Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
File: U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft (raw, json)
Hash identifier: wj6qTEJ7jvet1IqDGdOW2RA2YMCaRQcVDXyUXFwZFrk=
Subject key identifier: 57:D4:52:8D:E7:9C:74:D0:94:B2:1E:55:22:25:FB:86:C9:5F:C6:E7
Authority key identifier: 53:53:A9:A8:5F:A1:1F:C4:BF:15:6F:AB:4D:8D:84:A0:8E:5D:66:F9
Certificate issuer: /CN=5353a9a85fa11fc4bf156fab4d8d84a08e5d66f9
Certificate serial: 019D27DFEEACB332F7C3791BBD003230E369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 02:01:20 +0000
Manifest this update: Thu 26 Mar 2026 02:01:20 +0000
Manifest next update: Fri 27 Mar 2026 02:01:20 +0000
Files and hashes: 1: U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl (hash: CRPI7wS3NpWPiw8b8v/YlVdQLuc+YjghB3F5zhOGBno=)
2: mT1y4Vcpn5hGJXQzo130fr7-JU8.roa (hash: 5+RIIvJ1lvndyR9sJPil/4SfnDQMNqbmhhM2Do86aWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ee:ac:b3:32:f7:c3:79:1b:bd:00:32:30:e3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5353a9a85fa11fc4bf156fab4d8d84a08e5d66f9
Validity
Not Before: Mar 26 02:01:20 2026 GMT
Not After : Mar 27 02:01:20 2026 GMT
Subject: CN=57d4528de79c74d094b21e552225fb86c95fc6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0f:48:48:67:7e:39:86:03:83:f7:ef:b1:04:
e2:e1:2d:1d:34:a6:1d:26:9d:9f:c0:2c:71:a3:d4:
66:e3:17:14:6e:2b:77:0e:5c:74:32:36:2b:0c:2b:
44:f8:2a:97:35:ce:33:db:26:e7:56:70:a0:42:48:
44:f0:c9:b1:22:e5:f0:4c:9d:ec:78:18:17:bd:a5:
f9:59:6e:9d:da:97:65:9d:2d:f8:f1:2f:84:e5:54:
52:39:2f:9c:21:9c:84:52:06:93:1b:bc:1e:75:b6:
5a:71:3e:e2:3e:bd:4a:37:f0:01:20:7a:6c:f0:5e:
fa:a3:2e:49:dc:39:e2:fc:4c:81:fd:f7:03:18:c5:
6e:2e:5a:12:2c:6c:79:b5:ba:d2:0b:d1:b1:94:b5:
35:d1:78:f4:25:ec:7e:fb:04:29:01:ef:42:06:04:
6a:87:c3:58:56:f6:73:e1:f6:bc:ef:e4:12:69:f5:
09:6b:ed:ab:3e:e5:e5:89:ac:70:10:1b:d1:23:b9:
53:96:06:8d:8b:43:9f:7c:c3:81:6f:14:40:cc:a1:
6d:25:35:dd:dd:83:99:a3:c9:6d:a5:cf:32:71:26:
51:4a:b4:35:0f:48:db:c7:5d:0c:e2:07:eb:70:2f:
9a:2d:8b:2f:e7:46:11:90:41:68:50:a2:ac:f4:ce:
5a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D4:52:8D:E7:9C:74:D0:94:B2:1E:55:22:25:FB:86:C9:5F:C6:E7
X509v3 Authority Key Identifier:
keyid:53:53:A9:A8:5F:A1:1F:C4:BF:15:6F:AB:4D:8D:84:A0:8E:5D:66:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3b:0a:eb:c4:0a:47:45:70:1e:95:a7:87:d4:14:16:ef:50:
