Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
File: U0Yz8Z9h1lRuur996ft6qYftW_M.mft (raw, json)
Hash identifier: cLrcYlHOMy5U+H1r/0iBy4i5TykR3A9LlTt/8cQSFCE=
Subject key identifier: 9A:0F:41:E7:9B:BD:04:D4:CE:C2:E0:96:6B:EC:DD:F6:2A:9B:E2:6B
Authority key identifier: 53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
Certificate issuer: /CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Certificate serial: 019D2A0505AE5B66AEC96B7E221E455380F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 12:01:04 +0000
Manifest this update: Thu 26 Mar 2026 12:01:04 +0000
Manifest next update: Fri 27 Mar 2026 12:01:04 +0000
Files and hashes: 1: TerM9KfzJsRRkdvjMKo5OW1_vg4.roa (hash: 4hf+yhqdXpUZCf15GpEdNxp1wNaJ6uMaWZCGmy9se7g=)
2: U0Yz8Z9h1lRuur996ft6qYftW_M.crl (hash: PtQQaMfbRjCecDfINdYBV0Tl/B9Lfjx6rBjRPJJb0GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:05:ae:5b:66:ae:c9:6b:7e:22:1e:45:53:80:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Validity
Not Before: Mar 26 12:01:04 2026 GMT
Not After : Mar 27 12:01:04 2026 GMT
Subject: CN=9a0f41e79bbd04d4cec2e0966becddf62a9be26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:95:fd:c2:94:ad:ef:ab:b0:36:93:80:f2:17:
09:36:a5:cc:c6:01:ca:63:af:9d:c7:50:88:50:d5:
f4:1b:5d:ad:e1:3d:9e:1b:5e:06:6f:0f:d4:87:3c:
10:07:0d:49:fe:3b:27:22:50:96:e6:02:3f:08:3f:
c7:5b:f1:78:9c:ee:52:3e:17:e9:34:6f:4d:13:3d:
d4:39:79:6c:c9:ea:41:f6:8b:19:e1:7c:e4:46:fb:
e4:43:69:6d:da:a8:d7:7a:17:92:e1:cb:77:ef:f0:
77:90:3b:61:4f:d7:8e:32:18:d4:87:d6:61:0e:86:
da:53:10:00:a1:9c:91:83:2f:06:41:53:66:a4:0d:
54:7b:3f:d9:6b:b2:a9:12:05:5a:65:75:3e:4f:0c:
11:93:62:b3:db:da:13:82:b5:8b:5b:74:f8:e6:51:
76:7e:20:73:1f:03:6c:06:db:a8:87:1a:64:1b:bd:
ce:3f:fb:a4:ee:04:f3:ee:91:cb:ae:38:2f:35:44:
6c:83:46:80:15:b3:37:82:2b:8a:c2:77:77:83:b5:
5b:20:e5:ea:6d:cf:45:ea:82:21:53:3f:bc:69:bb:
4e:a2:e6:22:33:67:7f:07:27:ce:e3:b5:ab:4f:0b:
ba:3c:17:12:d5:a1:3c:f0:4b:f8:b7:bc:8b:e2:46:
37:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0F:41:E7:9B:BD:04:D4:CE:C2:E0:96:6B:EC:DD:F6:2A:9B:E2:6B
X509v3 Authority Key Identifier:
keyid:53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:82:48:6a:48:45:c3:fc:f2:98:e4:65:b4:ae:06:79:eb:94:
9b:ce:93:f7:d8:68:84:b5:e7:25:28:8b:d5:b3:92:47:76:4d:
1f:d4:41:56:4e:c8:02:24:ad:12:38:a3:55:8d:5c:ea:ba:d5:
f3:bd:38:18:2a:32:aa:6d:12:ad:08:1b:01:f5:04:31:47:06:
11:4c:fe:20:cb:97:98:c1:04:cf:5c:1a:dc:8e:ab:fe:42:32:
69:0f:00:0b:5c:a7:af:11:b3:11:51:d8:4c:f3:d2:81:8d:23:
78:91:cc:f9:6f:1a:34:bd:b9:a8:3d:cf:d0:25:8e:d4:37:98:
f2:45:84:6d:16:b8:ae:e0:fb:97:a4:78:65:29:c8:4f:0d:fa:
bc:5d:27:06:bc:96:64:7f:39:92:af:59:67:be:cd:0f:24:be:
f3:8f:15:13:7b:99:7e:19:da:c8:1f:8d:7b:98:22:a0:ca:b7:
6f:5d:5f:f6:36:f6:ee:26:c1:68:07:c2:74:06:1e:66:c4:41:
8b:c6:3a:d9:cd:c1:a4:b3:14:4c:d3:15:88:62:94:7a:f9:25:
c7:be:2a:42:ee:b2:70:49:25:10:fd:30:20:08:f3:e8:f4:bb:
af:33:22:14:00:1f:a4:7e:1f:d7:33:e7:ba:6a:f1:0a:31:17:
3d:38:7d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:37:21 2026 by rpki-client