Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
File: U2xMlP7U-ouQP29vtTQEhMDkpNM.mft (raw, json)
Hash identifier: LK/+sP9S/7K6rKI+qX3tCTnSCBlwBcSROg1E5L4s+vQ=
Subject key identifier: 5A:67:3D:E7:DA:F0:56:8C:0D:D7:84:D4:1D:65:5C:5B:83:0B:4E:D0
Authority key identifier: 53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3
Certificate issuer: /CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3
Certificate serial: 019D27720FD5C91DEDA76C48EE4CE939B46E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 00:01:19 +0000
Manifest this update: Thu 26 Mar 2026 00:01:19 +0000
Manifest next update: Fri 27 Mar 2026 00:01:19 +0000
Files and hashes: 1: LAOBryNL0KJu9-xjb-FrH6jA_IA.roa (hash: biC6dSuRUtLSwTLFWydGp8nfw7Jdx02KvIYXVDFbAhQ=)
2: U2xMlP7U-ouQP29vtTQEhMDkpNM.crl (hash: p1jpkR+uaTWDzMRv6BqOAb8WfEqpgWjVoANgj6kZCso=)
3: zP-lIE53S9KLOnGVAdItzeWXU5o.roa (hash: 4Klw+/57RY0QPNCQtJQdWUmn3Q/oNa3sFma4xpAYYxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:0f:d5:c9:1d:ed:a7:6c:48:ee:4c:e9:39:b4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3
Validity
Not Before: Mar 26 00:01:19 2026 GMT
Not After : Mar 27 00:01:19 2026 GMT
Subject: CN=5a673de7daf0568c0dd784d41d655c5b830b4ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ec:08:ed:01:b2:a1:98:c4:31:42:eb:fb:b2:
e6:fc:b9:79:2e:8c:4d:4a:cd:ed:01:77:3a:43:dd:
94:fb:2d:42:07:27:26:d9:a6:9e:63:f0:86:e8:72:
ab:47:a5:c1:8e:66:6f:dd:fc:48:2c:45:cb:9b:08:
3e:6b:04:fd:15:9f:86:99:52:62:35:85:95:68:d1:
26:57:cc:47:78:c5:23:8c:48:27:6a:d5:89:ab:63:
d5:4a:62:68:e2:87:74:fb:1b:99:d8:29:b6:1b:24:
e5:e5:2f:6f:cb:5d:a9:5a:0f:bc:96:5e:e2:4a:83:
44:e4:5a:5a:e7:bd:2f:93:2e:ad:d3:e4:30:3f:c1:
fe:43:2a:e5:05:f7:53:53:22:42:5e:24:ef:27:34:
1e:e3:5a:13:86:0a:38:4f:05:57:0e:ea:9f:79:9f:
8e:9e:bc:b7:26:43:b4:82:cc:42:02:ce:e6:4f:71:
f6:e4:71:07:aa:3b:9f:af:d9:9e:52:ae:d1:4b:41:
c4:3c:f3:ef:cd:41:98:77:58:63:eb:15:84:a1:14:
a5:d4:d2:bf:e4:3a:80:4c:d2:21:5d:a9:15:4b:ef:
67:54:e4:b9:48:46:0c:ba:59:11:24:6f:94:ef:31:
ba:cf:a5:f7:4e:84:2b:f6:3c:de:5d:1c:10:0a:49:
f9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:67:3D:E7:DA:F0:56:8C:0D:D7:84:D4:1D:65:5C:5B:83:0B:4E:D0
X509v3 Authority Key Identifier:
keyid:53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:62:a2:6c:0f:fb:70:03:58:96:a7:e1:5e:9a:e0:fc:62:af:
fe:20:2f:d4:16:af:e8:e6:9d:ab:c3:8a:8c:9d:6b:39:06:a9:
06:09:f4:18:bb:34:46:7e:ce:86:b5:9c:0e:e8:2b:93:b7:97:
a0:ca:31:eb:c5:1c:21:67:5c:65:a5:a1:2e:79:43:be:74:f2:
ce:b1:0b:6e:bb:06:8d:50:32:02:24:54:8a:66:5b:eb:ad:f3:
d4:3e:fb:f7:32:45:07:6c:0f:c6:fa:b2:74:1d:d9:3b:e9:8a:
79:b1:89:c6:43:22:b8:43:36:48:e2:8c:3a:44:28:fb:72:5d:
ea:91:d0:a4:a2:e3:59:42:81:5f:e3:c5:c7:85:61:19:7d:64:
5b:67:d8:f3:71:6c:34:d3:2c:2f:ae:fc:4c:8a:98:0d:a1:47:
7f:3c:6d:c7:b9:82:ce:f4:d5:56:dd:a0:16:a7:d8:5c:98:f1:
2c:17:99:3c:e3:8a:90:e8:8c:14:3d:6b:ef:18:f0:fa:c2:c2:
50:1b:49:22:e6:ab:93:3c:09:7f:90:85:b5:ed:55:58:b6:3c:
77:35:39:96:48:94:17:d7:71:6d:ce:56:3a:e8:68:e8:d5:10:
05:e2:ad:a3:06:2c:58:b4:c3:86:5c:c1:ad:50:88:da:51:ac:
de:5a:6a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:21 2026 by rpki-client