Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
File: U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft (raw, json)
Hash identifier: GBJqyLFsO43FTXWRxNDYPWsj/CvyoYrVtxUaTUO7nkg=
Subject key identifier: 47:17:CD:4C:3B:73:4C:CA:8C:D4:8F:5B:E3:75:3D:BA:65:1F:E8:69
Authority key identifier: 53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
Certificate issuer: /CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Certificate serial: 019D27A8A92AF728EB46F24FE0D8F13A3B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
Manifest number: 03DF
Signing time: Thu 26 Mar 2026 01:00:57 +0000
Manifest this update: Thu 26 Mar 2026 01:00:57 +0000
Manifest next update: Fri 27 Mar 2026 01:00:57 +0000
Files and hashes: 1: U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl (hash: p1lV+9iw0JVSjdruil9n2plVtCHpyGCfzuk6m55PkKU=)
2: qAWpsleSdTKU2QK0ge-DYDJtKTg.roa (hash: hBYa6IMYEuL9W6YmuZd1vKmz/EkBj75T5fHCqH+FPYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a9:2a:f7:28:eb:46:f2:4f:e0:d8:f1:3a:3b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Validity
Not Before: Mar 26 01:00:57 2026 GMT
Not After : Mar 27 01:00:57 2026 GMT
Subject: CN=4717cd4c3b734cca8cd48f5be3753dba651fe869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:83:77:df:cf:60:7f:dc:80:41:65:b5:b6:67:
19:96:03:3e:af:ae:c8:a8:91:c9:25:14:25:b7:5a:
4a:b7:97:ec:d8:75:9d:e7:1a:8f:09:b8:4d:4d:85:
f0:b5:bc:1a:c2:8c:e6:47:0a:92:4a:33:2d:31:67:
a3:b1:89:c0:41:89:d0:ba:11:0c:89:f4:ee:0f:9e:
0d:bd:b9:6a:24:8a:ba:d7:d2:e6:ea:98:19:34:20:
fb:35:fc:47:3e:e1:d2:e7:a4:78:bb:7d:f7:b7:fe:
cf:19:b5:31:45:9a:1a:48:84:b9:df:fd:4a:f3:80:
92:d3:19:3c:7b:6c:a0:16:79:b3:04:83:7d:c1:6a:
92:01:2c:73:22:f1:f8:79:d8:25:c4:69:ae:99:a6:
39:c4:cc:46:82:d9:e2:f2:34:28:4c:e1:5b:d5:34:
8e:da:4a:45:be:d8:91:4b:17:e4:e8:27:01:b2:66:
7a:2a:52:79:12:68:80:e6:cf:ff:40:b6:97:dc:4f:
bf:6b:bb:f2:13:d3:b3:74:9e:8f:5d:86:e8:89:f8:
8a:e7:d6:74:bf:83:f9:3e:36:f4:b5:19:ad:d4:fe:
20:36:e9:02:a9:b5:dc:a6:d2:ed:ab:48:54:42:71:
f5:97:55:53:5d:24:8f:ff:a7:77:c3:5c:16:30:62:
f4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:17:CD:4C:3B:73:4C:CA:8C:D4:8F:5B:E3:75:3D:BA:65:1F:E8:69
X509v3 Authority Key Identifier:
keyid:53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:80:da:1e:8a:d8:06:e1:ca:e9:f9:5c:2b:e0:73:43:e8:09:
a0:1c:48:a8:5a:a0:ed:a7:38:73:8f:12:4f:75:83:53:92:6f:
f1:35:1c:4b:1a:58:8c:06:ee:77:e0:1f:77:42:92:74:19:ff:
d8:b4:2e:51:2f:5d:7c:88:56:e9:30:e2:f1:a9:ae:d3:e0:3c:
dc:1d:5c:73:e7:bf:68:93:24:8d:e4:34:a6:ca:aa:3a:33:df:
c2:be:83:3d:33:de:04:fc:54:f9:b6:34:30:21:86:c9:0c:34:
06:28:b1:50:d5:1e:6f:8a:8b:70:44:0b:33:f0:c8:52:dd:0f:
bd:1e:5b:a7:1b:fb:b3:4e:91:4f:dc:84:c8:68:0d:f6:0c:6c:
ee:c3:29:44:bb:e7:57:47:98:37:ae:6a:09:79:54:e4:64:4f:
80:d9:be:d9:10:e8:8e:8a:f0:b0:04:b5:2c:d9:56:85:ff:49:
78:4a:e8:bc:f1:58:aa:ba:05:d2:4b:06:57:d1:a9:03:d3:d9:
9f:a3:c3:19:12:8e:b1:9f:72:70:59:e7:53:6b:e3:b6:bd:f6:
b8:4c:a8:32:52:5c:83:cd:ad:91:e4:f8:15:00:83:6b:1c:ef:
a0:04:a7:5f:65:57:12:6e:82:64:c9:58:49:ab:12:b1:b9:ab:
df:59:64:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqKkq9yjrRvJP4NjxOjtMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNzAwNzMxYzVhZGM3MGJjYjcxM2U1N2E1MWE0MDNlNjRl
ZDkxYzgwHhcNMjYwMzI2MDEwMDU3WhcNMjYwMzI3MDEwMDU3WjAzMTEwLwYDVQQD
Eyg0NzE3Y2Q0YzNiNzM0Y2NhOGNkNDhmNWJlMzc1M2RiYTY1MWZlODY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IN3389gf9yAQWW1tmcZlgM+r67I
qJHJJRQlt1pKt5fs2HWd5xqPCbhNTYXwtbwawozmRwqSSjMtMWejsYnAQYnQuhEM
ifTuD54NvblqJIq619Lm6pgZNCD7NfxHPuHS56R4u333t/7PGbUxRZoaSIS53/1K
84CS0xk8e2ygFnmzBIN9wWqSASxzIvH4edglxGmumaY5xMxGgtni8jQoTOFb1TSO
2kpFvtiRSxfk6CcBsmZ6KlJ5EmiA5s//QLaX3E+/a7vyE9OzdJ6PXYboifiK59Z0
v4P5Pjb0tRmt1P4gNukCqbXcptLtq0hUQnH1l1VTXSSP/6d3w1wWMGL0ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcXzUw7c0zKjNSPW+N1PbplH+hpMB8GA1UdIwQY
MBaAFFNwBzHFrccLy3E+V6UaQD5k7ZHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC84M2NmNzMtYjdjZS00NDQwLWE0YWQt
N2M1MjNiNThkZWNmLzEvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC84M2NmNzMtYjdjZS00NDQwLWE0YWQtN2M1MjNiNThkZWNm
LzEvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4DaHorY
BuHK6flcK+BzQ+gJoBxIqFqg7ac4c48ST3WDU5Jv8TUcSxpYjAbud+Afd0KSdBn/
2LQuUS9dfIhW6TDi8amu0+A83B1cc+e/aJMkjeQ0psqqOjPfwr6DPTPeBPxU+bY0
MCGGyQw0BiixUNUeb4qLcEQLM/DIUt0PvR5bpxv7s06RT9yEyGgN9gxs7sMpRLvn
V0eYN65qCXlU5GRPgNm+2RDojorwsAS1LNlWhf9JeErovPFYqroF0ksGV9GpA9PZ
n6PDGRKOsZ9ycFnnU2vjtr32uEyoMlJcg82tkeT4FQCDaxzvoASnX2VXEm6CZMlY
SasSsbmr31lkNg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:51 2026 by rpki-client