Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
File: U7EFBlwNkTm1_-3DLJAM9ktDEus.mft (raw, json)
Hash identifier: 8QPmMfnwT+dWPWJ+UZl0mdUD8cBUSLSZeTMp+AGyU40=
Subject key identifier: 68:23:9A:AA:D3:A6:D2:7A:2C:E3:3A:3F:AB:58:64:CF:E1:DC:8C:70
Authority key identifier: 53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB
Certificate issuer: /CN=53b105065c0d9139b5ffedc32c900cf64b4312eb
Certificate serial: 019D2816CC2DBE5AFDFE3B7A25CDC6FF3360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 03:01:15 +0000
Manifest this update: Thu 26 Mar 2026 03:01:15 +0000
Manifest next update: Fri 27 Mar 2026 03:01:15 +0000
Files and hashes: 1: U7EFBlwNkTm1_-3DLJAM9ktDEus.crl (hash: tZiarPCVFxnl2LRcmJ8kIcwAObVXsnyKoXhOCg9p2O8=)
2: aVXhAizmDepCVOoLPu585d5UOlQ.roa (hash: YB+GHVOhQos2qu1NUzfo9daXC5WuIe75DyabTVAx7KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:cc:2d:be:5a:fd:fe:3b:7a:25:cd:c6:ff:33:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b105065c0d9139b5ffedc32c900cf64b4312eb
Validity
Not Before: Mar 26 03:01:15 2026 GMT
Not After : Mar 27 03:01:15 2026 GMT
Subject: CN=68239aaad3a6d27a2ce33a3fab5864cfe1dc8c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7a:fa:95:65:08:84:72:cf:73:08:09:f6:88:
78:64:b4:fa:be:15:d3:8e:4a:1a:c6:51:36:70:ac:
17:57:ef:f8:d2:e4:4f:c2:20:c1:d1:3d:1d:8f:01:
07:b9:2d:12:b1:58:21:b7:bd:f3:0f:9b:48:d7:74:
58:de:72:17:a4:35:0f:15:9e:ae:4f:48:ea:a1:a9:
e1:12:9b:ab:51:32:75:b6:a5:29:85:46:3e:b1:31:
b7:fa:29:06:cf:e7:c6:6e:6e:3d:f3:58:78:d4:65:
72:9e:d7:70:76:14:7d:4f:9c:df:a6:30:c4:c3:ba:
14:c0:a5:f3:a9:1c:f0:ff:ff:7b:63:35:82:2f:9f:
e6:ac:cf:12:9d:8c:85:97:73:96:e0:c1:d9:1f:18:
ff:87:96:82:f4:60:d3:5c:15:e9:a1:c8:b8:d7:c4:
66:9c:9a:f2:ed:4c:ac:f5:eb:ba:3d:60:cd:e1:9c:
ae:65:fb:dc:99:57:b6:67:19:60:6b:d0:04:df:87:
09:42:f2:0c:c0:e9:87:bc:22:8d:27:ea:f4:c2:d1:
f2:49:c3:e3:5e:78:ff:dc:d3:7b:fc:7f:0f:8d:ba:
bb:b5:da:77:7e:ec:23:d1:28:88:f8:f8:29:43:cd:
96:fb:c4:42:a2:9c:78:f1:2b:02:25:91:d1:18:3f:
28:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:23:9A:AA:D3:A6:D2:7A:2C:E3:3A:3F:AB:58:64:CF:E1:DC:8C:70
X509v3 Authority Key Identifier:
keyid:53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:38:9a:6c:32:39:44:a6:e0:ae:be:cc:e7:de:94:ac:12:5c:
a4:22:5c:11:37:ee:eb:00:c0:08:09:75:67:c1:6b:f3:96:f7:
