Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
File: U4DNitL4ThTptbZCOJN7bUIH4iE.mft (raw, json)
Hash identifier: nIOS3yLtY/fmfdpF06gb6Ihu9Elke7whZHDZxCUp+rM=
Subject key identifier: 02:FC:88:B1:44:76:02:80:C8:93:DC:12:55:5A:79:3F:E8:B9:04:FB
Authority key identifier: 53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
Certificate issuer: /CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Certificate serial: 019E1E6C4236852CEDFE149C6430122ACA7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
Manifest number: 0A9B
Signing time: Tue 12 May 2026 23:01:11 +0000
Manifest this update: Tue 12 May 2026 23:01:11 +0000
Manifest next update: Wed 13 May 2026 23:01:11 +0000
Files and hashes: 1: 3gqZ21ZiXWY8Si7snLEpMyMD74g.roa (hash: X/t/+w5YUcvfs+3nGPGjtJ/Fhg4+BcTTk+/zNwVCFHo=)
2: U4DNitL4ThTptbZCOJN7bUIH4iE.crl (hash: qMf1g3o8CpVmpRK/6tYVeiv6fiCd2akNEUSDOGTMMHo=)
3: wlQ0t9w-oLkcGuhWCMs9Bpc2jac.roa (hash: 3f94DHQ4ocfCNVkT9++XQcXx0yPrdObfv5lQ1Z9Etr8=)
4: x0JWlbPq7LDeu4Dm0_N7oeK38ow.roa (hash: tbOy3beQewSvz0vDOcHNb1UEiU3Vzot4Nk2R+I8UvvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:42:36:85:2c:ed:fe:14:9c:64:30:12:2a:ca:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Validity
Not Before: May 12 23:01:11 2026 GMT
Not After : May 13 23:01:11 2026 GMT
Subject: CN=02fc88b144760280c893dc12555a793fe8b904fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5c:c9:b7:4f:c6:ac:88:77:4a:7f:10:87:4c:
0e:cd:3e:cb:2d:94:c5:d5:6a:8f:ff:0b:41:18:e2:
f7:21:c2:3d:95:e1:16:94:8f:c6:1c:ee:67:0f:0a:
3f:99:0e:2a:38:47:8b:0d:88:e9:f2:11:b7:a9:c8:
04:6e:c3:0b:06:bc:bf:ee:39:04:60:b9:d5:1b:4d:
44:7a:2d:ae:f7:3d:74:f5:3b:2d:d5:86:3a:53:1e:
97:04:11:09:51:d1:8b:5b:4f:14:70:22:dd:6b:1d:
d4:e8:e0:90:56:55:44:8c:59:3b:63:6d:a2:28:f0:
61:86:e5:a1:94:2e:8a:d9:dc:52:54:00:d2:41:5f:
2a:73:55:9a:b1:f8:be:30:09:25:d2:29:69:90:78:
a9:26:3c:c2:b1:c6:5f:dc:d2:95:91:3f:04:9b:f6:
3f:91:55:04:dd:9a:5c:63:5f:76:5a:85:d2:64:e4:
20:ea:2c:a6:a6:6b:83:9e:cc:54:53:23:9f:7c:b6:
7b:4a:0d:c3:0e:69:ca:1d:fc:54:9a:2f:27:b4:ab:
e7:05:63:86:83:65:05:5f:73:2e:59:ad:b8:d0:e0:
dc:45:f4:a1:4e:12:f0:6d:5d:47:93:06:b7:05:13:
5d:ac:a7:60:e4:d4:76:cf:35:0e:34:3a:e6:4c:58:
8e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FC:88:B1:44:76:02:80:C8:93:DC:12:55:5A:79:3F:E8:B9:04:FB
X509v3 Authority Key Identifier:
keyid:53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2f:0d:36:24:ff:e6:e5:34:58:a3:66:a0:7c:c9:52:0d:13:
d1:29:ac:0c:4b:69:ae:65:2f:ca:e5:14:f9:36:d8:f9:9e:85:
9a:4f:6d:b9:a5:17:5c:4b:c9:fa:2a:8c:89:16:a5:58:97:a0:
05:fe:7b:88:d5:d2:dd:0e:a3:35:eb:c2:98:0f:5c:b9:51:c7:
c5:6b:3f:40:84:43:1c:a1:f2:e9:0b:fc:2a:40:04:2c:d4:96:
96:91:5d:82:ac:29:06:33:e0:fc:f4:9f:89:4f:7c:8c:83:4e:
3c:17:8c:c6:5d:02:bd:71:70:0e:07:e7:bb:9b:66:b8:71:36:
1c:a7:3a:b6:33:ad:cc:56:09:ea:6c:0e:41:33:95:5f:85:b5:
7d:75:22:44:5f:0b:c1:5d:bc:41:8b:88:cf:11:3a:e0:12:ab:
26:08:f2:d6:4c:8b:d6:4b:b7:eb:33:16:bd:8b:2b:af:40:00:
9a:a7:72:81:59:60:94:f1:24:8c:51:9f:5c:6a:67:ff:c8:62:
2d:29:f2:84:43:3b:ed:40:7f:53:5a:74:22:4d:ff:5c:3e:14:
3b:49:db:64:b3:a6:07:e2:b4:4b:9f:b7:2d:05:0c:4e:64:12:
63:a0:d9:a0:fb:60:00:01:03:45:5b:3d:37:a9:99:82:31:d2:
a0:20:c7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:44:51 2026 by rpki-client