Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.mft
File: U9xdTpyQVzxt330Ay-iy7aQT_IY.mft (raw, json)
Hash identifier: zBb96jpD+LLhKX1IgxV3GnBz+3JW/kSo6NCqd50kwcg=
Subject key identifier: 75:4A:82:D1:44:19:15:63:AD:FD:A1:34:AB:32:EE:3F:28:33:95:55
Authority key identifier: 53:DC:5D:4E:9C:90:57:3C:6D:DF:7D:00:CB:E8:B2:ED:A4:13:FC:86
Certificate issuer: /CN=53dc5d4e9c90573c6ddf7d00cbe8b2eda413fc86
Certificate serial: 019D25BA657CBC6B6AA0A9A6D505F6BB7FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9xdTpyQVzxt330Ay-iy7aQT_IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.mft
Manifest number: 3E
Signing time: Wed 25 Mar 2026 16:01:05 +0000
Manifest this update: Wed 25 Mar 2026 16:01:05 +0000
Manifest next update: Thu 26 Mar 2026 16:01:05 +0000
Files and hashes: 1: PsU7x_frD08SU2YYN4xYvGI8q1E.roa (hash: k6MudYJE0V8N7WpGxi22h24h9nGg9VIaakZ/jcGCILw=)
2: U9xdTpyQVzxt330Ay-iy7aQT_IY.crl (hash: SjiqKRPbRlHPmVJDfWJf1bkNIba4+HKDz+0Yk9bMbl8=)
3: fOZ6kY7go8H3U7EGMazIlVOf4S8.asa (hash: ZG2DRjQ6yjHyZJgJZLq1YZ9mSn6uEwFWnifyu/zanYY=)
4: xOttd6TpxOr24A9NYb5gHM_31mk.roa (hash: acecs5fYnCii+jIlRbpWYRX+vj6OKx+EgPOK7cU5+y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9xdTpyQVzxt330Ay-iy7aQT_IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:65:7c:bc:6b:6a:a0:a9:a6:d5:05:f6:bb:7f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53dc5d4e9c90573c6ddf7d00cbe8b2eda413fc86
Validity
Not Before: Mar 25 16:01:05 2026 GMT
Not After : Mar 26 16:01:05 2026 GMT
Subject: CN=754a82d144191563adfda134ab32ee3f28339555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ac:fe:08:fd:38:71:2f:fe:9f:ef:a7:3b:cc:
b0:9f:c4:10:c0:14:80:51:d9:4d:7a:74:26:7e:ae:
91:a9:9e:a2:39:6f:c2:5c:26:d9:ef:cb:56:3f:fd:
14:aa:c9:b3:10:b2:83:ff:a0:d6:14:68:a4:25:a6:
9a:58:3c:14:ba:dd:8d:f8:27:ee:bc:3b:d6:4e:e3:
91:5d:80:24:9a:50:57:99:74:a4:cd:46:03:c1:a0:
5f:61:ed:3b:93:93:b1:9b:4d:b3:2c:fe:33:a9:60:
62:e9:85:e9:0b:74:1f:6d:bb:63:fe:a3:c2:5d:5b:
cc:af:41:5e:40:f6:0d:26:8f:5e:05:90:0c:55:aa:
f4:96:f9:24:ed:9f:96:f8:05:c5:be:d9:81:23:8a:
35:4f:0e:93:09:0c:f3:c4:cf:aa:2d:15:4a:ac:c3:
35:44:9c:d9:f3:79:1c:44:05:af:ae:5a:e3:ce:32:
5b:5d:32:58:4a:09:47:87:fd:79:23:1d:11:2a:d9:
30:d8:a7:a4:07:14:92:2a:1b:ff:46:b2:5c:2b:50:
f8:89:2b:f6:4c:dc:d5:b8:04:c2:3e:87:3a:df:7e:
37:56:32:70:ee:91:35:35:c3:2e:df:3c:21:86:e2:
d4:16:fb:1d:34:7f:01:b1:ae:62:c1:8d:91:c3:29:
0e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4A:82:D1:44:19:15:63:AD:FD:A1:34:AB:32:EE:3F:28:33:95:55
X509v3 Authority Key Identifier:
keyid:53:DC:5D:4E:9C:90:57:3C:6D:DF:7D:00:CB:E8:B2:ED:A4:13:FC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9xdTpyQVzxt330Ay-iy7aQT_IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b3:ba:09:9d:ec:ef:4c:bd:f1:3b:ce:97:5d:54:72:8a:73:
88:a6:36:f0:ca:e9:31:e4:35:ff:58:6e:fd:dd:8d:ef:39:87:
14:9d:9e:f6:63:21:6f:1c:0a:de:98:05:26:26:2f:62:57:a4:
92:a9:29:6a:5d:cd:38:73:14:f5:c3:81:90:2b:a1:72:b5:88:
d6:04:7c:6c:f6:2b:44:b9:7b:26:c4:8e:34:9d:fa:a3:a1:63:
f2:18:85:5c:fe:55:ea:18:81:7f:b0:d8:60:6d:6a:cb:f1:73:
dc:8a:af:ac:9d:bd:e4:e3:da:70:e2:4a:4b:7e:01:34:d1:20:
f0:16:68:4b:c8:67:af:f9:1f:5b:41:a3:29:2c:af:aa:6a:80:
e8:1e:38:ac:8a:4f:4c:50:91:47:82:3a:50:98:db:20:d4:33:
a4:7c:f5:16:b6:c3:8e:8b:6d:90:ce:25:b6:6a:b9:40:41:37:
d5:34:a3:13:2e:73:a8:9a:1a:da:3b:e6:35:11:aa:fc:a5:81:
bc:f8:c2:c7:b2:47:53:58:7c:b5:81:23:eb:85:a3:d0:bb:bc:
8a:54:e8:d3:93:db:d2:e7:bb:d0:76:a5:d3:d6:bc:cb:4e:bc:
8a:e4:92:fa:03:ea:65:f1:10:fe:2b:db:49:90:56:87:20:f7:
23:9e:a1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:17:01 2026 by rpki-client