Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
File: U0Z21mkyx3oldhE2rJnrm3TYAaY.mft (raw, json)
Hash identifier: aFzvD6JdxSz8aYDzLnby6oY887nOHsRhZozxWuHw1uY=
Subject key identifier: A1:31:EA:47:B9:4A:BB:94:98:8A:21:86:02:F6:01:ED:92:58:9D:56
Authority key identifier: 53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6
Certificate issuer: /CN=534676d66932c77a25761136ac99eb9b74d801a6
Certificate serial: 019D2884BA54B301564AF6A02CAD576B4DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
Manifest number: 0558
Signing time: Thu 26 Mar 2026 05:01:20 +0000
Manifest this update: Thu 26 Mar 2026 05:01:20 +0000
Manifest next update: Fri 27 Mar 2026 05:01:20 +0000
Files and hashes: 1: U0Z21mkyx3oldhE2rJnrm3TYAaY.crl (hash: LrKZmhdqn3nRdHRqzIj7dLJv3i7xHpN8tVjhdpEwwBk=)
2: aLUgnnQfJFpMYdLs4kwtonmb-hA.roa (hash: GymUmYXXa2s1YAQ4JdjPRXC1fKxQsyfynIWTDZIu0M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:ba:54:b3:01:56:4a:f6:a0:2c:ad:57:6b:4d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534676d66932c77a25761136ac99eb9b74d801a6
Validity
Not Before: Mar 26 05:01:20 2026 GMT
Not After : Mar 27 05:01:20 2026 GMT
Subject: CN=a131ea47b94abb94988a218602f601ed92589d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:07:23:88:5b:1b:3f:56:1c:00:2a:21:91:
e7:43:c3:44:cd:e2:57:f3:38:7a:b0:46:48:6e:40:
71:5d:0f:8b:52:f8:80:5b:ad:46:24:81:15:47:37:
1d:0c:f6:f9:1b:9d:92:7a:19:23:75:a1:91:88:2e:
f1:96:c5:e3:6b:b8:1c:51:b1:97:58:50:31:70:f4:
02:f0:87:87:2d:13:f2:7b:c2:ea:0a:a1:1a:00:37:
fb:55:4e:46:9f:33:3d:36:67:eb:da:de:7f:52:34:
98:2e:08:b6:d8:e3:a3:24:aa:b8:6f:31:fd:09:fe:
80:12:e6:1c:17:86:51:c7:dd:07:1b:1b:a5:13:65:
e4:ed:4e:b5:b5:45:39:48:1a:4b:2c:7d:74:0c:e5:
9b:b6:49:04:5a:c4:47:2d:22:16:e4:38:de:84:2a:
22:d3:d6:0f:9b:43:69:0e:3d:18:82:5e:5d:51:eb:
9b:bb:cf:de:d8:15:43:f8:6a:83:7e:2e:f1:3f:b0:
16:7a:0b:c1:df:68:1c:62:68:c3:31:c4:a4:ce:3b:
3d:f3:e2:68:c9:ae:a6:83:1c:37:e5:9d:5d:7c:82:
2f:a7:82:8e:f2:06:30:19:f0:66:1c:83:70:b8:72:
bb:4a:39:97:5d:c3:17:0a:ea:89:54:c4:11:ef:56:
ca:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:31:EA:47:B9:4A:BB:94:98:8A:21:86:02:F6:01:ED:92:58:9D:56
X509v3 Authority Key Identifier:
keyid:53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1f:1b:fd:04:60:87:eb:d9:d6:60:39:f8:e2:67:7b:9c:a4:
f9:da:af:b1:fd:6b:31:79:91:47:f5:68:2c:08:b1:f8:33:40:
