
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
File: U6hLUj3-Mriom5zdMKn4cRAH_bk.mft (raw, json)
Hash identifier: CPjHU9+U7r3WR/oR49U5vs9pRFlSB9nxlvLg5dWD2gI=
Subject key identifier: 3A:17:DA:48:FA:80:4F:41:39:27:CD:EE:D4:A6:11:52:6E:FB:4A:93
Authority key identifier: 53:A8:4B:52:3D:FE:32:B8:A8:9B:9C:DD:30:A9:F8:71:10:07:FD:B9
Certificate issuer: /CN=53a84b523dfe32b8a89b9cdd30a9f8711007fdb9
Certificate serial: 019D277248293E1D6F124BCEAC5B63085DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
Manifest number: 0F5D
Signing time: Thu 26 Mar 2026 00:01:34 +0000
Manifest this update: Thu 26 Mar 2026 00:01:34 +0000
Manifest next update: Fri 27 Mar 2026 00:01:34 +0000
Files and hashes: 1: U6hLUj3-Mriom5zdMKn4cRAH_bk.crl (hash: X7EUnz+GNUGt3QDyNQiJ6yQILoQDuKC2qhFFHrje6Kw=)
2: e7AHTN6GMHGk_8dAcf_gVZnvxVI.roa (hash: IevTKfUQJkqwDYYU6PQJwFiwDh/wjsGFxyO8+JdLEM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:48:29:3e:1d:6f:12:4b:ce:ac:5b:63:08:5d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a84b523dfe32b8a89b9cdd30a9f8711007fdb9
Validity
Not Before: Mar 26 00:01:34 2026 GMT
Not After : Mar 27 00:01:34 2026 GMT
Subject: CN=3a17da48fa804f413927cdeed4a611526efb4a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:64:6a:04:1f:2b:fd:20:fc:5c:39:7a:6d:6d:
03:29:0f:43:2c:d5:d4:05:c6:de:d5:aa:ba:c6:80:
3c:8e:48:95:7f:60:9b:81:ce:7f:d0:fe:7c:3f:a2:
22:6f:04:72:7f:5a:b9:44:d4:59:e3:6b:ac:ca:ec:
a9:d9:bf:ff:9c:a4:a5:5b:c3:1b:ce:76:07:67:89:
98:8e:20:44:46:30:81:8f:1d:47:03:3d:1a:15:8a:
52:3f:fb:50:b0:48:d4:e5:8b:38:04:18:3e:6f:05:
c1:ac:03:ab:8f:c1:c3:39:3f:f5:d6:33:bb:56:24:
39:c9:da:5c:66:95:fb:67:af:5e:fc:13:ed:f4:24:
2a:27:31:8d:18:c5:0e:54:e7:9f:95:01:ab:52:42:
83:6d:56:a5:9c:08:af:fe:45:c8:97:56:d7:c4:45:
55:c0:a7:e2:6f:2f:34:79:fa:bf:00:d1:b9:1e:97:
2e:f2:1a:53:47:6d:fc:73:00:5d:cb:e3:81:af:1a:
23:3b:30:c1:4d:3f:ed:d9:26:85:58:b5:fd:e3:be:
49:28:9f:2f:ef:cb:7f:b2:c4:4b:00:79:4c:c3:dc:
fb:a1:5b:ff:87:9c:0e:21:a6:d4:d4:fb:91:15:83:
4f:0e:28:e9:78:b2:07:c9:e7:18:58:46:2d:eb:8c:
d8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:17:DA:48:FA:80:4F:41:39:27:CD:EE:D4:A6:11:52:6E:FB:4A:93
X509v3 Authority Key Identifier:
keyid:53:A8:4B:52:3D:FE:32:B8:A8:9B:9C:DD:30:A9:F8:71:10:07:FD:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:38:59:bb:48:71:a1:86:f5:cb:70:2a:db:34:2b:af:7c:59:
2f:79:10:d7:02:65:31:c7:34:8d:83:a9:b6:e5:d7:1d:45:f2:
70:0d:61:9f:04:1b:16:f8:f7:73:4b:c0:25:bc:9c:8c:35:c6:
65:11:6e:8a:e6:dc:fb:c1:14:ab:c4:f7:31:0e:f9:74:02:4f:
d2:dc:d5:45:33:c5:c8:98:37:a4:ad:44:7d:54:6d:e8:2c:b6:
53:19:37:bd:09:5b:aa:f2:43:d7:9f:54:59:17:3c:35:56:4c:
2e:9e:6e:e3:04:ba:a5:6c:a6:39:92:a0:0c:df:da:36:af:01:
4f:0b:57:3a:c9:cf:7a:0d:e7:44:d9:78:0c:8d:19:3c:ad:73:
59:ab:39:1e:28:3f:d9:b5:19:97:fa:c3:40:24:bf:3e:56:03:
69:f1:9f:b9:21:18:bf:cd:0c:8e:60:e1:e7:10:12:64:d9:d5:
1a:5d:39:62:6b:d3:76:f2:fb:64:47:a4:57:70:3a:f5:b5:c3:
e8:d3:26:a4:e2:7e:2e:59:ce:9d:f0:52:a8:c0:aa:68:f1:e6:
21:e5:8c:8b:c2:7f:c0:b7:77:96:59:ba:c3:ea:45:60:ab:93:
23:68:5c:55:8a:b9:ea:75:37:ca:08:79:03:e3:0d:c0:42:c4:
12:d7:c4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:20 2026 by rpki-client