Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
File: U8vRR3BEoDQEx_xDlhwsg7unW7w.mft (raw, json)
Hash identifier: 9nsC+IrY4EMhzL5WioL8MkJUqArcgrlY2NtMkVJCNyc=
Subject key identifier: 97:32:FB:4A:20:4F:1F:7D:6E:B3:61:20:5F:80:AB:8B:F2:B8:CB:E7
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 019D29609344B1131F1FC3F7FFB6EA9283F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
Manifest number: 10B6
Signing time: Thu 26 Mar 2026 09:01:28 +0000
Manifest this update: Thu 26 Mar 2026 09:01:28 +0000
Manifest next update: Fri 27 Mar 2026 09:01:28 +0000
Files and hashes: 1: U8vRR3BEoDQEx_xDlhwsg7unW7w.crl (hash: 6Gj/Rlo/Lu1w0Csjpya8GMJKERrYG4e6owPLfHrJt8Y=)
2: i-hrmAd6eP2UJtkk3SPMJzG0IR4.roa (hash: B6teHj1AoVH0G/n45VB0pZwR7t3AJ0lfJJi8U5XTRvo=)
3: zaKgjQxKOXseye7OptrYTXdeRW8.roa (hash: msUavGu33dhomVrKx+MtKYwUf9QSzxgfQ+UXycVAuNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:93:44:b1:13:1f:1f:c3:f7:ff:b6:ea:92:83:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Mar 26 09:01:28 2026 GMT
Not After : Mar 27 09:01:28 2026 GMT
Subject: CN=9732fb4a204f1f7d6eb361205f80ab8bf2b8cbe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a6:54:ee:4a:cf:91:63:76:fe:60:8c:da:0c:
15:ee:c6:65:49:23:b8:83:f7:16:e5:b1:7c:fd:32:
4d:06:da:de:ab:96:59:3d:f6:a8:1f:6e:14:20:5d:
7a:86:5b:d4:5c:4c:83:cd:09:55:a9:61:c3:47:e6:
72:91:af:87:af:48:38:d4:99:01:a3:60:b0:ff:f3:
a7:82:48:4a:e1:9c:45:1e:55:66:39:a7:b7:d3:6c:
92:79:3c:d5:7c:fb:39:99:ca:cc:7c:f8:fc:5e:50:
4e:ce:d7:32:9f:87:3b:7b:30:6e:3b:12:26:03:8f:
0c:cf:42:ee:d5:c5:1f:b9:08:93:db:39:b6:e8:c3:
fa:e2:7f:d0:bd:20:70:b5:5d:b2:d7:a6:ba:d9:7a:
ac:88:c6:94:3a:37:0c:16:5a:a2:fb:d9:e6:8d:06:
55:7d:15:46:6f:47:1a:42:08:94:58:7a:29:ee:79:
51:74:ce:2d:40:db:5b:3f:25:dd:99:bc:fe:6e:cd:
e7:2f:d3:1b:6c:01:25:5b:a4:4e:7d:30:e4:16:2a:
79:90:96:c5:e1:fd:07:17:72:60:aa:b1:70:47:fe:
60:4a:89:a7:4e:c6:cc:37:84:09:ee:82:83:ba:c7:
70:9f:e3:67:3f:b7:1e:1f:d5:2f:82:ea:34:f3:3f:
f5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:32:FB:4A:20:4F:1F:7D:6E:B3:61:20:5F:80:AB:8B:F2:B8:CB:E7
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:e2:b7:48:ff:84:c6:63:40:6a:58:9e:5b:7c:86:c9:fd:67:
ca:31:54:fe:85:21:c2:d8:d5:6f:76:1c:09:fe:3b:9c:0a:ef:
97:9f:99:60:88:d2:79:de:9a:ce:6c:de:85:f9:23:9e:38:12:
ad:d2:83:b0:b2:d2:15:7d:52:47:53:fa:dd:51:08:a2:cb:dc:
75:44:ff:67:1c:ea:48:10:f9:49:20:69:76:06:36:5a:5b:de:
68:10:eb:62:40:bb:96:87:b8:e8:2c:96:2a:36:a0:ee:81:b9:
d1:2b:50:a9:50:5e:70:93:a6:e5:39:6d:47:fd:02:c7:45:b7:
32:d3:68:12:4c:bd:73:c4:c7:a4:5b:f9:1c:55:cb:4b:c0:b9:
49:31:0e:6f:b2:20:44:16:ba:1e:2e:1e:48:9e:3d:47:c3:f7:
22:fc:69:f1:c1:0b:9b:07:17:54:6f:21:07:13:9f:5e:bb:a6:
da:87:57:6e:39:83:af:4b:15:34:86:ac:e8:2f:e4:04:69:ba:
ba:a9:dc:1d:30:00:34:51:d7:a1:e6:58:9b:d7:83:a1:d7:66:
26:04:d1:6d:71:75:ad:d5:1f:0c:07:ad:9e:b1:1a:fb:ba:42:
33:2d:ae:23:f6:71:53:be:e9:2e:05:3f:05:c4:c2:ed:df:c2:
6d:5c:73:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:51:41 2026 by rpki-client