Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
File: U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft (raw, json)
Hash identifier: ClgAx8ZjDZyeLffmvrCKMyq6RL6dYDkuGpsdlOFko3E=
Subject key identifier: 80:6F:64:AD:5C:70:D8:37:E6:D0:78:21:A4:56:E7:0D:C1:6C:19:D7
Authority key identifier: 53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
Certificate issuer: /CN=535a0905ad5684f414182c99e1ed998163093001
Certificate serial: 019D25F2012783440377A24D4CBF3427C92B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 17:01:50 +0000
Manifest this update: Wed 25 Mar 2026 17:01:50 +0000
Manifest next update: Thu 26 Mar 2026 17:01:50 +0000
Files and hashes: 1: 1-OdbV9pffyE-MtyJfK7HNQXo7NI.roa (hash: BTb2LGVfDU/NF7VOnzuEayBkQx1CY6SsEpcdjflREFo=)
2: U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl (hash: NN0FPBQthBs16NFS31pWsTSS4i3NoNN24PtVOYSXTl0=)
3: dLJKUxaN6lGmKQZKOER9LafS-VU.roa (hash: avkp8AIkxpP6EiwxL7+BnoTzdDtAkOmhGqUZUTqV12w=)
4: kUCFqt07I3jOUhsa9vnLRiDNVxk.roa (hash: 5MGQy531WnFyAMvE7uD+I/swY7k4A1YC68qxb4dhi1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:01:27:83:44:03:77:a2:4d:4c:bf:34:27:c9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535a0905ad5684f414182c99e1ed998163093001
Validity
Not Before: Mar 25 17:01:50 2026 GMT
Not After : Mar 26 17:01:50 2026 GMT
Subject: CN=806f64ad5c70d837e6d07821a456e70dc16c19d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8c:04:52:1f:e0:f0:e1:aa:86:3e:56:2b:b1:
1a:b4:3b:93:73:6f:5c:48:92:50:4d:1f:52:73:10:
7e:14:2f:73:6f:04:0d:e9:8c:38:dc:dc:ce:8b:8d:
b2:3c:e8:35:2e:3e:d3:e4:44:c1:de:a3:f1:d5:cf:
5b:de:e6:76:f2:4d:b5:e4:cc:d9:d1:6b:ef:9c:35:
9e:3c:c5:4e:62:61:80:11:44:ff:2e:f8:89:4d:6b:
82:10:c0:83:6a:c3:84:83:bc:45:ff:33:13:2c:2c:
e5:f8:0e:d4:54:22:de:a5:47:e0:15:bc:31:48:5e:
2b:7e:15:96:56:ae:ae:dc:ec:e4:e6:77:6a:2b:c0:
44:8b:6c:12:85:df:cd:ff:aa:78:26:28:1f:1f:b0:
c1:9d:81:d2:be:1d:74:5c:6b:e1:bf:70:02:8c:e8:
b9:fb:25:3d:44:83:7f:cf:c2:ed:14:5e:56:5e:14:
b6:5c:64:3a:93:52:5b:ac:f5:d4:38:0a:75:f9:3c:
f6:e4:6b:c2:19:48:bb:91:cf:2e:df:00:68:bc:3d:
8b:e6:77:2c:e5:3c:8a:31:f8:dc:b2:ea:dc:c1:7b:
e5:3b:6a:20:5e:e8:6c:f6:c9:b8:c8:46:c1:14:26:
9c:eb:b5:9f:e3:0b:77:4e:4a:a8:f7:75:9b:94:22:
33:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6F:64:AD:5C:70:D8:37:E6:D0:78:21:A4:56:E7:0D:C1:6C:19:D7
X509v3 Authority Key Identifier:
keyid:53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:3d:ca:94:17:f2:2e:f8:b5:07:06:23:50:09:a3:b1:32:a3:
b8:e9:6c:1a:1d:7e:89:98:15:73:52:b4:80:fa:ae:52:e3:7b:
cf:d9:cb:b9:6e:2f:ae:30:e5:27:1d:d7:42:2f:6e:cf:5d:6e:
31:2c:89:6f:70:8b:e1:18:8f:ac:a7:c0:15:a7:80:f0:95:49:
a7:91:53:c7:5e:e4:82:f2:7f:2f:53:5b:b2:da:25:2a:f7:73:
52:19:68:99:65:fa:70:50:f6:29:d0:e8:be:30:cb:94:98:fe:
fb:02:34:4f:2c:f1:88:ad:09:b1:26:2f:aa:7b:0b:33:34:6c:
ec:af:d0:2a:6d:a7:3c:3b:65:d4:57:8a:17:f7:fa:0d:b9:0a:
ee:08:f6:a0:c4:62:2c:58:80:db:ed:45:5d:29:ca:07:e4:d4:
63:da:b7:84:39:65:a2:ea:1d:a3:55:1b:ad:0b:8b:0f:fc:c8:
9d:d4:0b:7d:cc:34:fe:fe:92:1b:5e:c3:9b:5c:2a:ce:5a:2b:
c0:e3:30:c4:96:84:8e:d3:d9:af:f3:1a:4d:f9:a5:e5:01:2f:
79:84:15:f5:d9:94:5c:03:92:48:8d:54:ff:93:77:fe:46:0f:
ee:3e:bf:1f:ff:05:2e:6a:7d:50:fa:93:10:39:47:5f:f6:27:
37:c2:13:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:43 2026 by rpki-client