Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
File: U4DNitL4ThTptbZCOJN7bUIH4iE.mft (raw, json)
Hash identifier: hW+GnABT56ps5r5mRUdvl79aDX5aogAiPCL1aeh1IgM=
Subject key identifier: EC:9D:06:C4:BF:E4:33:39:21:B3:96:96:6D:A1:33:77:90:C0:4F:09
Authority key identifier: 53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
Certificate issuer: /CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Certificate serial: 019D273B33EE111B1977DACF58922545C03C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
Manifest number: 0A1B
Signing time: Wed 25 Mar 2026 23:01:24 +0000
Manifest this update: Wed 25 Mar 2026 23:01:24 +0000
Manifest next update: Thu 26 Mar 2026 23:01:24 +0000
Files and hashes: 1: 3gqZ21ZiXWY8Si7snLEpMyMD74g.roa (hash: X/t/+w5YUcvfs+3nGPGjtJ/Fhg4+BcTTk+/zNwVCFHo=)
2: U4DNitL4ThTptbZCOJN7bUIH4iE.crl (hash: 7iD2CMqP+oupPA8z8eldyzEK473Cv2YCn8xqqtRwO6Q=)
3: wlQ0t9w-oLkcGuhWCMs9Bpc2jac.roa (hash: 3f94DHQ4ocfCNVkT9++XQcXx0yPrdObfv5lQ1Z9Etr8=)
4: x0JWlbPq7LDeu4Dm0_N7oeK38ow.roa (hash: tbOy3beQewSvz0vDOcHNb1UEiU3Vzot4Nk2R+I8UvvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:33:ee:11:1b:19:77:da:cf:58:92:25:45:c0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Validity
Not Before: Mar 25 23:01:24 2026 GMT
Not After : Mar 26 23:01:24 2026 GMT
Subject: CN=ec9d06c4bfe4333921b396966da1337790c04f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d0:cc:c7:5b:26:c7:7b:dc:70:fc:d6:2b:eb:
0c:20:5d:be:ca:cd:d7:c2:34:38:1d:5d:ae:3c:aa:
91:cb:e0:da:e9:53:c3:b2:33:e9:56:e0:9e:76:d3:
3f:dd:c8:68:c1:f5:7c:b5:7b:86:79:f6:1b:0c:4d:
05:ac:dd:94:8f:22:9e:6c:33:71:68:79:d6:ed:e6:
16:f8:ac:57:84:fc:13:f9:a9:d1:a6:de:f7:6b:c1:
de:a3:f4:80:6a:6b:98:a1:c5:13:20:7e:ce:d2:88:
3d:5a:a7:87:5d:88:43:ef:aa:54:b8:08:3f:3b:62:
ac:8d:7f:9c:ae:82:51:cc:be:45:86:90:fb:21:ff:
75:65:b9:d4:13:f4:ec:e4:a6:36:78:e4:0d:34:4c:
37:51:6d:c5:a5:af:af:8e:c0:01:23:b3:86:67:07:
80:36:68:4f:e3:b6:1d:d0:f9:e2:c7:98:fc:3c:69:
15:f5:3f:06:44:ec:9d:29:f8:3d:3d:7a:d0:05:4c:
16:97:1e:59:51:72:ca:8a:06:ea:45:ef:f6:4e:ae:
63:12:fe:0e:26:0d:fe:d9:b2:4c:b9:00:12:91:f7:
a4:90:5e:d7:28:a9:3a:9e:ce:7c:41:4f:28:f5:55:
a4:da:f7:0d:d6:7a:a2:57:ce:78:44:11:c5:27:b4:
c5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9D:06:C4:BF:E4:33:39:21:B3:96:96:6D:A1:33:77:90:C0:4F:09
X509v3 Authority Key Identifier:
keyid:53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f2:4b:a7:fc:d7:96:ef:1c:75:cd:f3:f6:31:0f:6a:ee:37:
76:bd:93:b6:4f:8a:45:3a:14:22:5f:64:1c:3c:49:35:03:42:
2d:79:64:b4:8d:ca:75:e7:4a:f1:af:cf:62:8d:eb:a4:d1:cc:
31:38:72:84:8d:16:b2:8f:12:5d:4e:b5:73:ad:c1:6b:cc:ce:
49:eb:3f:d0:2d:1c:4d:b0:66:40:d7:a9:3b:ab:62:aa:d7:29:
34:d3:83:82:a8:c3:85:d7:6d:c5:30:10:7d:0c:0a:6a:4a:e6:
31:55:ca:39:9b:c8:fb:d1:1c:0e:2f:00:15:40:a7:9b:3a:63:
1e:08:9b:d1:24:b4:a5:65:22:43:2e:54:fe:8e:63:8e:81:3d:
53:e1:7a:c8:a7:70:60:d0:b5:7f:7f:45:8a:49:7f:ae:eb:7b:
d8:73:14:71:70:63:9b:c7:d7:77:16:73:2b:7c:be:dc:ee:ce:
4d:cb:4b:94:72:d2:8c:88:3e:5c:2e:df:b7:0d:cc:54:ba:75:
ce:4f:fe:cf:6a:13:8a:90:f0:fc:ac:9a:31:06:ca:d4:72:54:
d3:b6:1b:f8:62:2d:66:ac:bf:60:4c:25:a2:d5:44:64:91:53:
0f:9a:22:86:05:d2:7e:35:64:3a:83:00:d8:e7:b5:aa:b7:f6:
af:11:af:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:10 2026 by rpki-client