Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
File: U43RixaS2KPncS0-a5KLCaoK5mw.mft (raw, json)
Hash identifier: v9qfKRKxnZSLwbxZ1wVTRKNe/AwVu1p/gVVLLmp0fuo=
Subject key identifier: 5A:D1:DE:6D:59:CA:75:0A:BB:C2:D7:9F:E1:4C:81:9D:86:CF:6D:99
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 019D273B1257196C035E15A7B9D7FDDFB573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
Manifest number: 0367
Signing time: Wed 25 Mar 2026 23:01:15 +0000
Manifest this update: Wed 25 Mar 2026 23:01:15 +0000
Manifest next update: Thu 26 Mar 2026 23:01:15 +0000
Files and hashes: 1: 2ZPAoDVMpQcEFj6ZwF6t3pvmnvE.roa (hash: 1rHNnFMhQDvJllSq2QAXfLYw1Y4xr+/L6lecMSt4yzM=)
2: 49wISrZvaWfJmuYUokxBAxCFFnA.roa (hash: fVyYSxQVcSLUIxvGvzkQ4MbdrWMkDcckbPhROtPlP1s=)
3: U43RixaS2KPncS0-a5KLCaoK5mw.crl (hash: CyMsJyrGki0GAshrCQbO7d6+wihzVl+pIlYfBkF/K1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:12:57:19:6c:03:5e:15:a7:b9:d7:fd:df:b5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: Mar 25 23:01:15 2026 GMT
Not After : Mar 26 23:01:15 2026 GMT
Subject: CN=5ad1de6d59ca750abbc2d79fe14c819d86cf6d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ea:5a:d9:e5:1c:b3:19:d1:f3:09:12:39:fb:
2f:dd:0a:ff:d0:ce:02:18:cf:63:b9:c9:3b:60:6f:
6b:f1:19:65:88:cf:8f:12:37:b9:15:8f:61:0b:a0:
82:a9:a4:39:9a:c0:f6:f1:45:5b:49:4a:d7:78:af:
81:95:a0:b4:94:46:89:b5:a2:be:a7:d5:11:05:7a:
10:51:f5:80:b7:4e:ed:8b:f8:3f:97:0f:c1:46:e9:
6e:b9:b4:6f:fe:99:e0:39:90:00:1c:41:dc:2f:7f:
1b:7c:50:2e:1a:8f:2a:95:ba:93:c6:b1:d2:59:f9:
a1:69:ce:cc:7c:9f:33:d5:55:b4:28:25:36:b9:8e:
4c:9b:af:e6:12:ad:0d:17:eb:b0:5f:57:7b:d7:e4:
e4:e9:39:38:6c:09:c7:da:dc:d2:15:63:fc:69:84:
44:11:b8:8f:5a:48:dc:42:a0:33:7e:f9:f7:f0:91:
a2:88:b0:3e:18:72:83:0e:79:37:db:57:b0:b1:3d:
fa:a9:45:26:b5:c8:7a:91:13:1b:8e:a7:83:ab:cb:
61:c3:9e:af:d6:7a:63:e2:5f:ba:9c:47:9d:2e:10:
d0:6e:62:62:37:1e:e2:4f:0b:23:a3:1f:87:bb:7c:
49:da:57:e2:99:e0:fa:90:3c:06:31:35:43:a5:33:
df:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D1:DE:6D:59:CA:75:0A:BB:C2:D7:9F:E1:4C:81:9D:86:CF:6D:99
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:73:46:ed:72:f6:1c:95:e0:a9:83:54:62:09:3e:b0:7e:64:
0c:4b:d1:ea:04:4a:24:0b:e1:ed:22:ea:64:42:64:8e:20:69:
65:c4:ef:fa:9b:87:08:65:79:f0:19:0a:31:3d:12:00:85:cf:
b5:d8:06:9d:62:c4:c2:53:f6:1d:02:3b:cc:10:29:ea:95:65:
f5:a3:26:4c:4a:8c:ee:06:d9:96:29:55:85:48:a7:95:20:89:
34:d9:d7:5a:09:be:e5:c9:e3:85:43:52:00:0c:5b:eb:10:ec:
6d:9d:6d:1a:2c:fe:f5:08:9c:b1:9c:5f:0a:5f:85:46:97:13:
b6:82:af:c3:ce:d1:8e:0c:20:ba:fd:07:38:8f:e6:70:5a:18:
2a:90:03:88:a1:4d:ec:50:61:d2:85:22:3b:7e:68:07:e4:e9:
72:23:40:5e:cc:e3:ce:b2:81:ce:ad:65:c1:a5:5f:d4:76:44:
17:a8:eb:7e:c8:74:da:f9:e8:00:5e:53:2e:f7:17:5a:c4:64:
9d:63:7d:ab:16:f4:57:bd:1e:f1:7c:c8:cb:b9:c1:f6:06:b3:
66:08:29:18:ab:46:d4:ea:6c:98:04:38:2a:55:20:84:93:0a:
f1:70:25:d3:73:dd:e4:c5:76:2b:cb:53:40:70:ea:41:a6:72:
5a:c2:3c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:11 2026 by rpki-client