Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
File: _U0cuqkAydq9Kh92gZih5VvPtQ8.mft (raw, json)
Hash identifier: sYLFfaJwMDOVWPqnJjDuE9xEZG6x+02aevCSB/d2PDc=
Subject key identifier: C5:20:C3:97:27:2D:AE:45:65:35:64:B3:8B:80:0F:0A:0B:9A:30:C8
Authority key identifier: FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F
Certificate issuer: /CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
Certificate serial: 019D27A89DB57E5E24D9A238F85C20736CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
Manifest number: 0864
Signing time: Thu 26 Mar 2026 01:00:54 +0000
Manifest this update: Thu 26 Mar 2026 01:00:54 +0000
Manifest next update: Fri 27 Mar 2026 01:00:54 +0000
Files and hashes: 1: _U0cuqkAydq9Kh92gZih5VvPtQ8.crl (hash: DF04z5k7FTC8JUzPCYK+fS+rXFvkBXqQN2iChQ6nCqE=)
2: w6o_mFdaC1iE9HreLWZZW7CeetE.roa (hash: ULCFerhBb+X2OLMdFVdyDjPTSfhj+p+sqvjNiKXZOJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:9d:b5:7e:5e:24:d9:a2:38:f8:5c:20:73:6c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
Validity
Not Before: Mar 26 01:00:54 2026 GMT
Not After : Mar 27 01:00:54 2026 GMT
Subject: CN=c520c397272dae45653564b38b800f0a0b9a30c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c1:e6:a9:a4:0f:53:54:f6:95:10:38:73:f1:
30:7d:c4:1e:e9:8b:21:e9:75:e8:c6:57:f4:e2:28:
30:b4:a6:a0:53:96:7a:e0:aa:a8:c8:1d:4b:cc:c6:
f7:e1:7a:79:18:69:44:bd:e5:d9:4c:1b:f0:b5:1a:
8b:e8:19:c8:38:b3:af:1b:e7:13:90:3f:44:23:5b:
a9:fa:07:d3:7d:56:aa:9a:c1:2a:7d:24:92:9b:fa:
53:de:f1:9e:38:f5:22:7e:73:e4:5d:20:d1:9b:23:
a1:e7:53:0c:6f:02:45:e6:95:79:ab:5e:d7:5c:f8:
f4:0d:1f:04:29:47:52:2c:71:fe:17:ef:60:cc:ed:
4b:34:ec:01:c1:31:8e:53:55:0c:92:30:63:8f:4d:
14:73:33:a3:49:6a:45:97:b4:a5:45:52:6b:9e:a1:
82:4a:4c:b3:bf:2e:e9:54:53:15:19:1a:7d:6d:bd:
71:f6:01:38:97:f5:52:77:7a:90:3d:af:19:f0:dc:
2d:25:08:da:43:4c:a3:8d:8c:5b:63:45:14:6b:90:
b6:ba:ad:60:52:ef:79:37:65:02:ee:b8:27:2b:2d:
45:12:c7:03:e1:f5:53:1a:79:16:33:56:db:f2:d0:
2d:42:09:e4:48:d4:8b:a9:ef:86:21:d1:db:93:7c:
13:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:20:C3:97:27:2D:AE:45:65:35:64:B3:8B:80:0F:0A:0B:9A:30:C8
X509v3 Authority Key Identifier:
keyid:FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:80:f6:d9:bb:da:d7:d4:79:0e:43:c3:5e:73:77:c9:0c:b4:
19:01:fc:a7:4d:17:f4:50:25:bc:d0:53:21:90:c7:03:09:d2:
3b:9e:9b:47:fc:d8:67:13:a7:be:55:dd:9e:41:32:94:4b:59:
80:90:99:09:fb:d4:cf:33:0f:b6:05:30:e6:21:00:f6:ba:0f:
e1:1b:28:b8:b5:ee:de:0e:77:75:84:19:77:28:46:25:82:ba:
02:f2:23:b0:45:19:b4:ab:ca:b1:a3:c8:fa:33:48:9b:d3:d7:
8f:19:d4:36:8c:3c:2f:3a:9e:9f:6a:bf:40:d6:d9:ef:2e:a3:
d6:d2:f6:3c:d8:c8:e8:ea:ac:46:74:da:dd:99:75:b5:dc:5f:
ad:f5:c9:db:0c:74:10:18:22:8a:14:a7:30:81:01:ce:7d:3f:
c2:f1:47:06:c1:21:fc:30:84:aa:ae:25:85:ef:89:61:bf:1c:
b0:55:0a:d3:ae:05:fb:3b:4e:6d:90:a5:81:f5:aa:85:76:be:
4a:3f:1c:2a:cd:87:ce:d4:dc:aa:d5:be:a6:61:f8:c3:bc:a5:
92:7a:bf:c7:20:fa:34:e7:a3:60:13:99:b7:f5:de:1c:cd:8c:
42:34:ec:96:9a:a5:68:44:e0:52:7d:ec:b8:bf:8d:e2:73:22:
bc:48:d2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:49:13 2026 by rpki-client