLEDYNWYLW8q7D8WMR09ZD5waTfYllfQ
ghj1tFB7nVWjTB0TOm3JYbq2xRSESuECg1vD0EWaTDnjPu4sE9lH/r4XMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOD6U+2ZC5Eip+u9o8WsTUCKWD28MB8GA1UdIwQY
MBaAFNVGj1TA1JWB9ptUOD1Vc/93ViDsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVVhUFZNRFVsWUgybTFRNFBWVnpfM2RXSU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81ZTg0MjEtMWI0MS00NTY3LTg5YTQt
MmM1YTdhYjQ5MzE5LzEvMVVhUFZNRFVsWUgybTFRNFBWVnpfM2RXSU93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi81ZTg0MjEtMWI0MS00NTY3LTg5YTQtMmM1YTdhYjQ5MzE5
LzEvMVVhUFZNRFVsWUgybTFRNFBWVnpfM2RXSU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPMvdgPW
csiL7zbHkclkZyyCe+FdJ2KZ8wGrLRcQtxGjW18wAcXBUD7Cskja1zZvpSKjYw19
mT8orRaytpIeEgmFCzKK6UuK03ohQt8i5wHC2w4fqBDMhJlZDKf8sSUSsgq6vDH6
DgwelI+qNqVRtOF3M7ZvnPB0RQK8oiCBPZQSwac1KcgWVAbg9ZCreiNg8THcxicR
dbK7irYO+lFfvy+QzRAbhajfrzhzk0MlUhIGas793+8ZxBbkLhLTHNlUwmKPe8LY
fHwLq8CpSZspiaNSJzy7pl0xHWtQeZwl4w2M2w2Z843sJLGuQvY1I7rChP9QCfGO
lPgPvTSTBPdD4w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:10:37 2026 by rpki-client