Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
File: U6EliQpK8JJFWrx7tav-SM2FLAY.mft (raw, json)
Hash identifier: CJPhDVxSn6HAWjVSTZH6G45L8bNOXX78iijo0+Z6ElE=
Subject key identifier: 96:08:E7:02:95:CA:5C:15:58:46:84:3E:C1:6A:D6:32:41:EE:67:20
Authority key identifier: 53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
Certificate issuer: /CN=53a125890a4af092455abc7bb5abfe48cd852c06
Certificate serial: 019D26CD2A1D39D60DB82588E87FF421E986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
Manifest number: 08C3
Signing time: Wed 25 Mar 2026 21:01:12 +0000
Manifest this update: Wed 25 Mar 2026 21:01:12 +0000
Manifest next update: Thu 26 Mar 2026 21:01:12 +0000
Files and hashes: 1: 8otHkib5_3i41JyAw70LeXUh0QU.roa (hash: 0qAK41CxT/RWAwJIryforayLl8dembnwnfhhCABuNu8=)
2: U6EliQpK8JJFWrx7tav-SM2FLAY.crl (hash: F2lvco51/DtVYsxtzq4/SxSNW2Kd6h5+OFe+aWLyIRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:2a:1d:39:d6:0d:b8:25:88:e8:7f:f4:21:e9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a125890a4af092455abc7bb5abfe48cd852c06
Validity
Not Before: Mar 25 21:01:12 2026 GMT
Not After : Mar 26 21:01:12 2026 GMT
Subject: CN=9608e70295ca5c155846843ec16ad63241ee6720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3d:91:0f:00:62:59:d0:76:68:ec:87:42:4d:
a6:59:df:25:5c:ea:c1:e1:f4:b5:9d:c0:24:80:59:
e5:2b:98:d4:59:00:09:bc:35:c8:5f:ba:ab:69:7a:
ee:c4:19:88:87:9a:06:46:11:df:d7:63:1f:84:2a:
59:e1:56:4a:cd:25:a3:4b:66:eb:9f:30:bb:65:53:
01:cd:f0:b2:14:07:62:e5:61:ff:33:a7:ca:87:d3:
15:cc:61:1a:4f:3a:cb:a5:41:51:57:ff:8b:9b:cf:
85:33:c7:7a:60:c6:88:f4:5d:f4:bc:97:04:3d:c0:
53:de:6a:b1:cc:bf:64:0c:da:92:1f:76:b2:92:b6:
67:f2:52:7e:57:27:57:d7:b4:fb:0d:fd:a3:1d:aa:
1b:b7:1f:4c:6f:ab:70:89:ed:1f:91:1d:f2:98:cb:
41:a9:f9:75:8d:d2:b9:09:7d:8d:f1:a6:c5:86:91:
88:a6:cb:5f:7b:a5:57:04:96:2f:1f:c5:62:e0:62:
29:2e:fd:17:09:6a:0e:3d:ee:09:49:b1:a5:82:84:
56:7c:bd:f0:d7:b5:58:f0:54:38:e2:59:3d:b4:0d:
0d:0d:66:e1:7d:19:38:fb:4d:b0:fc:3c:3b:91:c5:
3b:09:99:15:27:fd:d1:0f:8e:ad:e6:af:b8:f8:ed:
3b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:08:E7:02:95:CA:5C:15:58:46:84:3E:C1:6A:D6:32:41:EE:67:20
X509v3 Authority Key Identifier:
keyid:53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:67:61:26:5d:f2:33:ee:f7:91:31:fd:e3:5c:a7:20:c0:4f:
d1:2b:c2:43:f1:31:3b:ef:fe:80:a7:57:e1:e9:d1:49:c4:f0:
