Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier: VGzM7AvLKIQGXRUbdRadTH3p/zfLAiqDwraDFXvYIz4=
Subject key identifier: AC:DC:4A:97:80:86:55:59:98:6B:4C:8B:DF:F3:FC:66:A3:7D:4B:6F
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial: 019D27E07A6F0CDCC0F77BC0CBC3F7FFB526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:01:55 +0000
Manifest this update: Thu 26 Mar 2026 02:01:55 +0000
Manifest next update: Fri 27 Mar 2026 02:01:55 +0000
Files and hashes: 1: IvGUn_2-YX3IhLfXSvYGkrdm6NU.roa (hash: tNs9qrcIboBy4IbyGsAG+6ZLzNLrX28RoLdHaH5fRLc=)
2: LJPLYMO5vOxs_MtRPfGWysA-2S4.roa (hash: RrDOCY1v4Pi574dcipWzNUzibj7ERd9ByP6OHQKcs1o=)
3: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: E0dcoSRQlddqwQXbNCsqHebN8Ef40ZvIhyG7cYoZX/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:7a:6f:0c:dc:c0:f7:7b:c0:cb:c3:f7:ff:b5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Validity
Not Before: Mar 26 02:01:55 2026 GMT
Not After : Mar 27 02:01:55 2026 GMT
Subject: CN=acdc4a9780865559986b4c8bdff3fc66a37d4b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:be:4d:65:e4:3e:6f:9a:15:fd:65:65:86:
83:b2:0e:34:4c:6c:bd:01:d9:af:79:51:d5:88:ec:
b1:1f:71:09:cc:87:12:95:21:d9:ea:bc:05:0f:23:
a9:f5:e6:c3:bc:48:46:37:dc:f2:a6:c8:dd:50:64:
2f:54:dc:2c:f3:0b:63:01:9f:a1:4f:d1:c2:e5:31:
67:b4:2b:dd:df:d3:37:1f:38:17:e9:99:30:2e:1a:
f7:8d:b0:c8:73:11:4a:7d:8f:36:0d:ee:bc:24:c2:
6c:a0:70:7c:69:e3:52:f5:ae:2d:c1:80:18:fb:e5:
a6:28:75:a4:10:15:ab:f6:4e:65:2d:0b:e3:18:2a:
80:cb:c5:e9:a3:ff:02:49:58:bc:eb:39:c3:42:1f:
16:ea:b8:a9:40:f5:17:da:7b:b8:06:c1:af:bb:cf:
a1:ca:3e:4c:be:6d:ae:32:83:88:65:82:b9:74:26:
2f:7f:05:b3:7d:13:2b:d1:33:a4:89:38:e3:e3:fa:
63:89:eb:13:3f:04:a3:e8:48:d7:e2:01:f4:d2:47:
ad:db:f8:31:c9:48:cf:0f:2c:46:91:60:b4:4a:5e:
00:ef:9c:53:b3:73:46:7f:6d:c3:66:d1:79:43:4f:
ff:cb:55:3e:71:a7:49:84:58:eb:cd:fb:6f:a4:90:
c1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DC:4A:97:80:86:55:59:98:6B:4C:8B:DF:F3:FC:66:A3:7D:4B:6F
X509v3 Authority Key Identifier:
keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9f:bf:e8:9f:3c:97:87:6f:6e:a7:31:65:88:dd:d1:35:a3:
30:2b:9d:22:3f:44:1a:5c:0d:e5:0d:d7:f5:74:97:17:bd:ab:
b1:c1:3e:9a:4a:1d:42:58:91:a1:05:d9:6e:0d:c3:94:d7:f1:
f5:fa:54:d3:b9:73:79:06:31:d5:48:9a:e2:e8:6f:be:18:9c:
b9:da:1f:af:c1:a9:a8:27:14:f3:28:9f:b0:fb:e9:b4:59:9b:
d8:ea:24:28:a6:c2:f2:35:f0:49:9d:46:fc:f8:0d:c9:18:fd:
28:60:1a:31:e4:61:18:67:c4:9b:bf:fe:29:49:87:66:1f:5c:
98:de:87:16:09:d2:de:b1:6a:5b:5f:d3:c7:1c:4a:88:23:67:
68:36:25:a8:10:86:87:b7:a6:c9:3c:91:ba:68:98:83:c6:fe:
6b:6a:4c:b4:f5:24:af:f5:91:15:93:e0:5b:90:64:34:ad:83:
60:ea:2e:c1:d2:b1:5e:0c:ef:19:40:18:46:64:7a:7a:ac:ac:
9c:02:e7:7a:2c:f3:40:61:db:0e:17:ec:86:7f:b4:57:d6:7f:
8b:6c:16:d5:f3:e2:f9:7e:f0:13:e2:6e:2d:77:06:6b:cc:ba:
95:f3:35:e4:c5:6e:58:13:38:d9:dc:03:d7:b8:df:b0:eb:fe:
22:42:32:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:26 2026 by rpki-client