Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.mft
File: U9xdTpyQVzxt330Ay-iy7aQT_IY.mft (raw, json)
Hash identifier: p78Rfjl9ZiY4X5ad0LX5GP/Ei6UadU6olufBghuai/U=
Subject key identifier: 7B:DD:66:8F:EB:11:7D:72:E4:94:43:E0:B7:CE:71:2B:05:6A:D5:E8
Authority key identifier: 53:DC:5D:4E:9C:90:57:3C:6D:DF:7D:00:CB:E8:B2:ED:A4:13:FC:86
Certificate issuer: /CN=53dc5d4e9c90573c6ddf7d00cbe8b2eda413fc86
Certificate serial: 019E1EDA1B0B520E56CE4DF768913BADBFE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9xdTpyQVzxt330Ay-iy7aQT_IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.mft
Manifest number: BF
Signing time: Wed 13 May 2026 01:01:10 +0000
Manifest this update: Wed 13 May 2026 01:01:10 +0000
Manifest next update: Thu 14 May 2026 01:01:10 +0000
Files and hashes: 1: PsU7x_frD08SU2YYN4xYvGI8q1E.roa (hash: k6MudYJE0V8N7WpGxi22h24h9nGg9VIaakZ/jcGCILw=)
2: U9xdTpyQVzxt330Ay-iy7aQT_IY.crl (hash: CfOAHTl4vsPYAYop6Qw2fKls1yim3vMg29K2VJvfpP0=)
3: fOZ6kY7go8H3U7EGMazIlVOf4S8.asa (hash: ZG2DRjQ6yjHyZJgJZLq1YZ9mSn6uEwFWnifyu/zanYY=)
4: xOttd6TpxOr24A9NYb5gHM_31mk.roa (hash: acecs5fYnCii+jIlRbpWYRX+vj6OKx+EgPOK7cU5+y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9xdTpyQVzxt330Ay-iy7aQT_IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:1b:0b:52:0e:56:ce:4d:f7:68:91:3b:ad:bf:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53dc5d4e9c90573c6ddf7d00cbe8b2eda413fc86
Validity
Not Before: May 13 01:01:10 2026 GMT
Not After : May 14 01:01:10 2026 GMT
Subject: CN=7bdd668feb117d72e49443e0b7ce712b056ad5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:19:92:8b:c4:af:00:cb:65:84:50:57:05:09:
e6:c5:af:62:42:bc:2b:1e:5d:83:8d:bc:31:fc:e0:
33:d8:5f:05:60:9b:67:db:66:bf:75:bb:b1:2a:6a:
c9:c7:0d:cb:09:c4:8b:69:f2:f4:5b:91:81:f1:12:
e9:d9:2c:61:6f:8f:4e:a8:1f:e3:46:c9:f9:85:e9:
68:cd:73:f8:f6:6d:79:39:be:3c:69:b8:a2:b3:25:
4e:0e:66:65:a6:78:0e:41:c1:cf:ae:4a:e7:cd:75:
e4:34:54:9a:e5:86:6d:06:28:59:c6:e0:bb:8c:1f:
d1:f2:da:8c:5c:94:2c:b2:1e:20:d6:85:4b:55:cd:
bb:d2:bf:0b:b7:48:42:dc:23:bb:fc:5c:0e:af:59:
38:2f:8f:6e:e2:32:eb:e5:40:c6:4e:20:2f:aa:6b:
a9:8a:b7:80:31:2d:0d:f8:19:ba:d8:a0:b0:4f:ab:
57:aa:37:c3:5c:d2:96:36:b4:be:26:88:9e:4e:0f:
46:38:22:52:53:c8:35:f4:73:97:7b:53:6f:74:38:
01:c8:59:ea:fa:e9:11:b2:9f:7a:1f:78:8d:72:be:
cf:8e:04:d5:13:88:68:cf:66:ee:ca:84:eb:e4:b8:
33:7e:05:eb:80:bb:7b:7a:00:3d:5d:4e:84:73:5d:
2b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DD:66:8F:EB:11:7D:72:E4:94:43:E0:B7:CE:71:2B:05:6A:D5:E8
X509v3 Authority Key Identifier:
keyid:53:DC:5D:4E:9C:90:57:3C:6D:DF:7D:00:CB:E8:B2:ED:A4:13:FC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9xdTpyQVzxt330Ay-iy7aQT_IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:aa:bc:9c:54:9f:f5:6a:04:4a:96:0d:02:5c:61:f9:92:7d:
19:88:2e:f0:1f:0b:5c:ec:a5:39:3f:af:93:f1:32:ed:83:20:
1a:b6:f3:cd:f1:8d:79:99:a4:2b:8b:56:e3:5d:c8:38:4c:42:
a7:6d:9b:a6:bf:f8:a5:bc:8b:49:10:f5:69:98:ff:dc:55:d7:
d6:ed:e5:d4:ac:5f:84:7e:59:d9:03:35:ea:14:e1:a0:6b:ae:
fa:2b:0d:ca:8d:a1:89:c2:08:ba:7b:ff:b1:aa:5a:86:4e:12:
24:50:06:0b:48:46:cb:5c:5f:91:df:0f:c0:72:e0:3c:e4:34:
44:3e:a6:f5:51:d8:71:59:7f:91:13:e0:95:b3:5f:34:d2:5f:
21:88:50:e5:31:92:08:0b:a3:4d:a8:67:84:ef:a5:cd:06:04:
25:03:3f:be:76:00:4f:46:8c:82:11:b8:64:df:d8:a9:5c:d4:
62:b3:6a:15:25:63:f3:da:a8:e0:34:68:cf:03:75:0c:81:7b:
3e:d8:d1:f3:23:df:57:e1:96:f6:05:f2:64:e0:23:07:d6:99:
8a:6e:d9:67:3e:e9:ce:50:78:1f:03:47:50:69:2b:50:44:aa:
49:91:da:c3:05:92:97:1a:01:a5:08:d0:ec:ec:72:ab:7a:16:
e8:62:6a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:06:45 2026 by rpki-client