Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: 2ewOS+lbGdgDgtFS5lFryXzGt3z6G1P37MMi8gX2XiI=
Subject key identifier: 99:85:91:D4:AE:F7:E5:36:FE:F6:81:51:9B:B0:89:16:96:BE:D7:FF
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 019D2929B6B5A8A891AA98D0B983FF5FD345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 08:01:32 +0000
Manifest this update: Thu 26 Mar 2026 08:01:32 +0000
Manifest next update: Fri 27 Mar 2026 08:01:32 +0000
Files and hashes: 1: HiUqKu1CLOYfZbl3wCDGIXPaQ18.roa (hash: jutim/UTVgLR2CiOBLYd1qnaODFkPt/SBYjCIEf8wS8=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: xy8ohP3BMj+ek2YuVyUvmBvEswJQqN8uVdvc8nHVEhg=)
3: aQCGqbkR7pZwAY5aB2nDuU5di8E.roa (hash: 6xFhZTjV0UNGd+XOChz+C1HRl/SOHjV9aweW1aP17pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:b6:b5:a8:a8:91:aa:98:d0:b9:83:ff:5f:d3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: Mar 26 08:01:32 2026 GMT
Not After : Mar 27 08:01:32 2026 GMT
Subject: CN=998591d4aef7e536fef681519bb0891696bed7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:35:5b:dc:b6:35:b9:17:d4:15:9b:13:c3:
34:dd:f7:66:a1:87:78:c2:fd:54:bf:85:bf:ad:d5:
4a:d9:3d:89:4e:e8:5e:b3:e8:60:e5:49:e8:2d:d7:
fe:21:8a:00:f5:e7:23:f8:fd:a3:1c:61:2e:df:de:
50:5b:8f:4d:23:fc:b9:81:a5:24:3f:0a:87:d5:7a:
d8:b6:62:f5:1d:a4:dd:2f:32:de:58:98:40:0b:e9:
4f:f8:b2:3e:20:c6:b9:41:4f:55:48:0d:f6:21:b5:
d4:ca:00:83:ca:d9:33:3d:35:9c:f3:50:9f:e4:6d:
3f:79:4b:85:7b:28:4b:ff:c2:ef:27:5e:c9:a7:02:
16:0c:71:3d:45:af:23:6e:72:aa:f6:19:93:0d:9a:
09:ec:8c:27:8d:9c:28:f5:68:47:55:ce:cc:9e:5b:
05:58:82:bb:0f:83:47:21:5f:9a:38:72:23:9b:85:
8c:4f:30:0f:00:70:42:27:81:51:2a:4a:e3:ca:8a:
55:35:94:21:9a:b5:1d:2e:74:db:64:d2:c8:3c:fd:
f8:ff:1a:86:20:69:62:c6:70:72:99:f3:4e:61:db:
71:67:0b:1b:32:4a:a4:b9:01:45:a1:67:8f:a9:17:
7d:93:2b:55:3e:0a:6d:31:1a:bf:96:5c:6d:4f:f6:
cc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:85:91:D4:AE:F7:E5:36:FE:F6:81:51:9B:B0:89:16:96:BE:D7:FF
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2a:0d:b5:cd:23:8a:f1:7a:6a:4d:06:f0:8a:18:6e:72:31:
5e:e8:9e:0c:66:8c:d0:0d:06:2b:4a:2b:dd:10:7a:54:24:bb:
69:ac:56:53:89:20:6e:4f:5b:85:dc:02:0b:36:ca:7a:ad:53:
69:36:cd:eb:5f:1d:7a:8c:e6:3d:95:1f:1b:9e:6f:07:7a:98:
0c:48:d2:c1:8b:a0:64:9d:62:84:37:97:13:cc:de:39:37:02:
c0:ad:9b:20:86:c2:08:d1:55:c0:67:52:3d:13:40:39:dc:15:
2a:b7:da:77:ab:57:52:de:da:cf:af:6e:30:e1:d9:cf:36:9a:
86:cc:b9:ac:99:92:6f:2c:53:f8:97:9e:dd:b4:82:a4:9a:95:
bd:01:e4:88:94:d4:77:11:8b:18:09:f4:46:20:d6:aa:c5:d1:
7e:51:9a:e5:82:4d:55:5f:65:68:1d:df:d5:57:57:a0:19:59:
84:2f:d2:a8:c9:58:a6:90:5a:da:27:3d:81:1e:a5:1c:ed:14:
98:1a:53:ba:59:ae:e1:2f:ca:25:01:71:30:74:56:63:37:bb:
2b:93:b7:73:e4:78:11:6e:4d:3c:ea:d4:7a:75:e8:79:c0:60:
36:1e:88:ec:df:9a:22:49:61:93:03:80:6c:ca:06:1c:00:9d:
1e:92:fe:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:31 2026 by rpki-client