Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
File: U0lylWvf-DsNiB4Br9PWxSZR4Es.mft (raw, json)
Hash identifier: hkthSzXVjeLgLYOq3xSk+xMJ6nU74GympsBR8VQvDEw=
Subject key identifier: 07:58:25:4E:E5:94:AB:DB:53:71:29:88:E5:8B:8E:2A:42:65:07:B4
Authority key identifier: 53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B
Certificate issuer: /CN=534972956bdff83b0d881e01afd3d6c52651e04b
Certificate serial: 019D29974D65A17B737C8543F514E7D350CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
Manifest number: 0936
Signing time: Thu 26 Mar 2026 10:01:14 +0000
Manifest this update: Thu 26 Mar 2026 10:01:14 +0000
Manifest next update: Fri 27 Mar 2026 10:01:14 +0000
Files and hashes: 1: U0lylWvf-DsNiB4Br9PWxSZR4Es.crl (hash: Lkl05XX5Ngejj7hAD8PUTwOJ3uPR/NQ52OX4g5Xe1/g=)
2: r2FzkDk8bJYrPqzaqgtlaBonfqk.roa (hash: f1HN7BXYId6gEL/AZojIIht1vxFDri+lbHrSLek1YkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:4d:65:a1:7b:73:7c:85:43:f5:14:e7:d3:50:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534972956bdff83b0d881e01afd3d6c52651e04b
Validity
Not Before: Mar 26 10:01:14 2026 GMT
Not After : Mar 27 10:01:14 2026 GMT
Subject: CN=0758254ee594abdb53712988e58b8e2a426507b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:82:2f:c2:71:04:d8:62:f4:0a:05:66:36:b2:
c5:8a:d2:ad:b9:31:43:89:71:a0:c4:99:3d:3f:30:
9f:99:8b:ea:ff:fc:0b:8c:d8:a2:83:42:36:fd:19:
53:4b:ab:f0:e3:26:85:0f:14:54:00:c6:83:a9:60:
97:b9:a5:59:3d:e0:43:1e:ce:de:51:a9:71:c8:ca:
67:bd:3f:ab:48:e1:0f:e9:a5:66:f9:0f:e1:0d:f9:
02:ea:46:6e:0f:df:33:74:5f:1a:24:ec:e5:7c:91:
b0:dd:83:93:e6:30:5b:40:95:53:f1:ae:80:f4:f1:
e3:e1:ee:ac:1b:3c:40:65:ed:59:25:ea:47:f9:27:
e3:19:07:b2:c9:97:4c:bc:33:06:7f:30:de:80:40:
b0:c8:85:14:5c:ea:81:50:91:96:12:f5:a1:9f:c9:
d6:e2:08:c3:e1:57:b5:1d:7a:1e:be:be:8a:d8:a3:
c0:2b:31:66:0e:e8:0c:6a:54:58:78:bb:d6:73:37:
01:7a:1d:2a:43:69:4c:41:46:16:9b:d3:9b:50:0f:
4f:e1:c5:b9:71:23:c3:71:fb:be:7c:05:ff:88:f9:
ee:a6:17:91:33:bd:f7:2c:80:ba:fe:28:a3:df:54:
0c:69:69:43:59:6a:f0:bf:80:c7:af:23:ce:84:a5:
f8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:58:25:4E:E5:94:AB:DB:53:71:29:88:E5:8B:8E:2A:42:65:07:B4
X509v3 Authority Key Identifier:
keyid:53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f0:59:e4:77:5b:46:a3:b2:4e:8d:d2:a9:7b:97:fc:09:84:
c0:63:2c:3f:d4:2a:b4:82:3c:bf:a4:e2:46:87:03:80:d9:e6:
ad:ee:da:0d:73:39:36:41:97:ac:17:14:30:7f:0e:3b:1d:7c:
fa:e9:00:37:75:19:ce:5f:a3:9e:26:c9:54:a1:66:60:41:ff:
0e:96:10:c0:d6:6c:09:06:5a:39:4e:a8:ae:cf:27:f1:ec:39:
59:f0:17:f8:dc:d1:18:03:07:27:78:c1:d7:dc:56:5b:a8:07:
f4:c3:a2:c2:50:23:64:55:53:69:f3:68:3f:9c:44:db:51:27:
ab:e4:50:f7:ad:3d:3a:1a:4c:e2:b3:f3:39:e0:e8:93:39:12:
3a:a0:92:95:ff:54:63:cf:d1:a6:40:6a:68:2a:90:0b:2a:9e:
88:67:8c:d5:e6:28:24:d2:ff:a8:10:be:5f:10:4b:0b:de:6f:
1a:1d:c8:be:07:d7:87:7f:c3:f3:cd:5d:af:c2:a0:a2:08:f2:
dc:e0:f1:01:9e:5a:79:4f:56:b8:09:b3:58:58:22:a2:2d:08:
a2:18:35:a2:f9:8a:62:9e:ea:2f:8b:d4:f8:95:41:ec:8c:10:
01:a7:09:6c:d7:47:19:d1:14:a5:1a:e5:79:64:8d:a9:9b:5d:
01:04:1c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:47:31 2026 by rpki-client