Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
File: 1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft (raw, json)
Hash identifier: xx0HYAl8vbmnBhSlnyi2GPDYFKwMvpfFvziN1Souiy8=
Subject key identifier: 3E:F2:D4:AC:D7:29:B7:0A:D4:B0:7A:F6:9B:5F:CF:B3:45:88:25:0F
Authority key identifier: D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F
Certificate issuer: /CN=d6eea5fb35b512f910094dc62459c1679b583e3f
Certificate serial: 01A0DB04AE279FB9A661E084CE1CE421B52D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
Manifest number: 1A00
Signing time: Sat 26 Sep 2026 00:01:52 +0000
Manifest this update: Sat 26 Sep 2026 00:01:52 +0000
Manifest next update: Sun 27 Sep 2026 00:01:52 +0000
Files and hashes: 1: 1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl (hash: CT6k4mNNJkgyrzZdPm/7ES6zBoE8RBddVcasPROhj/U=)
2: GsL6G3Qz5ZjpuRYda1-7KFnYc0o.roa (hash: pJa6GuoaHJHw4hKMbDO80uXWDKK7cJe4mwiQpI9C0zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:ae:27:9f:b9:a6:61:e0:84:ce:1c:e4:21:b5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eea5fb35b512f910094dc62459c1679b583e3f
Validity
Not Before: Sep 26 00:01:52 2026 GMT
Not After : Sep 27 00:01:52 2026 GMT
Subject: CN=3ef2d4acd729b70ad4b07af69b5fcfb34588250f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:94:c1:e1:72:05:7e:33:c0:69:10:93:a2:bb:
e8:5a:b7:71:dc:80:da:d8:41:72:59:d5:7a:cf:75:
d6:39:e0:d1:7e:b0:fd:8f:df:32:c5:9e:95:d7:c6:
6b:de:3d:94:f1:18:8a:e0:2c:d7:36:71:e7:de:1e:
51:6e:95:ba:af:78:ed:9f:6f:bf:e7:a7:69:a7:71:
f3:73:bc:d5:35:38:e2:70:5f:12:24:7f:3d:16:90:
d1:31:0d:04:79:0e:b9:12:ab:c9:00:c6:68:56:23:
66:f0:7e:13:51:ea:bd:4f:36:5a:73:13:ec:7f:54:
85:ce:44:be:d0:05:43:2e:dc:0d:d6:be:8a:6f:e0:
e3:fd:36:92:51:c1:f3:80:99:dd:51:c3:e5:0e:b4:
87:62:a3:f3:a3:8e:51:47:ae:f2:26:d8:86:a5:b8:
5b:74:2e:14:38:e3:68:9a:72:fe:f4:eb:a9:a3:af:
95:bc:dd:93:e0:5b:00:6b:9a:64:5f:eb:c5:52:13:
69:f1:a4:0a:27:78:83:80:7c:44:f6:3a:03:0d:d1:
27:31:e8:3a:c9:91:e2:59:28:69:4a:0a:68:6e:1a:
a2:32:2c:77:45:ae:cb:c8:ab:83:d1:6f:ba:2c:d9:
a1:c4:df:8c:8a:10:b7:46:1c:91:94:06:b0:fe:46:
fc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F2:D4:AC:D7:29:B7:0A:D4:B0:7A:F6:9B:5F:CF:B3:45:88:25:0F
X509v3 Authority Key Identifier:
keyid:D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:7f:45:9c:f9:27:c0:fc:9f:f4:89:43:99:e0:4c:79:46:8e:
