Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
File: U_azaGcjiqcYvhfm5zzkCpiVeKA.mft (raw, json)
Hash identifier: vO/o8hFSrqniYj6EdTkFHqb3Dv9aL/RsT2VpsUuLmOM=
Subject key identifier: C9:48:7D:B0:D0:60:CB:14:53:8C:86:E3:13:24:4E:AB:B7:15:4D:E3
Authority key identifier: 53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
Certificate issuer: /CN=53f6b36867238aa718be17e6e73ce40a989578a0
Certificate serial: 019D27DF95F96A5E0F87D842227233B70D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
Manifest number: 1594
Signing time: Thu 26 Mar 2026 02:00:57 +0000
Manifest this update: Thu 26 Mar 2026 02:00:57 +0000
Manifest next update: Fri 27 Mar 2026 02:00:57 +0000
Files and hashes: 1: HqhLC8dqnQNE0kDdL6ayiqhSPGU.roa (hash: bRPK732wUADitLmAxuB4OFABp+AoeaHAzcNtveMQOmo=)
2: U_azaGcjiqcYvhfm5zzkCpiVeKA.crl (hash: +X/ZLDgDFhpK5nnCPWVfTEfA8LBMvr0o0H8tnnqyBzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:95:f9:6a:5e:0f:87:d8:42:22:72:33:b7:0d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f6b36867238aa718be17e6e73ce40a989578a0
Validity
Not Before: Mar 26 02:00:57 2026 GMT
Not After : Mar 27 02:00:57 2026 GMT
Subject: CN=c9487db0d060cb14538c86e313244eabb7154de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6a:14:65:23:ed:c8:a9:b5:3b:1e:c6:80:85:
c0:fa:d3:30:eb:ce:4b:c9:52:77:eb:bb:d6:e6:8e:
b3:7d:24:9a:3b:a0:12:e7:17:4c:67:45:6b:f9:c6:
e5:9e:b9:f0:ed:23:7a:9e:3e:d6:cc:b0:46:04:1a:
47:a4:24:45:3a:7a:5e:7b:01:40:f7:4f:f1:91:63:
6b:6b:0a:50:f3:b4:a8:52:c4:c4:8d:0c:59:f1:cf:
4b:78:8b:89:c5:22:6d:1b:91:a8:ac:86:1d:69:51:
62:7b:d3:e2:a0:85:02:f2:f0:9f:41:ab:3c:94:9a:
62:bc:ca:03:65:df:7e:ca:89:15:fb:64:99:b6:ba:
5b:09:42:9f:e4:ec:43:e2:0f:a0:5b:15:5a:80:e9:
31:f3:30:63:ab:29:43:8c:19:9c:ed:11:f4:f4:37:
05:ff:90:7f:03:c5:c8:94:15:98:a7:7f:a1:aa:f9:
75:82:06:bf:8d:27:29:52:1f:12:36:46:34:f3:6f:
e5:ff:ec:61:14:f0:8a:a9:cc:96:31:f1:0b:f8:09:
48:24:49:a9:fc:67:ee:d6:09:40:f9:b8:1f:14:8a:
2b:4c:18:42:37:32:57:7d:32:71:e2:3a:35:55:7e:
07:c1:6f:1d:54:af:c4:91:a7:f6:91:2c:8e:4a:9b:
d0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:48:7D:B0:D0:60:CB:14:53:8C:86:E3:13:24:4E:AB:B7:15:4D:E3
X509v3 Authority Key Identifier:
keyid:53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:71:93:44:e9:95:29:e4:e8:8e:ac:71:a4:ee:cf:11:0b:40:
4c:aa:c0:89:e0:fb:eb:93:99:18:50:cf:0f:a1:9b:e3:67:53:
11:bf:fc:95:ad:d0:32:bb:8b:43:40:5c:e0:69:75:d9:19:b1:
af:b1:f4:e6:d5:25:20:3d:00:34:5d:cf:00:05:f8:95:11:f3:
f8:6c:af:c3:90:dc:27:51:18:f4:ad:ab:c6:24:32:f2:f2:4b:
b0:57:56:c4:51:47:c3:76:9b:61:58:ef:27:53:e7:1f:d5:d6:
51:79:3d:b7:7b:4b:f2:df:72:d0:ce:95:80:c1:c4:7f:e4:0e:
c8:1a:7a:65:6d:b9:76:2c:25:4e:62:04:41:1f:d4:c3:d2:84:
91:30:e9:4a:66:e0:95:7a:6c:01:8b:cd:e5:98:81:81:7b:b5:
a8:11:c9:9f:ce:64:38:22:a8:00:23:01:4b:a4:c9:f1:31:f2:
d1:3b:de:c9:a9:52:88:e9:87:a3:96:8b:56:68:43:35:df:1e:
3a:9d:6e:84:63:54:3b:30:03:c4:7c:cb:e5:67:12:45:34:33:
d6:03:96:cf:00:c8:9e:57:a7:5d:05:59:dc:eb:7c:53:b6:c3:
1c:71:4d:5c:32:b3:a5:af:04:ff:2d:8c:e8:78:c5:75:e9:2b:
bc:28:d2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:04:05 2026 by rpki-client