Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
File: _u3yFAZ0rm_z5GRWDElWq24hre4.mft (raw, json)
Hash identifier: V10pKMyuWtpGnFbzSOblhn3z1DQavKYljdb/+XLV5VM=
Subject key identifier: 43:E0:61:F4:9D:27:6C:44:2C:29:38:76:D0:2A:FF:55:E5:E1:02:8E
Authority key identifier: FE:ED:F2:14:06:74:AE:6F:F3:E4:64:56:0C:49:56:AB:6E:21:AD:EE
Certificate issuer: /CN=feedf2140674ae6ff3e464560c4956ab6e21adee
Certificate serial: 019D27A9034CA1D0780327E6A95DADD77E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
Manifest number: 0CD1
Signing time: Thu 26 Mar 2026 01:01:20 +0000
Manifest this update: Thu 26 Mar 2026 01:01:20 +0000
Manifest next update: Fri 27 Mar 2026 01:01:20 +0000
Files and hashes: 1: _u3yFAZ0rm_z5GRWDElWq24hre4.crl (hash: NHW95nssgAMrTZdhTHy+h8islMzYXs9Yj2HyhpqOLCE=)
2: bpf4dnvqIQj9FFsj01pROUqFMUY.roa (hash: lZnPqgOEDd6XO2vVnnKuHMXawH4M5SYKAszZ/MqTlPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:03:4c:a1:d0:78:03:27:e6:a9:5d:ad:d7:7e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feedf2140674ae6ff3e464560c4956ab6e21adee
Validity
Not Before: Mar 26 01:01:20 2026 GMT
Not After : Mar 27 01:01:20 2026 GMT
Subject: CN=43e061f49d276c442c293876d02aff55e5e1028e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:32:3e:34:4b:f9:46:84:65:49:f6:af:a0:f2:
67:57:99:93:a1:60:0b:d3:34:7b:b4:be:ee:74:b8:
e2:9d:4d:94:5e:08:81:67:21:44:94:f1:80:fc:18:
c5:6b:0c:39:be:9c:cc:c9:6b:53:f1:f8:4d:e5:c9:
8a:05:fc:0e:9c:46:de:43:1f:68:f0:7f:20:3a:8c:
d6:ab:3b:40:5e:0c:11:62:c9:e7:bd:92:6f:f1:d0:
67:7d:c1:29:ea:a6:fc:a0:1b:5c:01:5b:18:f8:55:
b9:b8:9f:9b:ec:b4:5a:13:a6:6b:ce:83:93:ca:e9:
68:e6:cc:44:77:a4:5f:c9:78:49:cc:69:16:65:4b:
84:df:91:53:7a:fd:32:75:69:1e:cd:d1:81:ec:91:
c7:a5:8c:97:84:01:44:b7:bf:c7:c7:52:62:14:c9:
6d:9e:2f:8f:3e:7a:6f:c0:62:42:c8:a4:4b:ff:2d:
69:bc:2b:8f:fe:26:95:33:90:06:00:e9:bc:f7:05:
71:cf:bd:21:ab:c3:b8:e6:dc:de:9a:7d:7c:64:73:
fc:b5:96:d9:f3:4e:33:d8:46:76:50:79:98:3b:ce:
05:c6:c9:9c:c6:d7:7d:d1:02:17:53:43:6a:63:d7:
fa:28:15:1f:bd:d8:50:14:89:64:b9:0a:55:ec:e8:
38:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E0:61:F4:9D:27:6C:44:2C:29:38:76:D0:2A:FF:55:E5:E1:02:8E
X509v3 Authority Key Identifier:
keyid:FE:ED:F2:14:06:74:AE:6F:F3:E4:64:56:0C:49:56:AB:6E:21:AD:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:27:77:1a:ea:2e:35:2c:a2:58:e0:d4:00:ba:aa:50:2b:ff:
77:d2:6c:d7:b3:1e:91:d4:75:46:b1:34:69:bb:d9:6a:07:dd:
99:01:23:8a:cd:d0:ae:85:ba:05:9e:50:5b:a1:ce:40:c9:f7:
4c:b0:9e:8d:38:9a:d0:cc:f9:45:7a:f7:38:43:ab:50:e9:a2:
ab:20:16:e5:02:eb:6d:5f:ef:f0:f6:31:96:8b:33:37:d3:d9:
f8:41:98:f3:f0:ae:c1:1a:40:55:3f:57:68:bc:7e:fa:b6:0c:
47:18:a0:e1:a1:64:75:19:a3:47:42:13:68:40:37:5a:94:1c:
c9:35:a7:84:07:44:8f:6c:98:a9:ec:4a:ae:58:6b:a6:d0:6a:
0f:e3:42:ed:b1:e3:01:53:53:92:5c:e7:78:f4:11:0d:8a:8d:
e4:2b:c0:7c:2a:bb:a6:b7:99:a7:54:43:80:28:fc:a2:3e:47:
47:37:06:04:10:d4:66:91:79:b1:e6:5a:31:5b:12:39:a3:0f:
d0:3a:f4:de:ad:01:a9:0f:f2:01:9e:bd:32:94:6d:a4:0e:f8:
1e:6e:42:56:f3:52:db:99:65:f1:35:0e:c0:99:f0:a5:6c:40:
53:c8:20:1f:eb:79:78:48:f9:f9:07:44:80:1e:62:48:d2:67:
95:5a:a0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:45:48 2026 by rpki-client