Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d0b571-3276-4177-8163-0069030763db/1/U2XQP9hSJnTrF6x2cpTNEfcpOdE.mft
File: U2XQP9hSJnTrF6x2cpTNEfcpOdE.mft (raw, json)
Hash identifier: nuIstOw7P/fy66G6uFUp8gw3Cf9C101neegfzahe0sA=
Subject key identifier: 1D:83:C3:F4:CB:F0:50:78:A5:DB:CC:D8:FD:62:60:E4:0F:3C:F2:E0
Authority key identifier: 53:65:D0:3F:D8:52:26:74:EB:17:AC:76:72:94:CD:11:F7:29:39:D1
Certificate issuer: /CN=5365d03fd8522674eb17ac767294cd11f72939d1
Certificate serial: 019D2A729EA977EFC4CCDB9815722CCB50A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2XQP9hSJnTrF6x2cpTNEfcpOdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d0b571-3276-4177-8163-0069030763db/1/U2XQP9hSJnTrF6x2cpTNEfcpOdE.mft
Manifest number: 01CC
Signing time: Thu 26 Mar 2026 14:00:47 +0000
Manifest this update: Thu 26 Mar 2026 14:00:47 +0000
Manifest next update: Fri 27 Mar 2026 14:00:47 +0000
Files and hashes: 1: U2XQP9hSJnTrF6x2cpTNEfcpOdE.crl (hash: cZjaY0YunCN5LyeHP/vajre3gqLyeI7S5f5tmKZPPxQ=)
2: gRIS3IOjEAgDn__cPvDxP1mU1_8.roa (hash: hSl8/IpiF3/9ilxJHWR9J4Hc4H+z1qdb5D3HNsLaVuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d0b571-3276-4177-8163-0069030763db/1/U2XQP9hSJnTrF6x2cpTNEfcpOdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d0b571-3276-4177-8163-0069030763db/1/U2XQP9hSJnTrF6x2cpTNEfcpOdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U2XQP9hSJnTrF6x2cpTNEfcpOdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:9e:a9:77:ef:c4:cc:db:98:15:72:2c:cb:50:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5365d03fd8522674eb17ac767294cd11f72939d1
Validity
Not Before: Mar 26 14:00:47 2026 GMT
Not After : Mar 27 14:00:47 2026 GMT
Subject: CN=1d83c3f4cbf05078a5dbccd8fd6260e40f3cf2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3d:b9:18:55:93:0d:12:f0:68:b3:6a:a5:c5:
b0:c2:46:43:8d:40:5b:07:4e:a9:38:2e:5c:e1:d3:
bf:12:68:c4:a1:c4:68:d4:e8:18:9e:3d:aa:69:fa:
4e:63:6d:9b:28:26:8f:6a:e3:15:9a:21:05:00:f8:
be:ae:f6:93:33:ac:5b:ac:10:3b:03:7e:3e:ab:e1:
81:90:cf:22:91:d9:6b:09:6b:87:3e:6b:8c:c8:63:
a3:c8:4a:97:5e:45:75:7e:f0:f9:65:19:6b:78:b4:
20:17:ed:89:a9:b2:01:90:2c:a7:65:05:80:86:77:
4d:e8:26:93:8f:08:c4:4b:0a:c5:4a:84:6d:bd:7a:
5f:d6:5c:9b:6f:08:23:ec:62:4e:96:96:62:ab:bc:
70:5c:2b:fe:84:8e:3d:ab:58:eb:0e:e4:88:29:47:
a7:4b:84:aa:5f:31:69:62:38:26:46:99:12:a3:4c:
f1:a3:b4:40:45:b6:61:4d:ec:a7:20:e6:62:ec:ba:
11:03:4f:62:9f:d3:67:c9:13:0d:c3:3d:49:d5:1d:
77:68:13:b1:5e:4b:63:4d:c0:2c:97:9f:96:75:c9:
4d:a4:01:c9:3e:57:4b:5a:c5:63:50:8d:83:40:d1:
39:28:da:cb:58:28:75:42:5e:fd:1f:80:c7:1d:c2:
14:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:83:C3:F4:CB:F0:50:78:A5:DB:CC:D8:FD:62:60:E4:0F:3C:F2:E0
X509v3 Authority Key Identifier:
keyid:53:65:D0:3F:D8:52:26:74:EB:17:AC:76:72:94:CD:11:F7:29:39:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2XQP9hSJnTrF6x2cpTNEfcpOdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d0b571-3276-4177-8163-0069030763db/1/U2XQP9hSJnTrF6x2cpTNEfcpOdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d0b571-3276-4177-8163-0069030763db/1/U2XQP9hSJnTrF6x2cpTNEfcpOdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:ed:01:0c:6a:53:3b:b8:30:b8:df:95:1c:b0:12:70:45:ad:
60:4f:46:87:a2:c0:a0:bd:ef:cc:71:01:21:ff:89:3e:7a:f4:
cc:99:64:d0:f1:84:23:ee:5a:65:44:25:e7:88:d6:da:d0:d1:
57:e9:96:71:74:3b:71:a6:55:c8:43:d8:d1:30:31:06:8a:b2:
cd:77:3e:fd:67:ca:86:e4:50:7c:22:f3:b4:7c:49:46:c3:da:
f7:4a:ec:0f:07:35:c9:1a:54:ea:f0:06:50:31:31:a3:30:3f:
71:54:d7:5b:4a:6c:da:17:53:b6:af:3e:7c:e7:8e:63:bb:74:
e7:53:19:e4:23:61:b2:18:16:7e:cf:77:e7:0b:fc:25:14:92:
32:c2:77:5d:d2:71:f9:51:78:d8:1f:4b:82:2c:30:d9:83:77:
22:fc:98:16:a0:fb:f7:1c:24:5c:c5:69:01:b8:74:5e:8e:22:
75:ee:2c:f3:c6:67:1c:54:9a:1d:8f:f6:9f:e4:7d:f6:6b:65:
b9:89:d1:8a:bd:76:8a:25:9f:14:6d:af:4b:56:8f:0f:6a:d9:
af:21:02:4b:38:44:1c:65:26:a9:38:e7:52:24:31:85:50:a4:
75:d0:7e:c1:a9:f3:95:3e:45:c4:5d:67:e0:64:bd:de:11:1f:
d6:e8:96:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:56:39 2026 by rpki-client