Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
File: U0OOy3Xh1es-gP26waaw-vg_c-E.mft (raw, json)
Hash identifier: oBf6Ur77MuAHcYvMNCBPzEV3vGxoxcDphGCB39rwOos=
Subject key identifier: 7A:E4:4D:B1:71:2E:80:C9:D5:4E:C1:5C:1B:6F:FC:A8:28:A3:08:74
Authority key identifier: 53:43:8E:CB:75:E1:D5:EB:3E:80:FD:BA:C1:A6:B0:FA:F8:3F:73:E1
Certificate issuer: /CN=53438ecb75e1d5eb3e80fdbac1a6b0faf83f73e1
Certificate serial: 019D27A8CAA157D8D64038EAEBFD44432608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
Manifest number: 8B
Signing time: Thu 26 Mar 2026 01:01:06 +0000
Manifest this update: Thu 26 Mar 2026 01:01:06 +0000
Manifest next update: Fri 27 Mar 2026 01:01:06 +0000
Files and hashes: 1: U0OOy3Xh1es-gP26waaw-vg_c-E.crl (hash: blxYiQqF2iWRrX32V5vLGmVbM1lViB21XG+EyAOCuFM=)
2: WosD3hO75NeEA5i1pYu4jjBvKZk.roa (hash: OY0wCbzw4br81Lxlh7tGimlRcQLzd5IIOnNVOlypPYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:ca:a1:57:d8:d6:40:38:ea:eb:fd:44:43:26:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53438ecb75e1d5eb3e80fdbac1a6b0faf83f73e1
Validity
Not Before: Mar 26 01:01:06 2026 GMT
Not After : Mar 27 01:01:06 2026 GMT
Subject: CN=7ae44db1712e80c9d54ec15c1b6ffca828a30874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:9f:0c:15:8b:3c:e9:ce:92:20:9c:da:fe:
19:8d:44:6c:4e:60:61:44:a4:8e:a1:d1:0b:61:27:
b3:ef:9e:d0:43:f3:0d:87:08:9d:9b:74:ae:d8:e9:
87:5b:4d:d9:00:b1:8e:ab:2e:6a:cd:16:42:40:44:
07:81:f1:2e:db:6a:4a:22:34:8a:c1:e7:33:c6:07:
02:54:1a:cf:de:e4:ea:0a:c8:82:04:05:80:70:26:
2d:7b:00:08:d7:8b:6d:b3:94:96:60:ac:dc:85:ba:
54:1d:e7:9e:ef:8b:8e:12:35:16:c3:c8:38:a5:ee:
94:fc:52:f3:86:82:31:ec:db:4d:66:3e:84:3b:76:
9a:52:2d:3b:0f:a0:e5:3e:23:93:2a:69:82:ef:5b:
14:b9:ea:87:ae:06:18:c2:86:f3:e5:b3:19:85:16:
8b:33:5f:5f:af:61:a0:95:8a:bc:49:1b:59:40:ed:
a3:08:0f:f4:6d:40:b7:ae:4b:4d:df:7b:0d:d5:cc:
60:dd:b6:58:2c:f7:a2:45:dd:3a:95:bf:7a:89:a0:
e6:8c:7a:33:88:ec:fa:9d:c7:d5:e7:63:b6:7f:1d:
fb:52:e3:28:c6:6a:17:40:3e:97:33:15:af:ff:9e:
2c:30:56:bb:ef:f4:b3:be:36:1a:51:1a:ed:4c:f4:
fd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E4:4D:B1:71:2E:80:C9:D5:4E:C1:5C:1B:6F:FC:A8:28:A3:08:74
X509v3 Authority Key Identifier:
keyid:53:43:8E:CB:75:E1:D5:EB:3E:80:FD:BA:C1:A6:B0:FA:F8:3F:73:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:01:21:8d:fd:f4:61:94:7f:b2:fb:1d:0a:6b:29:cf:cc:fe:
0d:a2:36:b7:da:7d:0a:de:3f:d0:d8:f5:44:0b:15:0b:d7:c4:
6c:9c:8d:85:4f:0d:63:cc:f8:d8:1d:8d:90:f0:20:7b:9f:46:
42:91:5e:3d:5b:70:5a:1f:f5:75:3c:d4:82:b2:ff:b3:81:2d:
61:59:3c:71:bc:17:7d:21:68:f8:97:b4:11:81:0c:77:43:5a:
e6:d5:ae:b5:5c:9d:21:f2:98:36:65:d7:26:43:57:eb:05:56:
2a:a7:b7:36:a6:db:aa:f5:72:b7:5c:a0:d4:44:98:3a:5d:5f:
57:50:13:89:3a:2e:43:6e:58:de:17:3d:4c:ea:aa:39:0d:c4:
e7:a0:30:61:4b:5b:12:b1:4a:5f:c9:f4:b9:8a:a0:6d:a5:bc:
21:ad:3e:da:4b:56:a8:c6:9f:5c:91:a7:d0:dc:18:68:37:7e:
b4:93:8c:14:88:81:d9:ae:32:eb:00:6b:45:d6:ca:33:90:db:
82:4d:98:7a:9e:94:1c:d5:43:c1:69:75:cd:33:83:d9:50:13:
67:20:21:29:ed:b1:aa:73:96:29:12:d7:c0:af:cf:9c:e9:a2:
a4:98:46:54:ae:25:f6:bd:c4:b8:5a:e0:60:3c:20:f3:dc:0d:
4b:89:71:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:22:44 2026 by rpki-client