2e:44:55:98:85:53:1d:1f:1a:f4:ec:4f:33:90:99:c8:0e:d8:
80:a6:db:2e:7f:aa:8c:38:37:be:41:46:fa:87:ea:5d:02:97:
d2:50:03:f1:30:50:cf:0f:fb:04:6c:18:b6:fe:0c:f6:18:e3:
de:a2:e4:d9:6d:39:0d:b4:55:cd:4f:4e:07:ad:e9:28:9e:de:
62:d8:c6:08:53:87:e3:34:5e:6f:f4:60:e3:62:78:4a:dc:e1:
54:49:14:cc:e4:ce:f4:36:ed:1a:7c:84:fb:b8:03:9d:92:9e:
0c:f8:c1:9c:bd:c6:4d:5c:c6:00:98:4f:4c:27:d0:e9:a0:77:
c9:1c:72:96:45:92:ea:af:87:00:f5:ac:dc:53:cc:9a:cd:c1:
c8:04:52:5a:4f:29:de:51:c9:11:3a:74:1b:bc:47:cf:83:c6:
f9:d8:c1:41:ab:f6:8d:7c:ad:cf:42:ff:ba:23:c4:dd:e9:45:
eb:97:e6:dd:ea:1c:c7:d0:dd:ea:2b:cc:12:a9:7c:8d:6d:b9:
e6:20:9d:ca:b7:d4:29:a7:47:b0:3e:02:cf:80:f2:c8:d8:6a:
7f:60:dd:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzSodOdYNuCWI6H/0IemGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYTEyNTg5MGE0YWYwOTI0NTVhYmM3YmI1YWJmZTQ4Y2Q4
NTJjMDYwHhcNMjYwMzI1MjEwMTEyWhcNMjYwMzI2MjEwMTEyWjAzMTEwLwYDVQQD
Eyg5NjA4ZTcwMjk1Y2E1YzE1NTg0Njg0M2VjMTZhZDYzMjQxZWU2NzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2T2RDwBiWdB2aOyHQk2mWd8lXOrB
4fS1ncAkgFnlK5jUWQAJvDXIX7qraXruxBmIh5oGRhHf12MfhCpZ4VZKzSWjS2br
nzC7ZVMBzfCyFAdi5WH/M6fKh9MVzGEaTzrLpUFRV/+Lm8+FM8d6YMaI9F30vJcE
PcBT3mqxzL9kDNqSH3aykrZn8lJ+VydX17T7Df2jHaobtx9Mb6twie0fkR3ymMtB
qfl1jdK5CX2N8abFhpGIpstfe6VXBJYvH8Vi4GIpLv0XCWoOPe4JSbGlgoRWfL3w
17VY8FQ44lk9tA0NDWbhfRk4+02w/Dw7kcU7CZkVJ/3RD46t5q+4+O07QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYI5wKVylwVWEaEPsFq1jJB7mcgMB8GA1UdIwQY
MBaAFFOhJYkKSvCSRVq8e7Wr/kjNhSwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTZFbGlRcEs4SkpGV3J4N3Rhdi1TTTJGTEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82MmZmNzEtYzRmMi00OTI5LTg4OTkt
YzM4MzMwY2JkOTY1LzEvVTZFbGlRcEs4SkpGV3J4N3Rhdi1TTTJGTEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi82MmZmNzEtYzRmMi00OTI5LTg4OTktYzM4MzMwY2JkOTY1
LzEvVTZFbGlRcEs4SkpGV3J4N3Rhdi1TTTJGTEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADGdhJl3y
M+73kTH941ynIMBP0SvCQ/ExO+/+gKdX4enRScTwLkRVmIVTHR8a9OxPM5CZyA7Y
gKbbLn+qjDg3vkFG+ofqXQKX0lAD8TBQzw/7BGwYtv4M9hjj3qLk2W05DbRVzU9O
B63pKJ7eYtjGCFOH4zReb/Rg42J4StzhVEkUzOTO9DbtGnyE+7gDnZKeDPjBnL3G
TVzGAJhPTCfQ6aB3yRxylkWS6q+HAPWs3FPMms3ByARSWk8p3lHJETp0G7xHz4PG
+djBQav2jXytz0L/uiPE3elF65fm3eocx9Dd6ivMEql8jW255iCdyrfUKadHsD4C
z4DyyNhqf2DdwQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:54 2026 by rpki-client