Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
File: U8dzEuDSzshFoEYThF-KG-Jjw5k.mft (raw, json)
Hash identifier: D0Jwc/nDbaD0MC9PBb6fHHtMv/HoDEmwN0iRsv4d0Qw=
Subject key identifier: 34:C3:F4:AF:29:9D:B9:80:80:43:FE:B5:12:55:75:C1:68:70:59:66
Authority key identifier: 53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
Certificate issuer: /CN=53c77312e0d2cec845a04613845f8a1be263c399
Certificate serial: 019D2704499021F36CAF88178541029BCBC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 22:01:25 +0000
Manifest this update: Wed 25 Mar 2026 22:01:25 +0000
Manifest next update: Thu 26 Mar 2026 22:01:25 +0000
Files and hashes: 1: LMMdVEDfefO9DMTodcqsmRU-LHM.roa (hash: hRe5cV7EwZ0Fcxo17tUpXTTj4tA391QQdgKYjlbkJTk=)
2: U8dzEuDSzshFoEYThF-KG-Jjw5k.crl (hash: NEDW0UR4o8fThrefk6+HeEnJXPy2U1s/AXZ93J5NKwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:49:90:21:f3:6c:af:88:17:85:41:02:9b:cb:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c77312e0d2cec845a04613845f8a1be263c399
Validity
Not Before: Mar 25 22:01:25 2026 GMT
Not After : Mar 26 22:01:25 2026 GMT
Subject: CN=34c3f4af299db9808043feb5125575c168705966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:aa:08:c3:1a:b1:27:4d:41:72:d4:ce:c9:
fc:c6:b6:fe:c8:b8:64:28:32:65:e7:7e:77:1d:b5:
2f:a2:27:73:0d:af:b4:20:ba:96:40:19:0a:d3:b6:
98:17:b5:c1:1c:fc:36:e9:32:12:04:62:10:70:25:
f9:9b:db:08:c2:e0:49:54:d1:67:0b:37:71:22:be:
9d:6b:59:b7:e9:e4:ae:69:5f:75:a7:f3:5a:8c:06:
89:2b:16:a7:ae:42:da:4a:38:5f:34:3e:d5:2f:c7:
b5:94:1a:7d:47:fd:be:43:a7:af:19:46:b1:34:72:
9f:08:c8:76:39:86:31:0a:1b:58:a7:3d:d7:2b:c1:
0b:a0:48:1b:5c:05:4d:0f:b0:68:49:61:b2:39:c1:
92:11:43:fa:ba:3d:44:67:a3:28:d6:27:4e:45:f5:
f7:96:f3:a3:3b:40:7a:9e:ae:6c:64:af:01:5f:88:
a8:ad:e7:2b:43:e5:a5:70:fa:ab:b5:14:05:7c:74:
63:ee:e2:09:89:ef:93:38:b4:27:e3:55:89:69:09:
82:8b:e9:93:4d:46:dd:82:02:25:96:08:64:a7:25:
04:97:b1:2e:fc:73:3b:87:06:5c:0c:ef:01:e2:7e:
1a:8b:cf:d5:91:c7:0d:dd:ef:d8:f1:8a:02:85:44:
6f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C3:F4:AF:29:9D:B9:80:80:43:FE:B5:12:55:75:C1:68:70:59:66
X509v3 Authority Key Identifier:
keyid:53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7d:32:68:ae:a4:0c:ac:4b:6d:81:a3:97:0b:54:fc:e9:77:
09:41:ed:56:22:1f:9c:f3:c8:2a:63:ba:e4:0d:da:84:ac:43:
0f:c5:2b:4f:95:4e:9c:53:4f:8b:85:f4:73:a1:31:5f:33:66:
83:f8:1b:28:a6:1f:24:9d:8e:64:36:12:71:a4:fe:52:a2:12:
6e:34:97:93:4e:0f:dd:a1:f9:95:ef:ff:df:48:95:9a:c5:05:
51:c7:d5:dd:8a:13:20:08:36:7f:85:42:cf:98:02:fb:f8:a1:
8c:13:16:11:41:4b:39:46:ae:69:53:19:e5:9b:93:7b:6f:2d:
74:c3:5a:9b:f4:00:70:ee:37:ca:82:65:c4:ca:6b:fd:94:d6:
e3:b0:f8:d8:4e:05:2f:85:b5:7c:40:5e:a3:8c:a9:1f:96:9c:
6f:40:6b:15:a4:d6:c5:e9:92:2d:74:ca:5b:19:c1:59:7c:8c:
8e:bb:41:2a:d3:d5:9a:00:bd:f5:b0:e0:d1:ab:0f:58:54:86:
07:a3:a5:58:ba:e2:f3:dd:17:be:c3:f3:a9:3d:ae:24:65:6c:
f6:6b:7e:b9:88:0b:e5:5f:da:a6:3b:60:44:29:c4:16:67:60:
16:ff:55:f7:85:5f:6d:6b:51:0a:7f:83:46:1f:7d:bd:5c:ee:
0e:86:8c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:07 2026 by rpki-client