Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
File: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft (raw, json)
Hash identifier: +GiZdErPCUN7rIGxRPB69l2R6SlJLOxnwYgS8CEQT2s=
Subject key identifier: 64:9A:06:2F:6E:70:AE:68:EC:3E:23:6D:4D:7D:8F:73:09:43:04:F0
Authority key identifier: 53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
Certificate issuer: /CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Certificate serial: 019D25BA3B2AA5382BE40E2EFFAA9942AAC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
Manifest number: 186E
Signing time: Wed 25 Mar 2026 16:00:54 +0000
Manifest this update: Wed 25 Mar 2026 16:00:54 +0000
Manifest next update: Thu 26 Mar 2026 16:00:54 +0000
Files and hashes: 1: NnLh8TC21_I7aIxYqBVOxMDsYn8.roa (hash: abZc4byKeRvjtv7jM3QRQhlxOH/1CVxvgCdUA7yEv1Y=)
2: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl (hash: I7hdmKoCOw8vhC9J71f7skKf4GmSQ1Q4ZiLCY8kFO4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:3b:2a:a5:38:2b:e4:0e:2e:ff:aa:99:42:aa:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Validity
Not Before: Mar 25 16:00:54 2026 GMT
Not After : Mar 26 16:00:54 2026 GMT
Subject: CN=649a062f6e70ae68ec3e236d4d7d8f73094304f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fe:5d:3b:a2:cb:e4:70:f6:4b:ea:5e:8a:0c:
4c:a3:82:6e:40:3a:65:48:f3:25:da:14:af:14:7e:
91:a5:92:74:2d:d5:77:cb:5c:1c:56:b7:e7:7a:d6:
30:5d:af:71:c9:68:09:32:fa:a9:b9:8b:69:ee:b3:
6b:30:19:26:d7:c2:4e:47:2e:5d:dd:f4:fe:31:90:
83:f9:fe:f9:95:9a:56:a9:72:64:b6:fb:2e:f6:f3:
04:91:f5:f1:c8:29:90:4c:9a:c9:ce:63:35:51:4c:
e6:a7:75:5d:78:3a:f8:b2:b8:f0:fe:b0:0b:a4:3d:
65:63:6b:8a:4b:64:09:77:95:ee:7a:4b:61:8b:b1:
f3:37:b8:42:ec:2d:fd:14:e6:4b:0b:ab:6f:c9:bc:
4e:a6:39:87:cc:88:66:70:1b:4f:bc:3b:e8:86:c9:
ed:87:49:9d:83:ef:39:3e:63:86:dc:3e:2d:b8:02:
f1:f8:3e:01:0d:65:c4:a8:48:a5:e4:fb:d4:ad:57:
05:67:2f:e1:71:16:ac:59:ff:de:4f:60:50:8c:ac:
34:2b:02:72:12:fb:2c:dd:94:40:9f:01:cd:1c:9d:
7e:7b:4f:36:ee:90:77:e4:b3:f5:5f:2e:36:f5:c4:
7a:26:41:d7:69:96:0d:11:76:84:aa:58:38:2d:5e:
5e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9A:06:2F:6E:70:AE:68:EC:3E:23:6D:4D:7D:8F:73:09:43:04:F0
X509v3 Authority Key Identifier:
keyid:53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:e9:30:dc:30:77:b9:f9:db:33:81:b7:07:81:52:57:8e:00:
35:a0:d6:0f:c5:a6:ee:6e:7d:b6:d1:02:04:e8:07:01:d3:4b:
2f:61:2d:55:d3:66:f0:a3:4d:56:c8:d9:94:a7:86:af:41:fe:
a5:a8:75:b4:c9:16:1a:65:71:66:98:5d:28:75:eb:9d:63:73:
fd:69:50:6d:70:1c:77:3b:ab:39:b8:d8:4d:9b:24:e4:e0:79:
6b:a7:29:1e:90:e2:72:e0:fe:4a:14:86:bd:b9:ad:65:4c:fd:
47:3b:9e:77:6c:48:b2:12:d3:dd:3a:99:30:ef:80:f6:6d:e7:
32:80:5a:f5:c5:60:c0:e6:de:b9:9a:4c:22:f3:d8:8f:3c:0a:
98:19:44:a6:91:46:1a:9c:fd:1d:0a:72:32:cf:56:91:01:3a:
74:4c:0a:cd:e0:3a:2d:41:d6:43:b3:4f:cf:f7:ac:69:75:9e:
a3:d9:f7:80:b3:c8:2c:1e:15:02:02:63:90:5d:c6:72:b6:dd:
71:0f:30:e8:15:8c:33:b3:85:27:9c:26:b5:f8:29:62:6c:4e:
52:1a:f4:96:78:a8:b6:47:2f:05:09:7b:b6:66:3b:f5:8e:d1:
26:2f:f9:63:8e:8d:0f:01:97:a5:9a:65:01:c4:28:5f:04:26:
57:29:2f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:30 2026 by rpki-client