Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
File: U9qZ-TUY4pqUWwf2ChjvhumznmU.mft (raw, json)
Hash identifier: 5P3dOVnXACuLvhy+5dlwXywdhWrNC/4CImOSqCimLYQ=
Subject key identifier: 39:D8:C0:7A:27:C5:A8:B7:9F:6D:35:97:09:A4:2E:EB:89:10:12:9C
Authority key identifier: 53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65
Certificate issuer: /CN=53da99f93518e29a945b07f60a18ef86e9b39e65
Certificate serial: 019D2A3C5E488C41BE65BFB26147A8C1450A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
Manifest number: 15CC
Signing time: Thu 26 Mar 2026 13:01:32 +0000
Manifest this update: Thu 26 Mar 2026 13:01:32 +0000
Manifest next update: Fri 27 Mar 2026 13:01:32 +0000
Files and hashes: 1: U9qZ-TUY4pqUWwf2ChjvhumznmU.crl (hash: WPZh6uJgpEY/iq7qZTU2hJ9V77RdWshmj9O5zJfR3xU=)
2: lqa3yfi-IJTce6zbolyaur2GC34.roa (hash: euw2FgarLlwQhKJB1B+fQ7g3yZOfq06R+9gYUXAI1v0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:5e:48:8c:41:be:65:bf:b2:61:47:a8:c1:45:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53da99f93518e29a945b07f60a18ef86e9b39e65
Validity
Not Before: Mar 26 13:01:32 2026 GMT
Not After : Mar 27 13:01:32 2026 GMT
Subject: CN=39d8c07a27c5a8b79f6d359709a42eeb8910129c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:05:63:d2:95:ca:1c:b7:5d:2d:a3:5b:90:5e:
17:6c:c1:f6:71:2e:d3:95:8a:bc:4c:d3:3b:9e:f8:
f8:43:c0:cb:2f:38:86:c8:7e:bb:48:98:12:07:61:
e1:ec:23:2a:78:01:da:34:e0:ac:6a:23:d6:a3:92:
2d:27:fb:1e:81:55:56:f4:01:8d:65:5e:5c:d7:21:
58:35:29:7a:67:d4:13:41:76:30:77:6d:7f:9e:f8:
7d:82:61:5a:29:97:17:c7:d7:9d:58:e3:f7:2b:2d:
54:66:ef:6d:3f:21:d3:db:93:9a:1c:5c:e8:75:7f:
7a:9c:39:74:bd:d9:2f:2c:fa:6b:c4:a4:8a:b1:78:
13:5a:b4:5d:6f:5f:5c:6c:d9:62:0b:b6:d6:77:8a:
18:7f:2f:fb:21:05:70:e4:4c:bd:a6:e6:ac:b0:ed:
3f:a3:24:17:a1:a0:0b:28:2f:ae:58:dc:a7:68:b8:
cd:da:b1:c9:46:c9:a7:7f:7d:6b:fd:f3:54:db:9c:
fa:eb:55:69:93:2e:58:0e:4e:24:f6:a7:ea:1b:83:
70:b9:e5:4a:c5:d2:e8:e6:d3:7f:b8:60:d7:c8:5c:
58:c3:c8:99:16:cb:37:fe:43:ce:d8:bd:34:4b:30:
99:7a:54:3a:10:f5:eb:f7:6c:d3:2e:4e:12:74:f3:
c7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D8:C0:7A:27:C5:A8:B7:9F:6D:35:97:09:A4:2E:EB:89:10:12:9C
X509v3 Authority Key Identifier:
keyid:53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:10:c5:40:79:75:b7:bc:02:0f:2d:08:d0:15:3a:12:b1:52:
9b:02:44:c1:ad:b6:1e:cf:2d:8e:df:c8:4d:e6:3c:ba:57:2f:
49:4f:48:d6:6c:5e:b9:6e:bf:04:ee:77:86:ae:40:b8:5c:75:
1b:cc:98:d6:e6:bf:e3:fd:f8:61:59:e0:30:88:b4:f9:a1:e2:
5f:70:c6:a4:e9:fc:b0:e0:4e:44:73:78:fe:08:d5:e5:44:69:
b2:4f:8a:a6:14:38:41:07:ea:17:5c:6f:a3:e5:e0:21:96:6d:
aa:35:6b:48:8b:6f:62:1e:de:95:2d:87:f8:c4:97:4f:49:85:
58:46:27:c0:68:41:59:4b:da:7e:00:99:71:42:84:11:66:33:
21:9a:b1:fa:c6:fb:40:c3:05:11:65:bf:de:c8:66:73:3a:e1:
7c:80:d5:ee:24:b4:e8:99:c7:2d:55:56:c2:51:b0:ea:a7:69:
81:dd:f6:5a:68:9f:1a:31:4d:3a:81:8d:9e:a6:79:8d:ff:cd:
2c:72:e4:f9:fe:33:06:6d:cf:b7:6f:a1:48:0f:9b:dd:fb:a1:
cc:58:04:cd:9d:8a:9a:ee:42:e7:23:fd:95:13:3a:1a:a4:d8:
23:4a:38:45:c3:bd:bc:1d:c1:4b:de:fc:8b:a4:0c:42:01:37:
8b:45:ac:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:00:02 2026 by rpki-client