6a:e7:9d:1a:f5:53:54:e3:0d:38:e2:8d:21:26:b0:4e:ab:c4:
ef:b7:ec:f8:ff:a6:e4:0d:78:dd:0c:6a:52:1a:8a:c9:89:cb:
5d:1d:7a:fd:15:9d:a3:c4:9f:19:72:6b:ad:b3:a1:99:2e:71:
ac:b8:2a:5a:5d:54:25:53:31:1d:e9:59:58:3d:6e:50:c5:da:
58:0d:a8:5c:64:8c:fc:5d:3f:14:be:ab:6d:70:fc:94:89:31:
02:16:14:64:61:8c:44:57:46:91:5d:90:bd:e6:bd:2f:f0:af:
d6:37:90:52:86:46:ac:ff:d9:86:88:9d:30:89:f1:05:ab:cb:
02:4d:df:a1:37:18:0c:ed:df:d0:63:c6:2c:ae:c4:f1:b9:5d:
9c:1a:a0:79:89:f1:76:6c:af:a2:0b:04:c0:23:ef:e2:66:d2:
0c:fb:2d:b8:f9:3e:4c:f4:34:e2:41:c3:e2:32:79:95:f4:36:
28:71:9e:4c:0c:3a:12:12:5b:9e:92:97:f4:ec:71:e4:01:83:
73:34:66:38:88:bc:89:88:d0:45:45:13:78:43:77:f8:fb:09:
12:ee:e7:d1:77:94:7c:e9:d5:5a:41:69:ca:48:35:dd:8c:47:
95:ce:0c:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbBK4nn7mmYeCEzhzkIbUtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZWVhNWZiMzViNTEyZjkxMDA5NGRjNjI0NTljMTY3OWI1
ODNlM2YwHhcNMjYwOTI2MDAwMTUyWhcNMjYwOTI3MDAwMTUyWjAzMTEwLwYDVQQD
EygzZWYyZDRhY2Q3MjliNzBhZDRiMDdhZjY5YjVmY2ZiMzQ1ODgyNTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pTB4XIFfjPAaRCTorvoWrdx3IDa
2EFyWdV6z3XWOeDRfrD9j98yxZ6V18Zr3j2U8RiK4CzXNnHn3h5RbpW6r3jtn2+/
56dpp3Hzc7zVNTjicF8SJH89FpDRMQ0EeQ65EqvJAMZoViNm8H4TUeq9TzZacxPs
f1SFzkS+0AVDLtwN1r6Kb+Dj/TaSUcHzgJndUcPlDrSHYqPzo45RR67yJtiGpbhb
dC4UOONomnL+9Oupo6+VvN2T4FsAa5pkX+vFUhNp8aQKJ3iDgHxE9joDDdEnMeg6
yZHiWShpSgpobhqiMix3Ra7LyKuD0W+6LNmhxN+MihC3RhyRlAaw/kb8kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7y1KzXKbcK1LB69ptfz7NFiCUPMB8GA1UdIwQY
MBaAFNbupfs1tRL5EAlNxiRZwWebWD4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXU2bC16VzFFdmtRQ1UzR0pGbkJaNXRZUGo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMjM1NjItMzRkZi00OWQ1LTliZjQt
NThmYzk0ZDBkNDE0LzEvMXU2bC16VzFFdmtRQ1UzR0pGbkJaNXRZUGo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hMjM1NjItMzRkZi00OWQ1LTliZjQtNThmYzk0ZDBkNDE0
LzEvMXU2bC16VzFFdmtRQ1UzR0pGbkJaNXRZUGo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvn9FnPkn
wPyf9IlDmeBMeUaOauedGvVTVOMNOOKNISawTqvE77fs+P+m5A143QxqUhqKyYnL
XR16/RWdo8SfGXJrrbOhmS5xrLgqWl1UJVMxHelZWD1uUMXaWA2oXGSM/F0/FL6r
bXD8lIkxAhYUZGGMRFdGkV2Qvea9L/Cv1jeQUoZGrP/ZhoidMInxBavLAk3foTcY
DO3f0GPGLK7E8bldnBqgeYnxdmyvogsEwCPv4mbSDPstuPk+TPQ04kHD4jJ5lfQ2
KHGeTAw6EhJbnpKX9Oxx5AGDczRmOIi8iYjQRUUTeEN3+PsJEu7n0XeUfOnVWkFp
ykg13YxHlc4M4w==
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:47:38 2026 by rpki-client