Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
File: U0eCGSFVj2agN_6coNzBBGz0hOA.mft (raw, json)
Hash identifier: Kdhq9sBql4/CiV1Q2NBfbNdHXr1wJosLW08go4yFLFA=
Subject key identifier: 37:69:3D:87:97:88:7D:93:A8:2D:48:E0:98:C8:FE:7A:5F:A4:59:C6
Authority key identifier: 53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0
Certificate issuer: /CN=5347821921558f66a037fe9ca0dcc1046cf484e0
Certificate serial: 019D29CE9904DD1B79FC495B7987BB64877B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 11:01:38 +0000
Manifest this update: Thu 26 Mar 2026 11:01:38 +0000
Manifest next update: Fri 27 Mar 2026 11:01:38 +0000
Files and hashes: 1: B8DoC5brIbdcKCleVmQPvjtWXBY.roa (hash: fwuSLYiomHoCM+ValZyW+pJ6ZXG5StCk1C5NhErYdTA=)
2: U0eCGSFVj2agN_6coNzBBGz0hOA.crl (hash: 5iQTD6RPycQOs0Gb+tqkXyp1qCU+YmRUsDt6SAjrll4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:99:04:dd:1b:79:fc:49:5b:79:87:bb:64:87:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5347821921558f66a037fe9ca0dcc1046cf484e0
Validity
Not Before: Mar 26 11:01:38 2026 GMT
Not After : Mar 27 11:01:38 2026 GMT
Subject: CN=37693d8797887d93a82d48e098c8fe7a5fa459c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ff:4b:f6:c8:e7:14:06:f5:c1:a6:be:e3:d3:
49:02:1f:90:50:7c:f8:f1:64:58:97:93:f3:33:b4:
50:a4:b0:d6:aa:dd:6b:e0:18:6a:77:d3:5a:cd:09:
27:78:e4:f2:d7:49:75:f4:45:a6:22:dd:c3:09:dc:
2f:84:65:b6:40:ef:71:83:17:fe:bc:42:ed:46:ca:
f6:7f:9a:7e:a5:a5:d9:06:3a:95:ad:ea:dd:bd:a7:
84:99:98:e0:fb:85:de:2f:61:50:d0:1e:0a:24:39:
b2:61:91:86:3f:65:3b:9d:30:7e:6d:08:1f:d2:ff:
c6:63:e5:ba:43:31:16:a4:1a:4d:09:2a:26:ce:80:
7e:fe:f9:94:1b:65:63:2c:5b:71:9f:a6:b6:70:03:
4e:e5:d6:11:17:a3:d9:90:85:87:df:13:e1:20:6d:
1a:0f:1a:1f:cc:95:9e:0e:d1:04:ac:51:22:cc:b7:
b7:3d:f2:40:0f:4b:55:35:78:b0:23:ec:43:e0:81:
97:a6:d3:31:e2:4c:26:29:99:e5:1a:28:d6:80:b9:
df:ea:27:23:d5:ee:8e:6f:24:c5:30:6a:73:56:a7:
a6:ca:af:ac:40:39:cd:36:15:ac:d0:69:7d:82:0e:
73:97:dc:25:c2:ad:bf:2c:c1:fa:48:09:79:7b:9e:
77:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:69:3D:87:97:88:7D:93:A8:2D:48:E0:98:C8:FE:7A:5F:A4:59:C6
X509v3 Authority Key Identifier:
keyid:53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:eb:22:0f:a0:80:cd:c9:dd:b5:dc:20:d3:bb:40:85:27:2f:
ea:36:8d:6b:4f:1d:7a:88:d4:2c:ea:4b:48:2e:de:a3:70:37:
a6:72:7b:fe:32:fb:b3:3a:ec:9c:0a:07:d8:c6:2d:4e:54:9d:
4a:68:88:ec:f0:83:4b:e2:eb:b9:27:12:ca:4f:33:5c:13:ab:
27:ab:13:4c:69:ba:c2:18:ec:12:d8:9e:ab:08:6a:94:ed:02:
8d:47:58:d4:cb:84:aa:7c:3f:08:6d:72:f1:c7:b5:d5:d1:ce:
eb:47:a3:cb:28:ed:33:4e:95:c5:04:ea:99:c7:2f:9e:d6:26:
03:c8:45:6e:cf:e4:29:7a:e2:dc:07:09:13:6c:a9:1b:42:5a:
d2:d2:ac:55:48:75:b2:a9:89:67:ca:0f:23:17:86:52:b9:39:
a7:07:71:75:88:d0:cd:c9:0b:70:19:f5:b4:39:e9:f9:6e:8e:
19:bb:eb:50:41:7a:7c:1b:e5:25:6c:a3:59:aa:34:58:14:56:
03:6d:71:6a:38:de:4f:e3:d7:ee:0c:93:c7:9c:2a:07:da:54:
5f:9f:4c:d4:3c:fb:cc:1c:92:0a:96:7a:20:4d:cf:37:8d:a0:
c6:70:71:57:78:9c:64:ae:22:06:dd:6c:a1:3e:a7:08:9e:2e:
2a:a1:52:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:06 2026 by rpki-client