Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
File: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft (raw, json)
Hash identifier: u7d4qB/kiUz+bZhOHHW4VCsm2uV4fwk0MhSNhjq9tTU=
Subject key identifier: 17:67:A2:A8:F2:48:D0:A5:81:91:BD:67:33:6F:B4:EE:02:95:53:AC
Authority key identifier: 53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
Certificate issuer: /CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Certificate serial: 019D27DF8066274300F8D1D9F28F18358F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 02:00:51 +0000
Manifest this update: Thu 26 Mar 2026 02:00:51 +0000
Manifest next update: Fri 27 Mar 2026 02:00:51 +0000
Files and hashes: 1: IhNm1XAjTUBP_UYjIGIEELcWiWc.roa (hash: TcGN7ZBSR/KDo/mk7XwRToavEZ6usSTJYaYD26UCIPE=)
2: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl (hash: 6dHe38IFeEp5pxHs9ZZxM4hPeMKvpzRhsxmmpNlxSY8=)
3: mjm_jL6FnCZyLJAmMfTaUZL_DF4.roa (hash: 7TBTThhJXxwuqJMKV3smo+3dSUEAzVVTW36ntOu96Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:80:66:27:43:00:f8:d1:d9:f2:8f:18:35:8f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Validity
Not Before: Mar 26 02:00:51 2026 GMT
Not After : Mar 27 02:00:51 2026 GMT
Subject: CN=1767a2a8f248d0a58191bd67336fb4ee029553ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:91:57:01:fe:60:76:9b:a2:ae:09:a3:27:96:
4b:e9:ff:c1:37:d1:9e:74:95:4b:60:1a:ed:2f:26:
c7:78:f1:45:b4:41:3a:48:25:3f:08:d8:84:81:e3:
8e:d6:6f:cd:72:4a:55:25:af:71:5c:c8:b3:35:89:
e2:98:62:de:2f:90:be:27:a9:ac:db:82:ba:48:3a:
74:9d:34:70:5f:38:48:ab:37:ab:58:cc:ad:b7:84:
31:87:77:e5:ac:aa:b8:62:c7:b3:89:9b:d5:9b:9a:
17:84:66:35:96:b5:af:1c:09:ab:49:c3:c2:5d:63:
6c:17:80:72:ed:36:84:ce:42:ff:af:c6:a3:0a:aa:
54:f1:04:f5:52:d1:ae:52:50:cf:09:f1:98:bd:f4:
0d:3c:06:74:5a:9a:44:f8:00:e4:0b:60:33:4c:3e:
4a:f4:6b:cf:00:3e:8c:c6:14:35:12:c8:4b:9a:67:
ad:e0:1b:9b:cf:a7:63:fa:9d:84:e8:e8:15:f8:2b:
e0:03:42:ef:a8:ea:b6:9c:d3:9f:98:80:97:e6:fa:
08:64:8d:c8:da:01:a0:f4:2b:5c:c0:eb:50:ed:04:
60:b4:84:54:86:1b:f0:f6:3a:2e:c9:89:ae:81:12:
0f:7f:63:71:f9:0a:e2:c0:ab:a6:45:c6:ae:a7:1e:
d4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:67:A2:A8:F2:48:D0:A5:81:91:BD:67:33:6F:B4:EE:02:95:53:AC
X509v3 Authority Key Identifier:
keyid:53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:79:4b:d2:73:fc:01:45:9f:b6:2e:cc:a3:27:a5:f7:c9:3c:
49:3f:10:82:c2:77:52:8f:aa:22:03:36:dc:c0:11:ae:f7:ec:
85:ab:07:73:3f:66:ba:02:25:65:c1:c8:c1:44:db:69:ff:ba:
bc:19:4e:da:b1:ad:a5:87:dc:4b:5b:2c:84:9a:54:d8:d0:ac:
7a:e8:57:b5:00:a8:46:3b:8d:79:6c:5b:1c:96:58:49:0a:f9:
be:91:ee:a4:4b:91:0f:24:67:f1:05:21:f8:0f:81:42:d8:f4:
b9:3e:58:9c:c2:b2:2f:32:e7:6f:60:7f:0c:e1:d1:68:64:34:
66:72:f8:cd:45:d0:b7:24:72:5b:83:32:83:73:69:6d:c4:c9:
f3:b1:51:5a:21:b7:52:70:5a:89:9e:49:3c:97:f2:6d:40:e8:
c4:4b:af:9f:08:0e:92:48:13:7f:24:53:66:46:ed:4b:24:a2:
64:db:f5:3b:3a:b2:24:af:bf:7c:98:7f:43:1a:e1:02:8c:cd:
e1:b0:29:3b:58:d9:dd:20:86:63:f9:9c:a6:37:45:b6:ac:fe:
34:ec:2c:ee:9f:99:b8:3d:51:68:9e:10:00:d9:a6:c1:b3:30:
98:10:cb:88:ac:33:78:34:7c:71:7c:a5:83:3c:23:8f:a7:82:
1e:73:5a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:57:11 2026 by rpki-client