Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
File: U1sc1e5esD379tQl1peejVNQFbw.mft (raw, json)
Hash identifier: Zi7IjDhM59ic9mgMwbpv47JQNdonJ7aXOZohqhngcYU=
Subject key identifier: 75:68:77:8D:C4:89:85:82:5B:5F:0F:3D:A3:88:C9:BF:40:72:88:0F
Authority key identifier: 53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC
Certificate issuer: /CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc
Certificate serial: 019D28F2521AE03270F198429181DDC124B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
Manifest number: 056D
Signing time: Thu 26 Mar 2026 07:01:02 +0000
Manifest this update: Thu 26 Mar 2026 07:01:02 +0000
Manifest next update: Fri 27 Mar 2026 07:01:02 +0000
Files and hashes: 1: U1sc1e5esD379tQl1peejVNQFbw.crl (hash: /o34Ub6ZZOzHldS6J1GanQADUGRlMzxraMw6ZscQszs=)
2: gG12zQ9GIzWIe8J-nL_3zIACec4.roa (hash: 7EVnJBXzQgBi1RMypgklddOJkUa6XyxYAb4uWOaA9Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:52:1a:e0:32:70:f1:98:42:91:81:dd:c1:24:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc
Validity
Not Before: Mar 26 07:01:02 2026 GMT
Not After : Mar 27 07:01:02 2026 GMT
Subject: CN=7568778dc48985825b5f0f3da388c9bf4072880f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:79:89:43:d5:c1:85:21:e7:b0:ff:05:a5:
9b:d2:cc:05:56:eb:79:1b:94:bf:89:bf:5d:51:a3:
41:f5:4f:ed:e5:3a:ce:7e:88:86:78:09:54:02:23:
a4:55:b5:68:0d:94:91:48:90:1f:2f:a5:3f:8a:61:
bf:ec:ec:a1:87:27:df:1e:aa:07:47:93:94:c8:32:
4f:be:d6:ad:20:c0:79:1f:de:f3:68:45:a0:13:a6:
ac:11:49:77:06:d3:7b:8f:95:46:37:b3:46:b4:01:
de:7f:48:f1:18:cf:5e:6b:ef:2e:49:95:57:55:cd:
93:a3:35:9e:7d:cd:26:e8:4c:a6:f0:33:9c:9c:2e:
d0:df:8a:b6:46:cc:74:26:2f:6c:a8:80:79:c7:ce:
bd:0d:3b:d0:90:6c:74:86:67:3f:3c:71:63:0b:e8:
66:f2:29:80:a5:3a:c2:0a:d3:a7:74:1a:d6:42:be:
80:bc:d8:b7:6a:e4:d1:93:15:f7:bd:eb:a9:4e:40:
69:f3:83:7e:2e:80:f1:3d:86:d6:3c:ef:c0:ab:dd:
10:b1:b1:c9:15:00:37:e1:61:57:c6:3b:1c:7e:fc:
77:2b:c0:ec:b4:0e:6a:e0:76:6f:a0:ed:74:0f:77:
fe:e2:76:cd:a1:84:e9:03:6f:54:99:41:b9:37:7e:
6b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:68:77:8D:C4:89:85:82:5B:5F:0F:3D:A3:88:C9:BF:40:72:88:0F
X509v3 Authority Key Identifier:
keyid:53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:1f:ae:3c:0d:7c:5f:30:e6:89:12:24:fd:7b:79:2d:91:df:
10:16:71:77:40:f2:a2:b2:b2:98:08:ac:5a:15:ee:9f:9b:75:
4a:a1:61:cf:22:f0:bf:80:9d:ae:9f:db:ef:2f:5b:bc:98:41:
bc:01:07:db:c7:b9:4d:5e:4a:33:78:09:b0:79:68:74:bf:ca:
1a:5d:a6:d1:3a:d6:96:bb:0e:2d:08:49:fe:22:d3:5f:fc:63:
11:f6:04:e3:44:bc:e5:46:f5:7b:e2:7b:8b:aa:08:77:ec:09:
47:35:97:eb:33:08:67:ef:84:58:84:6c:7b:2a:a5:6f:90:78:
f3:8c:6d:50:9a:f9:ff:44:30:47:28:9e:5a:34:77:de:3e:6c:
23:c7:d4:da:48:0f:c5:d3:fe:34:be:d6:63:b7:e5:04:2b:bc:
76:cd:73:e7:d8:26:d2:7e:9c:f3:c7:46:dc:64:22:26:b7:bc:
36:4e:64:08:06:ee:3a:12:9a:3d:9b:52:13:c6:80:1c:b6:63:
ca:fe:08:64:17:27:57:d1:88:7b:37:d8:1d:42:f9:56:44:1b:
d7:79:a5:74:cc:2f:bc:ad:c3:75:e1:42:d8:74:72:5a:5f:6f:
75:25:06:30:0c:08:04:17:e1:ee:8e:11:50:09:a4:b0:09:d4:
96:a4:7a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:55:07 2026 by rpki-client