Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
File: U43RixaS2KPncS0-a5KLCaoK5mw.mft (raw, json)
Hash identifier: wrSHPngRcR3aQ8c2bdzWsjmAJZV3aIpoI/8/jXkiXhI=
Subject key identifier: 06:68:72:A8:95:47:A3:6B:81:55:AA:6C:E4:D2:A4:10:CB:C2:93:75
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 019E1F11A9B7DE1600A0E7AE1453807FB561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
Manifest number: 03E8
Signing time: Wed 13 May 2026 02:01:51 +0000
Manifest this update: Wed 13 May 2026 02:01:51 +0000
Manifest next update: Thu 14 May 2026 02:01:51 +0000
Files and hashes: 1: 49wISrZvaWfJmuYUokxBAxCFFnA.roa (hash: fVyYSxQVcSLUIxvGvzkQ4MbdrWMkDcckbPhROtPlP1s=)
2: RSQfMEEZt4oequ_NHljzft1mAes.roa (hash: L34nif9bVdt4hPPgw1teVUpRnSBpGBSyzLRTZAC7pv8=)
3: U43RixaS2KPncS0-a5KLCaoK5mw.crl (hash: RLxsAYo5MLhPjYg5YqkbJWlyZmCDEHM5ItV8wAPVDS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:a9:b7:de:16:00:a0:e7:ae:14:53:80:7f:b5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: May 13 02:01:51 2026 GMT
Not After : May 14 02:01:51 2026 GMT
Subject: CN=066872a89547a36b8155aa6ce4d2a410cbc29375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:44:02:a5:c1:55:1e:18:ff:9c:4f:57:91:
5a:19:b9:cc:7b:8d:01:28:32:17:1e:5a:bd:05:36:
88:6f:3d:37:72:95:fa:b4:21:b8:83:88:ca:9f:eb:
d6:dc:bb:ac:d7:3d:71:3c:ee:2a:96:72:f7:ed:53:
e9:4d:27:31:67:5c:1a:6f:9b:99:e6:00:a5:95:65:
ff:87:a6:b6:7e:1a:23:c1:0d:fb:87:a8:7f:df:8e:
e0:62:92:d2:0f:48:5a:0a:e2:ef:0b:1a:65:b7:b9:
aa:28:87:81:2a:8e:75:eb:1a:63:a9:5f:8a:58:41:
f0:3e:95:67:63:41:7a:c2:69:d2:f7:8d:02:7f:2e:
a9:7c:b5:4f:d1:2b:00:83:e1:2b:58:4d:9e:71:ff:
88:67:f2:bb:d9:49:f6:85:79:5f:30:1e:75:01:55:
b3:25:4c:e5:b7:41:73:b3:f4:da:06:4c:c5:9d:03:
8f:19:fe:00:3b:c6:99:a2:51:c7:4c:00:06:d7:f6:
5c:e9:a1:37:4f:1c:0a:c4:3b:bb:c4:7a:83:c2:e8:
3a:e3:ff:91:b1:22:bc:77:19:40:c0:4d:03:4d:d6:
83:3c:e0:c5:0c:e3:94:16:13:78:ba:9a:bc:3d:b7:
6d:d8:00:f5:38:e5:76:7d:66:a9:4e:3b:34:b0:7c:
e6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:68:72:A8:95:47:A3:6B:81:55:AA:6C:E4:D2:A4:10:CB:C2:93:75
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:75:10:5e:f6:7a:e8:dd:bb:57:f1:9a:40:9e:e9:f1:f4:85:
73:91:96:ac:e6:11:bf:b1:30:d1:e6:ff:70:7c:b6:b5:56:28:
98:a8:65:de:6a:1e:2f:22:7b:4b:36:fb:1d:15:7f:39:d3:9f:
04:b0:af:58:ad:96:22:8b:fc:fb:49:d8:1c:a5:aa:78:fc:6e:
d1:34:65:68:39:14:17:51:15:06:a3:3b:16:cc:05:1d:aa:ed:
88:73:17:81:2a:4a:77:6a:da:98:0e:a2:02:a6:85:15:4c:5a:
94:e5:d9:85:4b:90:01:62:e0:7b:5e:2a:d4:2c:8d:60:61:f5:
18:67:c9:cc:21:32:e0:b3:e1:ed:55:c8:bd:0f:dc:b0:e6:b9:
4a:34:2e:a9:a0:48:8c:06:dd:90:e7:73:c9:ed:a3:f3:57:b8:
a1:0d:d8:c8:be:2d:42:95:00:6b:a9:f7:e6:d8:b6:a2:ca:f6:
9c:17:01:22:43:e4:6a:50:93:da:47:51:c2:ac:1c:69:ec:8d:
20:30:37:d7:6a:06:cf:00:11:dc:87:a4:2d:1f:b8:8e:b8:2a:
ab:5a:fc:98:9e:18:80:55:f5:57:65:9a:d1:dc:b6:dc:2c:bb:
da:d3:3d:a9:b2:99:2a:8c:4f:b6:84:9a:79:35:a7:4b:ce:16:
d5:fa:8a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:29:45 2026 by rpki-client