Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier: pLACu577Y1vfw5G+OP446ZmBgMYsFF2UFFqSMnbdEx4=
Subject key identifier: C0:E8:D1:50:13:BF:AA:13:0A:45:AE:A3:CD:DB:26:58:EF:67:D5:07
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial: 019E1DFEA8E4E13382E3FE7CA4733B189DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 21:01:29 +0000
Manifest this update: Tue 12 May 2026 21:01:29 +0000
Manifest next update: Wed 13 May 2026 21:01:29 +0000
Files and hashes: 1: IvGUn_2-YX3IhLfXSvYGkrdm6NU.roa (hash: tNs9qrcIboBy4IbyGsAG+6ZLzNLrX28RoLdHaH5fRLc=)
2: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: 5NoHXpK5Gdf3NtalHt1VHphIVagFXnrSxuxs8NfJC/A=)
3: XfYkU787j3WhMTZPnJmIUryBUv8.roa (hash: h2gKkudjUVGsEuk5RZekt+DQ3CWf3ljc/O91aN85ogU=)
4: ykl9L1ieIhGIofGi7fpGhZ_4q9o.roa (hash: SVH2fs99Ob8T2U4b3+XfOBMnnh8VK7bnsIv441zI1CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:a8:e4:e1:33:82:e3:fe:7c:a4:73:3b:18:9d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Validity
Not Before: May 12 21:01:29 2026 GMT
Not After : May 13 21:01:29 2026 GMT
Subject: CN=c0e8d15013bfaa130a45aea3cddb2658ef67d507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:a7:cb:d1:66:87:c0:d9:88:0b:97:18:34:
c9:b6:e1:21:c5:f4:ad:3a:c1:72:80:30:54:9e:7b:
8f:aa:29:b0:75:a5:4c:b9:ac:7c:d3:f7:6c:f6:b8:
53:1f:fa:5e:84:11:da:f8:d5:18:27:e0:4e:e4:0e:
ab:b1:aa:75:65:c7:d3:b3:b9:f6:28:a7:22:98:67:
da:b9:7e:66:7e:f1:e0:08:22:7a:02:f3:a6:d3:df:
5a:0b:7c:55:d9:00:95:7f:7f:e4:d9:6c:5c:3c:b1:
13:76:37:8c:c1:ec:d2:53:ac:90:ed:3d:1e:a5:b1:
52:45:2c:ab:07:6d:31:a8:66:27:13:9f:be:38:48:
4a:54:53:fd:cc:d1:d0:7a:76:3b:cd:a7:6f:bd:c9:
22:7d:1e:82:d4:19:ae:92:60:26:07:1c:f2:e8:45:
f2:96:48:78:07:35:c2:db:0b:d7:3c:b4:94:cf:0c:
58:a5:b1:8b:55:c4:4b:6d:6b:1d:38:7d:d6:c2:87:
ab:d7:60:71:fa:a8:87:4b:87:b2:71:51:5b:44:23:
17:03:ce:af:6d:cd:bb:1c:55:ea:8d:70:29:be:46:
27:a7:a0:ec:af:63:14:92:55:bc:e2:3a:cd:b3:f4:
a3:07:d9:ab:0d:bc:a7:8d:10:4f:17:8c:3b:5d:b2:
0e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E8:D1:50:13:BF:AA:13:0A:45:AE:A3:CD:DB:26:58:EF:67:D5:07
X509v3 Authority Key Identifier:
keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6d:c1:cb:88:26:66:a7:08:32:e2:f3:66:8d:f5:92:b3:e0:
99:a4:d7:04:b0:92:3e:97:63:cf:46:03:01:06:40:5c:98:4f:
34:d9:a4:fe:8a:4f:dd:60:33:07:ef:f8:d9:f7:2c:ea:f9:5f:
87:fe:41:3d:7d:fb:40:7f:72:dc:71:d4:bc:8f:bc:6d:d4:10:
47:d0:8f:52:06:82:1d:24:6d:dd:d8:60:1f:11:55:b4:be:19:
9f:5e:94:cc:55:71:a2:4f:d7:70:4c:77:99:6a:b4:68:92:8a:
6b:e8:ef:ad:c1:f1:fe:54:a9:e6:85:74:43:47:f7:9e:24:0b:
3f:fa:5f:15:2c:02:29:de:33:e1:9b:03:76:e9:7f:be:52:25:
b3:39:1d:df:ce:d3:ec:33:83:aa:64:57:4c:5a:33:c2:8c:1f:
f8:8c:32:d2:ac:8d:c0:b5:fa:62:0d:fb:24:2c:2d:aa:53:7a:
4c:d8:5d:29:38:a8:43:31:c5:a0:ba:d1:41:2e:27:9c:78:b4:
f5:d3:61:65:20:4d:bf:36:80:f3:b3:e4:bc:20:e1:1c:b4:5d:
30:ae:e7:a0:14:97:5e:7f:03:bd:1b:c4:5a:ca:c6:34:b5:d7:
f6:b1:00:c7:41:aa:e1:5f:8a:11:8c:ab:34:78:54:1b:7b:f7:
d4:74:bb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:42:22 2026 by rpki-client