94:ea:41:36:fb:71:ed:a6:d8:87:2d:60:08:66:ff:cf:bd:9b:
4a:1e:d2:ab:d7:6d:15:10:c6:2b:b0:95:1f:b3:f9:3c:45:fc:
d1:c2:d0:8d:3e:ad:43:dc:ba:92:72:68:2b:ea:ca:b1:92:39:
9d:45:7a:00:23:3b:1b:70:59:a2:64:b4:fb:0d:18:ab:06:61:
b8:ee:16:ce:14:43:fb:63:e2:62:d4:a3:e4:c1:47:9c:29:18:
4b:da:41:26:c9:59:96:0a:9f:43:ef:0c:09:8e:b2:67:b1:0f:
c5:ec:36:77:28:08:f6:92:7f:a3:3e:41:13:c7:ff:4d:c8:67:
eb:5e:99:01:82:9b:3b:47:0c:0f:a4:bb:fe:9d:1e:a6:81:ca:
9b:36:4a:07:9f:34:a9:5a:1a:64:41:a3:f4:68:ec:be:d9:61:
a0:b2:13:60:98:88:40:fc:5f:28:30:e4:69:15:66:99:0c:45:
7b:91:02:3f:6a:6c:90:10:7e:6e:aa:b0:2e:a5:4a:2a:fb:c2:
f3:81:53:34:21:1f:b8:e2:d3:e2:3e:92:cc:6e:8a:e6:2f:b4:
e4:21:18:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohLpUswFWSvagLK1Xa02wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNDY3NmQ2NjkzMmM3N2EyNTc2MTEzNmFjOTllYjliNzRk
ODAxYTYwHhcNMjYwMzI2MDUwMTIwWhcNMjYwMzI3MDUwMTIwWjAzMTEwLwYDVQQD
EyhhMTMxZWE0N2I5NGFiYjk0OTg4YTIxODYwMmY2MDFlZDkyNTg5ZDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU4HI4hbGz9WHAAqIZHnQ8NEzeJX
8zh6sEZIbkBxXQ+LUviAW61GJIEVRzcdDPb5G52SehkjdaGRiC7xlsXja7gcUbGX
WFAxcPQC8IeHLRPye8LqCqEaADf7VU5GnzM9Nmfr2t5/UjSYLgi22OOjJKq4bzH9
Cf6AEuYcF4ZRx90HGxulE2Xk7U61tUU5SBpLLH10DOWbtkkEWsRHLSIW5DjehCoi
09YPm0NpDj0Ygl5dUeubu8/e2BVD+GqDfi7xP7AWegvB32gcYmjDMcSkzjs98+Jo
ya6mgxw35Z1dfIIvp4KO8gYwGfBmHINwuHK7SjmXXcMXCuqJVMQR71bKkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEx6ke5SruUmIohhgL2Ae2SWJ1WMB8GA1UdIwQY
MBaAFFNGdtZpMsd6JXYRNqyZ65t02AGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTBaMjFta3l4M29sZGhFMnJKbnJtM1RZQWFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8wNGU2NGItOTI0Yy00OGEwLTg5YTQt
YTAwOTQ0ZmQ3ZDlkLzEvVTBaMjFta3l4M29sZGhFMnJKbnJtM1RZQWFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8wNGU2NGItOTI0Yy00OGEwLTg5YTQtYTAwOTQ0ZmQ3ZDlk
LzEvVTBaMjFta3l4M29sZGhFMnJKbnJtM1RZQWFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIB8b/QRg
h+vZ1mA5+OJne5yk+dqvsf1rMXmRR/VoLAix+DNAlOpBNvtx7abYhy1gCGb/z72b
Sh7Sq9dtFRDGK7CVH7P5PEX80cLQjT6tQ9y6knJoK+rKsZI5nUV6ACM7G3BZomS0
+w0YqwZhuO4WzhRD+2PiYtSj5MFHnCkYS9pBJslZlgqfQ+8MCY6yZ7EPxew2dygI
9pJ/oz5BE8f/Tchn616ZAYKbO0cMD6S7/p0epoHKmzZKB580qVoaZEGj9Gjsvtlh
oLITYJiIQPxfKDDkaRVmmQxFe5ECP2pskBB+bqqwLqVKKvvC84FTNCEfuOLT4j6S
zG6K5i+05CEYEw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:18:50 2026 by rpki-client