Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
File: U12xQ-kGqiDleCkH-EXUp2li_3s.mft (raw, json)
Hash identifier: ILZTZxBSaIkrC4QPDupENvGuZbTRsY3XCKdrOGJr6FU=
Subject key identifier: 85:70:81:C3:D6:AB:46:E1:EC:9C:4C:88:0B:AF:21:83:74:42:06:F0
Authority key identifier: 53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
Certificate issuer: /CN=535db143e906aa20e5782907f845d4a76962ff7b
Certificate serial: 019D2816A59E92541E52B59FEDB532DF265E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
Manifest number: 15C8
Signing time: Thu 26 Mar 2026 03:01:05 +0000
Manifest this update: Thu 26 Mar 2026 03:01:05 +0000
Manifest next update: Fri 27 Mar 2026 03:01:05 +0000
Files and hashes: 1: 1-_iuOiCq6wrrlu0U_bsrNgalB5U.roa (hash: CFs95qJY3OCkwLKNDcwjofH0U54eBPgPiR2T2rDBUA0=)
2: U12xQ-kGqiDleCkH-EXUp2li_3s.crl (hash: vERrVksJE9K3uF2gPxYeEbLEhORZeupoNlPKQ6+qGJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:a5:9e:92:54:1e:52:b5:9f:ed:b5:32:df:26:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535db143e906aa20e5782907f845d4a76962ff7b
Validity
Not Before: Mar 26 03:01:05 2026 GMT
Not After : Mar 27 03:01:05 2026 GMT
Subject: CN=857081c3d6ab46e1ec9c4c880baf2183744206f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0c:4b:c1:ff:11:8c:c6:00:eb:1a:56:49:73:
48:99:b1:7f:28:60:5e:3b:9b:4e:b2:80:2b:65:b4:
6b:7a:8a:7e:6e:20:f4:b7:93:21:9a:88:67:be:af:
e6:56:a8:56:49:96:46:39:c5:09:87:09:3c:94:91:
a2:aa:1b:b6:9b:e2:ef:7d:89:00:56:ed:e0:fc:ed:
f4:d6:73:23:78:07:3b:20:83:db:89:2b:d5:df:2a:
22:9c:11:40:3a:34:20:f8:63:70:73:e5:35:47:47:
7a:9f:56:94:32:fa:f2:6b:c3:aa:5a:85:1f:8d:86:
ef:ae:27:85:95:55:2e:56:d0:99:1b:3f:44:f0:7e:
93:38:bb:e5:16:db:08:dc:5a:ba:b3:56:78:0c:f6:
57:95:06:b9:5d:ab:04:a5:24:a2:44:46:a8:19:f0:
fe:c8:e7:c6:02:48:08:44:03:f1:f7:31:d4:5c:12:
a6:05:0b:56:bc:62:5c:95:40:2b:1b:85:d0:a0:58:
4e:e1:1e:d0:4c:6c:f2:de:8e:b4:14:e1:d0:35:7d:
cd:52:58:ca:0a:cd:b1:18:03:52:39:84:00:f9:3c:
7d:bf:b9:4d:32:5d:20:23:37:fe:2d:9e:b1:62:5d:
76:94:5d:b7:1b:28:df:59:a6:fb:b5:94:8a:9d:c5:
11:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:70:81:C3:D6:AB:46:E1:EC:9C:4C:88:0B:AF:21:83:74:42:06:F0
X509v3 Authority Key Identifier:
keyid:53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9f:f8:32:dd:62:9f:38:76:4d:da:a6:18:27:19:26:90:5c:
4a:94:b5:20:c6:9f:b3:f7:0f:6f:03:e0:44:dd:6c:a1:b2:70:
a3:4e:ee:dc:17:82:85:56:5e:22:8b:a9:2e:26:af:06:6b:57:
25:b4:e9:c7:8e:4c:c9:0e:14:53:a0:d4:56:84:bb:6d:34:ed:
9d:bc:3a:24:2c:1f:46:92:96:e9:3a:96:af:e4:58:a2:b7:b5:
64:31:ec:30:43:33:ab:48:b2:31:ba:fa:bd:c7:49:81:7c:ff:
da:25:8a:f5:15:a0:1e:c8:33:e1:c8:f6:00:df:ce:d3:60:1b:
41:d7:c5:78:9c:a4:8a:ed:db:1d:ca:6e:1e:fd:b8:0b:cc:2e:
79:75:27:ec:a0:17:3c:6b:54:e1:14:64:3d:08:79:ea:2d:99:
12:2a:97:d9:a0:65:f3:99:d3:68:6c:d3:13:7a:96:b2:4c:8f:
fe:52:05:b0:16:c1:f0:a0:a2:e1:0b:81:9f:ed:6c:95:16:91:
f9:8a:6b:48:e3:5f:d8:b8:0f:48:fd:73:51:78:f7:38:00:c1:
9e:11:49:93:ad:59:d0:a5:b0:33:b3:70:1b:e2:92:4d:e2:d7:
e7:9a:2e:18:a0:d2:b5:f3:24:23:dd:d4:6a:52:65:08:7c:00:
7d:f0:10:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:56:15 2026 by rpki-client