Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
File: U8DiB45PPrpfh5UD_dgJw4O7dig.mft (raw, json)
Hash identifier: 3lmIcUCKUbl+YJD3V+uy8kmc3gY4ZyleMiXcq+W59H8=
Subject key identifier: D0:A4:19:77:89:12:B7:92:CC:D4:59:38:14:73:E3:5A:98:CA:4C:2B
Authority key identifier: 53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
Certificate issuer: /CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Certificate serial: 019D2695D433790AEF029572DEB9AE1A046A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
Manifest number: 1283
Signing time: Wed 25 Mar 2026 20:00:46 +0000
Manifest this update: Wed 25 Mar 2026 20:00:46 +0000
Manifest next update: Thu 26 Mar 2026 20:00:46 +0000
Files and hashes: 1: 1-GMVzwMDxSiYZaD7figfVQ0BMo8.roa (hash: 6cucZyQkv8Clqp8Dmj2mB2zHAVxhCmtUwPlqKFCqEpw=)
2: U8DiB45PPrpfh5UD_dgJw4O7dig.crl (hash: nI3ZL5HT8AqyEKmojjZD2I1PUVQA/iCxyIa/0HCiM9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:d4:33:79:0a:ef:02:95:72:de:b9:ae:1a:04:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Validity
Not Before: Mar 25 20:00:46 2026 GMT
Not After : Mar 26 20:00:46 2026 GMT
Subject: CN=d0a419778912b792ccd459381473e35a98ca4c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:8d:44:0c:c7:2c:78:ec:99:47:94:f8:5c:
cc:08:6d:97:58:96:b0:c6:09:78:d7:1e:d2:c3:61:
82:b3:1a:26:ab:7b:b1:98:71:54:5f:7b:0c:b3:7c:
53:99:79:4f:68:84:dd:15:f4:e3:d0:2d:34:a5:d7:
f9:69:5a:45:35:8f:2f:01:75:f4:10:fe:3c:b5:9b:
f8:00:3d:cd:8e:ef:c0:8b:29:6e:e0:af:fe:e7:42:
17:46:86:c0:13:8a:1d:d6:4e:cf:36:f8:61:0a:fc:
fe:e8:21:d8:e2:52:93:14:b8:65:f8:37:af:45:5f:
86:ad:55:cc:91:5f:4c:71:f0:84:6a:bd:1a:d6:1b:
06:86:37:8a:7d:60:db:98:46:b2:c7:19:62:34:22:
a1:c0:c3:b3:cf:24:69:04:b1:19:5a:01:36:09:12:
ff:ae:f5:b4:21:66:fc:1b:37:75:f6:ca:e5:0b:66:
05:b4:35:1e:ef:02:f7:f3:ab:85:4e:46:6c:75:a4:
98:98:90:47:9a:cf:83:81:94:84:16:34:3a:5c:a4:
a5:8f:b6:26:d3:ba:d0:cd:e8:37:63:f2:a4:8d:1f:
77:4c:68:44:4d:1c:85:b6:53:d4:1c:e5:0d:e8:93:
81:30:1a:ee:ab:ac:17:99:3a:ac:a8:73:89:4b:73:
63:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A4:19:77:89:12:B7:92:CC:D4:59:38:14:73:E3:5A:98:CA:4C:2B
X509v3 Authority Key Identifier:
keyid:53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9c:ff:a7:be:17:ea:fe:62:d9:e0:83:e3:b1:a7:ab:7e:36:
14:4d:7a:97:5a:d7:d6:4b:12:35:50:6d:aa:7f:50:05:7b:66:
82:09:16:37:59:58:75:b1:cb:c8:99:1e:e9:f3:67:31:a7:ca:
63:98:74:04:9a:b5:32:d7:c3:72:4c:cb:3c:ef:a5:e1:e3:98:
15:e0:71:99:f2:37:40:bb:77:bb:2f:64:61:8f:a2:9f:38:09:
e2:0c:e2:c1:e7:fd:c2:58:8b:62:30:c9:4f:a8:20:b0:e1:1c:
0a:7f:c6:31:4d:07:84:4d:67:91:7e:de:63:05:c1:2d:0e:7e:
91:b5:83:50:4d:c6:41:59:ce:f8:74:39:52:fe:d7:85:b6:2a:
e6:0d:70:39:37:84:7c:68:87:27:dc:7d:97:4f:48:93:dd:c2:
1c:a7:5f:29:25:32:ad:d4:cf:b6:66:67:7d:6a:92:dd:b7:a6:
04:52:63:11:eb:0d:d8:73:e1:20:d0:df:f7:2e:b6:b4:f5:d2:
1c:bc:8e:a8:f3:36:0c:a0:39:a6:c6:5b:fc:7e:86:af:05:f1:
a3:15:0c:1d:b9:52:0e:58:7e:5e:9c:95:83:12:d1:b2:c0:17:
29:91:b7:13:41:9a:da:dd:76:10:03:ef:cb:15:ad:71:4c:6f:
f3:36:60:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:25 2026 by rpki-client