Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
File: U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json)
Hash identifier: X42Uqy7PXqSRZIfsup8gpDTOhN1IotmuG/bTKJxMUG8=
Subject key identifier: 84:F0:87:29:1A:94:6B:FB:4C:0D:85:C7:3F:7A:DD:B3:A7:BB:E6:19
Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Certificate serial: 019D2A3C0C91DCD51BC1130B4923D9FFE8DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
Manifest number: 056C
Signing time: Thu 26 Mar 2026 13:01:11 +0000
Manifest this update: Thu 26 Mar 2026 13:01:11 +0000
Manifest next update: Fri 27 Mar 2026 13:01:11 +0000
Files and hashes: 1: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: +ABQM3iSe9PE6D964H8Cxq0JRJ9uI6Abotz2fu90fS0=)
2: mVapMmHRdrNnHP7qEe61fUd9MJ4.roa (hash: 7gjqh37t5TbJMLovzwK7uE6PbR35tPIiZgeHv6oUC54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:0c:91:dc:d5:1b:c1:13:0b:49:23:d9:ff:e8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Validity
Not Before: Mar 26 13:01:11 2026 GMT
Not After : Mar 27 13:01:11 2026 GMT
Subject: CN=84f087291a946bfb4c0d85c73f7addb3a7bbe619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:bf:16:8b:8d:31:36:bd:ca:0e:a7:a4:3a:
3f:8f:da:05:c5:2e:e4:f7:fc:a7:9d:40:e5:7c:6c:
e0:96:45:42:bc:30:b6:c0:2f:b9:36:05:3a:03:8c:
1f:93:89:5b:71:f5:0d:2e:0f:29:24:ac:cb:cc:e6:
fd:d4:03:14:05:0d:ab:42:22:d7:48:eb:c7:4b:b1:
78:01:16:73:19:54:2a:3f:83:93:2f:b3:e0:94:4e:
3f:8b:21:ab:2d:93:8a:26:84:29:5c:a7:61:f0:b3:
25:8d:29:b0:28:da:30:b8:5a:73:a2:e2:f6:ac:81:
c1:ed:c9:39:48:92:a9:a7:9d:6a:37:74:1a:d8:39:
27:6e:80:1f:43:57:45:d3:94:f4:3f:34:c1:99:cc:
4d:a7:92:3d:ee:7f:ba:e6:fa:fb:4e:79:58:cf:b4:
4b:d3:c9:80:7d:81:2c:36:fd:a4:13:b3:dd:5b:bf:
44:05:6d:29:cf:ae:d5:28:f9:94:05:02:9d:7b:48:
da:38:df:68:73:22:eb:e5:68:be:25:05:c6:0f:cc:
c4:1d:7a:75:34:bf:8d:a5:e0:57:d8:84:87:ad:d2:
f6:27:be:85:77:b9:c1:74:b2:e3:87:63:ea:5c:7d:
f5:65:0a:95:27:82:dd:f6:e6:1a:30:6a:64:35:0d:
1d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F0:87:29:1A:94:6B:FB:4C:0D:85:C7:3F:7A:DD:B3:A7:BB:E6:19
X509v3 Authority Key Identifier:
keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4b:63:48:a0:f6:48:5f:12:22:fe:68:5d:4a:4c:e0:45:a1:
d3:cd:06:6f:50:5d:50:9c:62:25:fa:b6:ff:5c:bb:8c:a5:5f:
0f:56:f8:66:53:7a:88:dc:d9:03:32:db:46:f3:11:c6:4c:34:
b0:57:be:be:f5:88:ef:55:ce:fc:1c:f5:92:90:68:04:44:77:
c5:c5:64:ac:3a:55:47:6f:07:78:35:9b:32:fc:71:08:ac:3b:
89:8f:69:64:c9:2a:7c:71:bc:33:03:1f:3f:4e:5b:8a:d1:47:
86:5c:1b:38:ce:e0:f8:cc:70:1d:35:77:42:3a:6b:c9:ab:d0:
bc:11:62:2f:9c:c6:61:ae:b6:4a:66:7d:04:66:30:64:fb:7f:
79:c8:4b:d0:02:ae:a3:60:d4:7d:64:49:79:1e:0e:1a:10:85:
c6:c3:de:46:c2:7a:76:80:f5:14:4d:df:c6:98:11:87:1a:27:
69:92:17:19:2b:2b:7a:53:bf:a6:24:6c:b2:7a:a0:1e:05:2f:
04:06:45:a6:c0:8c:a5:08:6d:d5:7d:9b:7a:45:96:06:6e:80:
ce:c4:e7:32:52:11:3a:ff:9a:c1:7a:4a:1f:da:cb:12:f5:5b:
d3:56:78:a8:64:c3:a5:49:b0:85:58:d4:e5:7e:47:a4:ff:50:
65:9e:07:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:58:57 2026 by rpki-client