Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
File: U1ULI4LgD6ffGU5khf4UJYNiE_8.mft (raw, json)
Hash identifier: M1fsJ8Fn2spro1e66d9MHb2FRViFshEE+E1iv9E5Dwg=
Subject key identifier: D5:36:9E:95:23:E0:EE:4E:40:16:54:DE:64:05:B2:65:08:31:74:98
Authority key identifier: 53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
Certificate issuer: /CN=53550b2382e00fa7df194e6485fe1425836213ff
Certificate serial: 019D25F1B23F0B376C66337EA11285DE42BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
Manifest number: 1022
Signing time: Wed 25 Mar 2026 17:01:29 +0000
Manifest this update: Wed 25 Mar 2026 17:01:29 +0000
Manifest next update: Thu 26 Mar 2026 17:01:29 +0000
Files and hashes: 1: 3_TF1Jd76sN3QxPbPepv9qZrq6c.roa (hash: ML2ZijwEfiwVvzhcT4qRWRAEYKvPQK5MksfX4SSNLgQ=)
2: U1ULI4LgD6ffGU5khf4UJYNiE_8.crl (hash: h45XS8iuFR8p3Q8ESIGuIh20ebAC4hv9Q7hRcihb3WI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:b2:3f:0b:37:6c:66:33:7e:a1:12:85:de:42:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53550b2382e00fa7df194e6485fe1425836213ff
Validity
Not Before: Mar 25 17:01:29 2026 GMT
Not After : Mar 26 17:01:29 2026 GMT
Subject: CN=d5369e9523e0ee4e401654de6405b26508317498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:11:dd:13:6e:57:20:c7:dc:b9:f6:b5:a1:
4d:d8:bf:5c:2b:fb:42:f8:6d:e6:e2:f8:73:ca:f9:
0b:b2:67:8c:2d:cb:cd:0a:ec:1e:c4:ad:2a:df:f2:
4d:6e:f7:6d:70:fb:ea:fd:38:a9:7c:65:ac:5a:d4:
d7:59:26:31:6f:9b:17:f7:33:23:a9:f9:37:06:bb:
8d:8b:94:d9:71:9a:1e:26:0a:e3:06:e2:78:1e:09:
df:cd:a1:23:53:a3:cd:fb:5c:f8:b4:4b:ac:c6:cb:
e6:76:b7:58:e3:bd:a7:7d:b4:e1:46:b7:e0:a4:93:
1e:c0:04:8f:da:9d:d0:30:c7:7c:db:58:96:10:22:
26:b1:f9:e2:67:3a:5b:6a:88:64:4f:7a:6b:60:4c:
69:04:37:ac:7a:78:42:92:8c:3e:f8:4a:79:31:87:
ae:f0:b0:f0:de:9f:14:1f:cf:a1:a2:1f:41:2c:98:
c6:5b:5d:f8:27:fc:19:3e:e7:ae:29:a9:f9:b2:47:
43:ad:7f:2c:49:68:cf:7c:19:53:fd:c6:ec:09:fb:
36:4a:84:20:e0:66:22:f7:38:88:19:25:31:cd:6d:
0d:ce:fe:95:35:bb:63:ce:bc:64:b5:1c:b4:bc:2a:
66:45:af:f9:08:7e:21:46:d3:c7:93:5e:34:5b:89:
93:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:36:9E:95:23:E0:EE:4E:40:16:54:DE:64:05:B2:65:08:31:74:98
X509v3 Authority Key Identifier:
keyid:53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:a0:66:0b:ec:e0:26:d8:80:0a:ee:6c:4a:b5:a8:2a:85:d8:
a4:08:98:60:d7:f2:59:7d:44:96:93:ac:82:7e:81:ed:90:14:
cf:19:16:82:b0:5f:4f:7a:97:18:2d:dc:2e:cc:12:a8:28:40:
47:0d:57:6f:1c:d1:76:4d:31:11:9b:1f:20:a1:53:2c:45:26:
74:f6:fc:5d:98:b8:50:27:93:0d:e2:5f:83:c8:c2:09:01:4b:
ea:2b:fd:3e:2c:86:25:8e:06:8d:6b:d0:29:2a:f2:0a:44:5d:
62:4d:ac:95:5b:cc:bd:1e:7e:45:89:74:3d:08:d2:92:2a:ea:
4e:3f:72:a8:39:fe:7c:4a:5a:2a:7e:ae:8e:d8:40:55:a1:47:
60:3d:be:7f:c1:f8:2e:2e:bc:fd:fe:b8:0f:5b:5e:36:ce:c0:
33:3a:c9:bf:ee:1f:75:01:75:bc:dc:e1:7e:d0:5f:55:21:ed:
5e:c7:70:e2:5d:d8:cb:a1:ab:23:64:97:d3:4f:da:00:9c:21:
86:46:7f:07:0e:ad:13:de:e1:9e:7c:6d:d1:ab:e1:94:77:ea:
9d:31:55:9f:a9:7e:84:a3:b4:7d:1e:fa:43:5d:2e:d8:e6:9f:
4a:0b:c2:bb:50:a7:b3:88:6f:6d:27:2c:1e:fd:38:9b:eb:0d:
3e:63:41:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:36 2026 by rpki-client