Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
File: U9To6fSiMLDlaFh2X3EwrNNOni0.mft (raw, json)
Hash identifier: eY9rtcW4NmauoPyabH5KxTNG0jyA/j37cd4RtQqr0MU=
Subject key identifier: 25:5D:88:F7:85:3E:95:FA:FF:8A:83:9E:AA:BE:F3:A8:A9:D9:D1:21
Authority key identifier: 53:D4:E8:E9:F4:A2:30:B0:E5:68:58:76:5F:71:30:AC:D3:4E:9E:2D
Certificate issuer: /CN=53d4e8e9f4a230b0e56858765f7130acd34e9e2d
Certificate serial: 019D25F162DA8BB7CF91C480E8EF0F7803C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
Manifest number: 71
Signing time: Wed 25 Mar 2026 17:01:09 +0000
Manifest this update: Wed 25 Mar 2026 17:01:09 +0000
Manifest next update: Thu 26 Mar 2026 17:01:09 +0000
Files and hashes: 1: EkTvlRcL5gr2sd6yVsi4cUhXAkc.asa (hash: jZzPjsomaR5uIyS92PagAAHydVGUAeZDGGUA6STCd1M=)
2: O860BZXE4oCrVhgqCDhjxlkYiZY.roa (hash: WAAeKTz5adCSs3a4JZFRxzoY1WO2G1GDA+qRkP/2UHM=)
3: U9To6fSiMLDlaFh2X3EwrNNOni0.crl (hash: eG6iIwR+Cr00VWUifI8q4ENTeDCWO/F0+VvCo4bwPXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:62:da:8b:b7:cf:91:c4:80:e8:ef:0f:78:03:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d4e8e9f4a230b0e56858765f7130acd34e9e2d
Validity
Not Before: Mar 25 17:01:09 2026 GMT
Not After : Mar 26 17:01:09 2026 GMT
Subject: CN=255d88f7853e95faff8a839eaabef3a8a9d9d121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:eb:02:50:6f:64:93:99:45:0e:11:85:45:7e:
f1:a9:d9:4e:66:c7:a3:bd:fd:bd:c3:ca:98:4a:34:
f2:12:16:09:e3:34:96:93:6f:94:cd:f7:f9:a9:5a:
7e:1d:0d:6a:e5:ae:55:bb:b0:e9:14:68:a7:3d:74:
f0:98:73:c4:5e:ae:e8:13:6a:76:d2:97:e7:47:a5:
b1:0f:29:eb:44:d0:bd:11:aa:de:4a:26:26:46:8b:
c3:cb:36:b5:2c:d4:63:2e:32:9a:e3:1b:ce:33:78:
94:0b:f2:d2:75:e9:72:a0:5e:c8:57:3c:5d:aa:79:
b6:40:c1:2e:82:0f:64:89:cc:99:54:ab:cd:89:d8:
6d:ae:87:f0:1e:c8:3c:4a:18:53:09:4c:14:ab:97:
c6:61:35:46:7d:90:7f:af:1f:15:69:d0:89:cf:14:
80:8e:8f:d8:39:31:e9:28:e8:b6:09:d7:8e:16:0c:
b9:93:5a:1a:06:a0:e0:ff:d4:27:a6:38:eb:25:13:
ff:44:e1:b5:9f:7f:e7:45:6d:ff:98:c0:0d:bb:fe:
45:2f:f2:7f:00:84:c0:ae:71:45:a0:67:5a:3d:62:
42:c6:93:e4:16:1d:cd:f6:f6:8b:f2:f7:50:2f:67:
04:c8:ed:be:56:01:7d:10:61:c7:7c:2f:77:22:8f:
35:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5D:88:F7:85:3E:95:FA:FF:8A:83:9E:AA:BE:F3:A8:A9:D9:D1:21
X509v3 Authority Key Identifier:
keyid:53:D4:E8:E9:F4:A2:30:B0:E5:68:58:76:5F:71:30:AC:D3:4E:9E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ab:24:99:50:6b:c8:aa:02:f7:8c:86:30:06:8f:3e:db:5d:
5e:e8:56:39:3f:d8:c6:65:a4:d6:06:3c:4b:c2:e2:8b:e4:ae:
6a:60:b8:9c:41:77:66:f5:ca:9b:d4:09:90:4f:05:b5:09:92:
e1:ed:bc:67:d8:23:49:5b:30:4b:ad:c0:a4:23:8f:c1:09:80:
1c:13:bd:28:9e:3a:fb:a6:69:7c:fd:96:83:b0:08:58:73:bc:
77:09:fd:cc:61:56:c9:4d:20:4a:e0:4e:ec:65:4f:3b:e2:93:
ee:be:77:23:cf:0e:4e:57:7e:ed:1f:22:79:63:44:14:67:a6:
35:93:33:29:e0:6e:39:53:24:01:1a:2a:65:7b:4b:2d:74:2d:
03:2c:2f:65:9d:aa:be:4a:7b:47:87:d6:20:e5:69:d0:ac:4f:
31:70:95:42:c8:33:cc:74:9d:ad:b6:f4:c5:ef:46:70:b0:fc:
23:3e:a2:ef:87:78:df:e7:fd:67:5a:1e:8b:90:64:5d:6b:f0:
cb:52:4d:2d:21:95:c2:7e:cd:e4:67:55:62:ad:6b:88:a2:36:
bf:34:77:95:da:3f:4d:51:40:d9:c6:79:b0:41:eb:cc:1e:39:
9f:fe:18:7e:74:d1:79:3b:84:91:2a:28:13:bc:82:73:8c:12:
68:8a:b0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:23:01 2026 by rpki-client