33:61:9d:2e:92:cd:7f:49:b7:1c:f4:e8:22:18:b5:09:e1:05:
f2:61:d0:19:5e:b0:a7:e8:6d:aa:b1:a1:e0:d8:f9:c7:89:78:
d7:f2:e9:7e:bc:0a:ed:b8:c4:d7:43:29:b9:3a:6a:dd:64:80:
50:d5:11:f2:49:e5:6e:ec:2a:4c:f9:cf:73:e4:85:73:91:a2:
06:dc:84:16:f4:46:85:05:fe:b7:16:04:f5:ce:8f:01:1b:d7:
24:28:e9:5a:c8:a9:29:a1:b8:94:65:31:17:21:00:97:b3:0b:
d6:4f:74:82:41:ec:69:f2:b1:65:7f:51:b2:b9:3e:00:47:68:
07:4d:37:ae:12:33:04:d6:e6:b1:0d:83:52:ee:18:fc:b9:73:
c2:ca:1d:56:64:a2:27:4e:97:e3:2a:ae:30:44:cd:6f:dc:a1:
7e:da:83:f0:c8:a6:03:a5:25:13:89:c5:08:98:9d:e1:bf:48:
0d:58:fc:18:dc:12:8f:f3:eb:8c:b2:57:a5:38:b3:eb:2b:b0:
20:cb:1a:3a:ab:eb:ca:38:01:8a:68:21:9e:20:31:0c:ed:a8:
ab:f3:e1:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFswtvlr9/jt6Jc3G/zNgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYjEwNTA2NWMwZDkxMzliNWZmZWRjMzJjOTAwY2Y2NGI0
MzEyZWIwHhcNMjYwMzI2MDMwMTE1WhcNMjYwMzI3MDMwMTE1WjAzMTEwLwYDVQQD
Eyg2ODIzOWFhYWQzYTZkMjdhMmNlMzNhM2ZhYjU4NjRjZmUxZGM4YzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Xr6lWUIhHLPcwgJ9oh4ZLT6vhXT
jkoaxlE2cKwXV+/40uRPwiDB0T0djwEHuS0SsVght73zD5tI13RY3nIXpDUPFZ6u
T0jqoanhEpurUTJ1tqUphUY+sTG3+ikGz+fGbm4981h41GVyntdwdhR9T5zfpjDE
w7oUwKXzqRzw//97YzWCL5/mrM8SnYyFl3OW4MHZHxj/h5aC9GDTXBXpoci418Rm
nJry7Uys9eu6PWDN4ZyuZfvcmVe2Zxlga9AE34cJQvIMwOmHvCKNJ+r0wtHyScPj
Xnj/3NN7/H8Pjbq7tdp3fuwj0SiI+PgpQ82W+8RCopx48SsCJZHRGD8ojQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgjmqrTptJ6LOM6P6tYZM/h3IxwMB8GA1UdIwQY
MBaAFFOxBQZcDZE5tf/twyyQDPZLQxLrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTdFRkJsd05rVG0xXy0zRExKQU05a3RERXVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84MWMwOTEtMGE0ZS00MDA1LWJlMjIt
YTdlODY0NTNhYmNkLzEvVTdFRkJsd05rVG0xXy0zRExKQU05a3RERXVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC84MWMwOTEtMGE0ZS00MDA1LWJlMjItYTdlODY0NTNhYmNk
LzEvVTdFRkJsd05rVG0xXy0zRExKQU05a3RERXVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTiabDI5
RKbgrr7M596UrBJcpCJcETfu6wDACAl1Z8Fr85b3M2GdLpLNf0m3HPToIhi1CeEF
8mHQGV6wp+htqrGh4Nj5x4l41/LpfrwK7bjE10MpuTpq3WSAUNUR8knlbuwqTPnP
c+SFc5GiBtyEFvRGhQX+txYE9c6PARvXJCjpWsipKaG4lGUxFyEAl7ML1k90gkHs
afKxZX9Rsrk+AEdoB003rhIzBNbmsQ2DUu4Y/LlzwsodVmSiJ06X4yquMETNb9yh
ftqD8MimA6UlE4nFCJid4b9IDVj8GNwSj/PrjLJXpTiz6yuwIMsaOqvryjgBimgh
niAxDO2oq/PhAA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:22 2026 by rpki-client