Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
File: U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft (raw, json)
Hash identifier: aYxmeKPX76JCzIRgiMv8EFRrl6kAtT3GDTk2Zo169MM=
Subject key identifier: 86:84:4E:D5:31:52:70:93:B1:62:74:52:EF:BF:A1:ED:5B:53:70:7C
Authority key identifier: 53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
Certificate issuer: /CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Certificate serial: 019D26CD7CB7E5F392C715CB78C5F67F2C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
Manifest number: 15D4
Signing time: Wed 25 Mar 2026 21:01:34 +0000
Manifest this update: Wed 25 Mar 2026 21:01:34 +0000
Manifest next update: Thu 26 Mar 2026 21:01:34 +0000
Files and hashes: 1: U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl (hash: 1XLNgOwIarClBdymEbypyIOktsL2WqvuMmWs6I2PrMA=)
2: Xn8q_66t7wzhb4v1l5kcWKBFQNs.roa (hash: 6vO+ulMoF82yem5grlAhBfA3FaHkdUHzR33O3qHwMWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:7c:b7:e5:f3:92:c7:15:cb:78:c5:f6:7f:2c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Validity
Not Before: Mar 25 21:01:34 2026 GMT
Not After : Mar 26 21:01:34 2026 GMT
Subject: CN=86844ed531527093b1627452efbfa1ed5b53707c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d3:1b:3d:8c:96:e1:2a:98:ae:49:16:e3:56:
0f:9f:d4:d7:f0:04:f8:9b:95:67:84:33:f2:3c:a5:
b5:94:af:dd:c0:31:56:a0:b4:3f:7c:2d:42:15:02:
71:fa:d8:16:f5:81:db:39:2d:f2:21:34:d7:7e:b4:
f0:bf:ec:13:2c:a3:b1:5d:f4:00:7a:e9:bb:bd:26:
9b:e1:38:d8:ac:d5:60:ee:7c:38:b3:ab:9c:cd:bd:
a8:fb:a4:70:1a:49:48:c3:53:26:f9:78:1b:0b:0d:
39:a0:ac:ec:91:d5:6e:e8:ab:d8:1a:25:40:c3:82:
2c:f8:a5:6e:39:09:70:d8:11:74:4d:0d:db:43:61:
5b:b8:4f:d7:8e:5a:db:90:a0:31:b2:74:18:fb:43:
be:80:0f:42:67:c9:a0:ce:3b:13:0e:5f:39:8e:37:
25:c6:69:ac:2f:f9:38:13:8d:92:47:a2:05:3a:95:
3f:a7:13:2c:30:14:dc:d4:33:7d:48:48:e3:db:17:
b3:b7:1f:7c:cc:49:51:0f:bf:0b:c2:e0:9e:52:a4:
9d:4b:f9:47:37:43:17:85:77:2d:47:d9:d4:3a:51:
37:5c:5c:ff:8f:5a:d7:9a:8b:14:e5:b3:11:ad:f4:
e6:e1:40:e1:41:10:5d:b0:74:a2:e9:cd:9c:2a:dd:
d6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:84:4E:D5:31:52:70:93:B1:62:74:52:EF:BF:A1:ED:5B:53:70:7C
X509v3 Authority Key Identifier:
keyid:53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:27:60:42:c7:99:13:9f:42:39:25:8f:f3:7c:9c:c0:9a:af:
b2:df:30:c0:90:33:b4:dd:b5:15:a7:2f:2d:dd:98:cb:f8:ca:
7a:2e:d6:6d:43:7b:b8:43:c5:ae:a5:1a:83:ea:1d:44:ab:8d:
52:c0:b2:55:27:c0:d4:4d:a9:2b:1c:9a:5c:f4:f9:53:d6:d0:
4c:dc:69:17:04:fc:0b:eb:29:ff:1f:65:36:9a:09:5f:6a:8d:
b0:23:bb:15:5d:07:21:6d:f4:03:f9:2f:86:1e:24:e2:37:d4:
2b:64:8c:b7:7c:0b:82:e2:03:97:e5:f2:75:16:e5:7e:46:f2:
0e:3e:9e:bc:ec:ef:88:47:be:d9:95:74:96:ad:81:40:48:c9:
cc:5a:e8:9b:17:b1:e4:8c:cc:e4:d5:34:c4:ce:13:02:cb:c0:
3d:8c:46:b8:85:bf:2c:30:db:4a:2d:71:61:37:80:4d:db:63:
51:81:dc:43:78:2e:6d:89:9f:e9:e1:96:e4:58:46:32:ed:ae:
fd:94:6f:5f:4d:a2:65:53:c9:ee:05:29:28:3f:22:82:34:e2:
d1:b4:37:83:be:64:97:7b:ae:fb:ec:a9:1c:2c:25:91:4c:c1:
d2:d3:c4:97:26:3f:fb:ca:7e:be:90:41:fd:fc:74:b1:cd:a2:
ec:52:79:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:40:32 2026 by rpki-client