Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
File: U4Vcjs6b1vjjlAICISzgmwX1-KA.mft (raw, json)
Hash identifier: e5uy629la2mOwayhYtNgXKqiw5RrZkVvuwrj/qYa7RY=
Subject key identifier: 43:B0:77:5B:A3:56:FE:09:9D:0E:4B:3E:60:89:2F:DB:21:FA:01:FC
Authority key identifier: 53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
Certificate issuer: /CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Certificate serial: 019D28F2FD75542622AFADF8393ADA8BB142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
Manifest number: 151A
Signing time: Thu 26 Mar 2026 07:01:46 +0000
Manifest this update: Thu 26 Mar 2026 07:01:46 +0000
Manifest next update: Fri 27 Mar 2026 07:01:46 +0000
Files and hashes: 1: U4Vcjs6b1vjjlAICISzgmwX1-KA.crl (hash: 7S2Zb8BrMyOinjZb0mV5u2NDCzJlGHY4aKmSOAMUY9o=)
2: wOCmhg5ukUDjqYrrNe8HL0c6WHY.roa (hash: py0DTzjoQh1bUaOEwoDGjjlil3qVagDVLMDa9WBCMVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:fd:75:54:26:22:af:ad:f8:39:3a:da:8b:b1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Validity
Not Before: Mar 26 07:01:46 2026 GMT
Not After : Mar 27 07:01:46 2026 GMT
Subject: CN=43b0775ba356fe099d0e4b3e60892fdb21fa01fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3f:23:0d:31:e4:34:16:20:dc:0d:3a:4b:13:
af:1e:33:4e:6e:77:f7:b7:69:8d:8f:25:3b:d3:96:
38:a4:8f:53:78:43:27:9e:4f:21:0f:9e:54:4c:bd:
6b:4e:58:36:88:0c:7b:e3:e4:e0:c8:a3:15:3c:23:
26:b1:40:53:e3:38:7b:e5:7b:6e:92:83:74:68:31:
e3:31:23:4f:db:8b:ce:4a:a6:e3:57:a9:50:79:c6:
9a:23:22:c8:5e:1a:38:4b:34:e9:e7:89:6d:b6:d8:
ba:c7:29:63:41:47:61:56:c3:9d:5e:1c:8d:df:5e:
42:34:16:03:4b:4c:41:a7:53:22:95:dd:f0:6b:23:
ea:a1:78:25:a3:24:75:ed:1e:21:34:79:53:22:04:
4d:26:88:78:0a:eb:d1:70:f2:d0:5e:9d:34:91:e1:
4a:16:3f:0b:c1:db:9d:55:6c:93:4e:0d:0a:6c:05:
a7:3d:84:2b:12:84:29:1a:e1:c9:61:26:44:f1:bd:
b0:45:a2:41:8d:86:4c:2f:48:63:99:b7:65:79:3b:
32:88:e6:f7:40:76:8a:70:97:54:4b:94:30:ee:05:
54:b8:2f:25:79:29:c1:67:03:62:8a:60:f6:91:89:
2e:27:e3:10:28:2e:00:89:c4:4a:08:be:d6:2c:6a:
04:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B0:77:5B:A3:56:FE:09:9D:0E:4B:3E:60:89:2F:DB:21:FA:01:FC
X509v3 Authority Key Identifier:
keyid:53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:34:dc:ec:8c:d3:74:a3:fb:bc:3a:2a:ab:6d:d1:65:6c:b9:
4a:aa:79:a4:a2:ed:24:9f:f0:2f:99:00:62:66:b6:ec:5a:3a:
38:1b:5c:fd:15:38:fd:23:a0:8c:89:ff:50:ce:f3:1e:99:fd:
56:22:71:96:ee:b6:1f:1a:41:74:b8:0d:88:5e:aa:37:6b:a9:
7e:59:81:1b:0f:41:2d:82:70:49:2f:2b:46:16:a8:eb:57:65:
03:d0:6d:e7:13:5f:7f:5a:67:92:52:93:fd:5b:25:00:d6:9e:
f7:54:98:e6:50:52:df:d2:5b:98:90:b2:df:1f:de:8f:4c:c9:
05:9e:da:c6:f9:3b:89:82:f8:f0:b6:80:46:14:18:89:d5:76:
34:bc:ea:6b:51:69:a9:ce:fe:95:4a:06:19:8e:6a:01:fe:16:
e3:5a:2e:12:dd:e9:33:0a:9b:02:d2:60:cc:04:79:93:58:69:
33:91:b9:aa:51:38:59:e6:57:2e:4e:8b:9d:77:1e:97:29:42:
0e:48:22:47:dd:68:7f:d2:1d:89:d7:bd:b0:b5:8b:ad:ce:ae:
b3:d8:8c:d2:43:8c:32:bc:14:74:91:92:9d:e0:b7:ef:27:78:
d8:50:16:d7:bc:61:41:1d:2a:f9:28:07:c4:d7:b6:bf:87:a0:
e6:9f:bb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:55:57 2026 by rpki-client