b3:88:63:6f:51:83:39:53:08:f7:9b:5c:a4:26:11:ee:6e:c4:
05:3b:5c:15:cb:08:4a:7d:e6:3b:c6:43:21:1f:db:be:0e:8b:
d0:a4:f9:f2:03:62:ed:79:a0:08:9e:1c:fa:82:ba:9e:84:d5:
c8:33:28:31:e1:16:47:5f:28:f8:89:94:e2:f1:36:a9:b6:bf:
04:21:d6:a8:6c:42:b3:0a:95:f2:54:5b:c7:c8:0f:1b:08:a5:
6b:cf:c8:5e:d5:45:26:fe:4b:d6:8a:44:4b:1f:b6:ed:9a:07:
f1:e4:c8:33:9e:b7:cd:bd:bc:ca:83:17:5d:dd:d6:e4:b0:c8:
74:df:d5:0b:92:a3:d8:8b:fe:fa:60:15:ab:48:41:9a:72:3b:
0d:58:bf:0e:e4:60:6c:13:fc:14:2c:bb:43:fe:e0:b6:a5:46:
0d:5f:22:d5:c6:3b:d2:74:b4:8a:d0:93:74:2f:2b:fe:f7:ba:
b5:d4:01:76:4f:11:b6:e5:56:09:15:10:b3:2d:91:3f:a2:79:
e6:75:76:9b:9f:2b:6c:a4:90:f5:04:f1:da:9e:1c:6a:2b:d4:
d2:c8:9b:4d:1d:5b:95:0c:c9:67:44:b3:59:5e:d6:0c:ed:d0:
21:9b:8c:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n3+6sszL3w3kbvQAyMONpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNTNhOWE4NWZhMTFmYzRiZjE1NmZhYjRkOGQ4NGEwOGU1
ZDY2ZjkwHhcNMjYwMzI2MDIwMTIwWhcNMjYwMzI3MDIwMTIwWjAzMTEwLwYDVQQD
Eyg1N2Q0NTI4ZGU3OWM3NGQwOTRiMjFlNTUyMjI1ZmI4NmM5NWZjNmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA9ISGd+OYYDg/fvsQTi4S0dNKYd
Jp2fwCxxo9Rm4xcUbit3Dlx0MjYrDCtE+CqXNc4z2ybnVnCgQkhE8MmxIuXwTJ3s
eBgXvaX5WW6d2pdlnS348S+E5VRSOS+cIZyEUgaTG7wedbZacT7iPr1KN/ABIHps
8F76oy5J3Dni/EyB/fcDGMVuLloSLGx5tbrSC9GxlLU10Xj0Jex++wQpAe9CBgRq
h8NYVvZz4fa87+QSafUJa+2rPuXliaxwEBvRI7lTlgaNi0OffMOBbxRAzKFtJTXd
3YOZo8ltpc8ycSZRSrQ1D0jbx10M4gfrcC+aLYsv50YRkEFoUKKs9M5a5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfUUo3nnHTQlLIeVSIl+4bJX8bnMB8GA1UdIwQY
MBaAFFNTqahfoR/EvxVvq02NhKCOXWb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFPcHFGLWhIOFNfRlctclRZMkVvSTVkWnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9iOTI5Y2UtZWMxNy00ZDUwLWE2YWUt
NzlkOTM0ZTRhOTlhLzEvVTFPcHFGLWhIOFNfRlctclRZMkVvSTVkWnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9iOTI5Y2UtZWMxNy00ZDUwLWE2YWUtNzlkOTM0ZTRhOTlh
LzEvVTFPcHFGLWhIOFNfRlctclRZMkVvSTVkWnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTsK68QK
R0VwHpWnh9QUFu9Qs4hjb1GDOVMI95tcpCYR7m7EBTtcFcsISn3mO8ZDIR/bvg6L
0KT58gNi7XmgCJ4c+oK6noTVyDMoMeEWR18o+ImU4vE2qba/BCHWqGxCswqV8lRb
x8gPGwila8/IXtVFJv5L1opESx+27ZoH8eTIM563zb28yoMXXd3W5LDIdN/VC5Kj
2Iv++mAVq0hBmnI7DVi/DuRgbBP8FCy7Q/7gtqVGDV8i1cY70nS0itCTdC8r/ve6
tdQBdk8RtuVWCRUQsy2RP6J55nV2m58rbKSQ9QTx2p4caivU0sibTR1blQzJZ0Sz
WV7WDO3QIZuMBw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:58 2026 by rpki-client