Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: xDaR1Rj06swoJ6KQRE0OkMObP2k2+6Y69pDJX0niy3s=
Subject key identifier: 95:26:CC:C8:06:7A:6D:25:46:40:7B:3D:CC:22:81:FF:09:07:D2:AA
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 019E1E6C3CF760667F938770D5D634C5B6E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 23:01:10 +0000
Manifest this update: Tue 12 May 2026 23:01:10 +0000
Manifest next update: Wed 13 May 2026 23:01:10 +0000
Files and hashes: 1: HiUqKu1CLOYfZbl3wCDGIXPaQ18.roa (hash: jutim/UTVgLR2CiOBLYd1qnaODFkPt/SBYjCIEf8wS8=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: qKSXtyZO2xoo2HPrLi8cIP462ZMqb6rwuakFKnN2ZuY=)
3: aQCGqbkR7pZwAY5aB2nDuU5di8E.roa (hash: 6xFhZTjV0UNGd+XOChz+C1HRl/SOHjV9aweW1aP17pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:3c:f7:60:66:7f:93:87:70:d5:d6:34:c5:b6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: May 12 23:01:10 2026 GMT
Not After : May 13 23:01:10 2026 GMT
Subject: CN=9526ccc8067a6d2546407b3dcc2281ff0907d2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:36:14:b8:e7:b3:15:48:12:c2:a2:fb:26:
cc:1b:41:6c:72:7a:5d:20:13:f4:38:bf:64:ce:18:
dc:9a:36:23:eb:62:e1:a3:7a:85:8b:ef:8d:96:a1:
6b:dc:e6:db:cc:87:15:2a:5a:e3:92:af:b3:84:43:
b3:ce:24:30:f7:9f:9f:a9:20:66:1a:11:c8:62:30:
3d:34:4e:6e:9b:69:03:23:37:2f:ca:11:55:83:20:
c8:cf:ec:0a:1b:ac:70:ff:bc:7e:9c:39:71:ea:99:
44:d2:5d:d2:91:df:20:32:7a:43:2f:dd:28:2b:a8:
7e:65:3c:f7:59:a9:8b:bb:63:e5:81:b1:25:95:ca:
a7:7e:2c:b3:57:24:5b:50:6f:16:00:f4:09:56:31:
28:08:cf:c1:14:59:a4:e4:f2:f3:d4:ec:17:04:af:
81:db:e3:3d:49:64:3c:05:85:9c:8e:fb:2c:1b:5c:
2b:38:b1:0c:02:5f:81:64:e1:9e:54:2a:d1:16:c2:
ad:04:47:1e:7e:b7:06:f7:a0:20:1c:0f:4f:85:4d:
44:80:31:d0:c0:a7:71:c3:70:3e:b7:3f:f9:65:9d:
5f:27:eb:18:fd:8a:66:f1:78:f2:f0:96:e8:6f:22:
15:65:51:76:f5:48:fd:4d:d1:d0:c1:d1:35:73:29:
59:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:26:CC:C8:06:7A:6D:25:46:40:7B:3D:CC:22:81:FF:09:07:D2:AA
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:84:57:ad:15:91:4e:86:7a:00:35:a7:e3:60:37:03:a6:f1:
30:a8:a7:89:c4:08:c6:73:7a:9f:96:f8:82:57:c8:bc:d6:a1:
b0:8f:5e:2e:c2:09:88:a6:1e:b6:7c:2b:8b:c6:85:56:ea:0f:
a5:b8:d6:82:4c:d8:24:f4:69:4d:e3:71:bd:b9:1f:a3:4d:6a:
08:26:83:61:1f:de:c4:5f:75:0b:62:5b:8f:8e:35:5d:e9:6f:
28:1c:00:12:6d:32:fa:67:02:f9:91:cb:99:d3:c5:e5:d5:5b:
78:a5:20:c1:e1:2d:d8:94:c8:42:67:9b:af:87:2c:96:b0:98:
56:f1:1b:cb:85:2c:a2:c3:c1:99:54:9f:e4:98:32:31:43:81:
6a:87:78:06:f1:c3:27:69:4d:a1:cd:ce:a9:27:25:00:64:6b:
31:03:1d:26:0d:b7:56:55:2f:71:d1:9a:1f:ea:f9:c2:6c:f6:
c8:78:b7:0a:17:fe:f2:c4:14:b1:60:90:be:61:6b:91:8d:58:
61:ad:01:6d:02:2c:8a:aa:46:4e:5f:97:64:a0:37:b6:61:0f:
c7:41:08:92:44:cc:cc:c9:e8:6a:12:e0:47:6b:0a:35:ce:28:
8b:02:c8:ea:ae:ad:c9:1d:fb:cd:e3:63:1c:68:aa:89:99:9d:
1c:a0:26:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:24:57 2026 by rpki-client