Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
File: U_rXyaSF_rKReT654tuY9BjlxLg.mft (raw, json)
Hash identifier: XEGeEC2oQwhQeLF89igOu7SpbeFQw0pRoK8UKISPMA4=
Subject key identifier: C4:19:76:1D:B9:81:63:A7:77:52:13:1E:55:B6:DD:B6:6E:C7:89:AE
Authority key identifier: 53:FA:D7:C9:A4:85:FE:B2:91:79:3E:B9:E2:DB:98:F4:18:E5:C4:B8
Certificate issuer: /CN=53fad7c9a485feb291793eb9e2db98f418e5c4b8
Certificate serial: 019D28F25452EBD9621A465031F64599FD45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
Manifest number: 018C
Signing time: Thu 26 Mar 2026 07:01:02 +0000
Manifest this update: Thu 26 Mar 2026 07:01:02 +0000
Manifest next update: Fri 27 Mar 2026 07:01:02 +0000
Files and hashes: 1: U_rXyaSF_rKReT654tuY9BjlxLg.crl (hash: vzXerkFsn+Dd/88TQgYlLOMr8ILxUkYfkB806hb6+4A=)
2: Yg4X9H4DWGGKD8H5YRPUUkoYlHw.roa (hash: 9JB+Ut5rRiBxCY40cvzaauAZdMWzFKX4dxG7GlKOoZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:54:52:eb:d9:62:1a:46:50:31:f6:45:99:fd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53fad7c9a485feb291793eb9e2db98f418e5c4b8
Validity
Not Before: Mar 26 07:01:02 2026 GMT
Not After : Mar 27 07:01:02 2026 GMT
Subject: CN=c419761db98163a77752131e55b6ddb66ec789ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ad:4a:74:9b:40:c4:dd:db:4e:41:2b:31:ff:
b2:cd:bf:fa:2c:19:79:32:78:bd:7a:cf:42:75:2f:
13:38:61:a3:d8:ae:74:a7:e6:58:ac:86:5e:c6:31:
41:cf:80:62:e6:39:b6:b6:ae:60:26:1f:2a:4c:f1:
84:ff:56:31:84:f0:db:b7:07:f9:36:35:05:97:ce:
3d:33:a7:87:df:6f:1f:f5:0d:bc:e7:eb:42:f8:03:
3d:d1:bd:79:bb:d9:77:8b:97:e8:0f:c3:7a:eb:60:
ff:85:e1:46:57:3a:45:f5:d2:07:7d:55:77:51:fc:
a3:21:87:2a:02:c2:e0:46:6a:d7:78:ec:4d:1e:e4:
6d:b6:5f:c7:ef:a6:29:f4:c6:f3:45:76:aa:67:e6:
c1:77:6a:b0:c4:9d:58:3f:ea:db:af:e7:52:85:cd:
9e:63:b6:4a:41:2a:1a:a4:a3:57:04:1d:fe:6a:9d:
dd:73:87:a0:d5:4b:61:21:c7:5a:70:48:0e:13:29:
a8:9d:97:e5:f7:07:8b:f3:16:74:4c:9d:e0:34:dc:
45:03:f4:90:fd:db:75:ff:ea:6b:6f:ae:ed:96:8c:
e6:82:c5:90:3f:3e:13:89:b8:ff:9d:05:80:09:3e:
9a:a3:28:77:73:09:1d:e1:b9:6d:c9:be:88:b0:3b:
1c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:19:76:1D:B9:81:63:A7:77:52:13:1E:55:B6:DD:B6:6E:C7:89:AE
X509v3 Authority Key Identifier:
keyid:53:FA:D7:C9:A4:85:FE:B2:91:79:3E:B9:E2:DB:98:F4:18:E5:C4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:69:ed:36:2d:6f:87:85:1c:0b:6f:e3:a0:bf:2e:c4:f2:0f:
c3:47:c6:b6:2c:64:d0:3e:12:4b:74:1a:75:9b:f4:da:4e:e2:
4a:67:a7:15:fa:36:b5:df:fc:7f:dc:08:ad:93:92:a3:8b:36:
eb:f2:e4:b2:ce:09:47:61:19:26:48:35:68:2c:75:29:66:a9:
32:c0:b1:bf:98:b0:2a:a5:f5:d2:f0:00:9b:2f:af:53:6b:90:
58:03:32:b0:62:5c:a5:17:a0:71:83:aa:b6:7f:41:70:6e:76:
69:dc:a6:1a:c0:79:f1:2f:ab:71:a1:12:a8:8c:34:ae:6a:93:
f4:18:ce:0b:c6:54:77:39:c0:13:14:aa:76:47:7d:f4:a8:c5:
a9:e4:c5:86:06:84:96:0b:6b:da:c0:96:4a:66:7e:23:e2:f4:
04:82:06:cc:60:85:33:0d:f6:e8:6d:5b:74:ed:41:d1:e1:c1:
0b:b4:76:55:d9:03:2f:2e:9b:b6:ec:2d:4b:2a:8d:80:47:6e:
cf:0a:28:9d:bb:92:8e:04:2f:db:c4:6c:46:8f:ba:a3:50:a2:
94:27:82:9a:c4:d6:16:12:a4:e8:7f:5d:43:ce:8a:85:1f:2c:
ae:24:14:fc:59:d7:3d:cd:2f:ff:3b:c2:e2:46:8b:3a:05:5f:
cd:c7:0c:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8lRS69liGkZQMfZFmf1FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZmFkN2M5YTQ4NWZlYjI5MTc5M2ViOWUyZGI5OGY0MThl
NWM0YjgwHhcNMjYwMzI2MDcwMTAyWhcNMjYwMzI3MDcwMTAyWjAzMTEwLwYDVQQD
EyhjNDE5NzYxZGI5ODE2M2E3Nzc1MjEzMWU1NWI2ZGRiNjZlYzc4OWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA161KdJtAxN3bTkErMf+yzb/6LBl5
Mni9es9CdS8TOGGj2K50p+ZYrIZexjFBz4Bi5jm2tq5gJh8qTPGE/1YxhPDbtwf5
NjUFl849M6eH328f9Q285+tC+AM90b15u9l3i5foD8N662D/heFGVzpF9dIHfVV3
UfyjIYcqAsLgRmrXeOxNHuRttl/H76Yp9MbzRXaqZ+bBd2qwxJ1YP+rbr+dShc2e
Y7ZKQSoapKNXBB3+ap3dc4eg1UthIcdacEgOEymonZfl9weL8xZ0TJ3gNNxFA/SQ
/dt1/+prb67tlozmgsWQPz4Tibj/nQWACT6aoyh3cwkd4bltyb6IsDscawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQZdh25gWOnd1ITHlW23bZux4muMB8GA1UdIwQY
MBaAFFP618mkhf6ykXk+ueLbmPQY5cS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVV9yWHlhU0ZfcktSZVQ2NTR0dVk5QmpseExnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi81MTQwZTgtYzdmYy00OGJmLTk2MGUt
MGYwNGM2YTk5NWZkLzEvVV9yWHlhU0ZfcktSZVQ2NTR0dVk5QmpseExnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi81MTQwZTgtYzdmYy00OGJmLTk2MGUtMGYwNGM2YTk5NWZk
LzEvVV9yWHlhU0ZfcktSZVQ2NTR0dVk5QmpseExnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmntNi1v
h4UcC2/joL8uxPIPw0fGtixk0D4SS3QadZv02k7iSmenFfo2td/8f9wIrZOSo4s2
6/Lkss4JR2EZJkg1aCx1KWapMsCxv5iwKqX10vAAmy+vU2uQWAMysGJcpRegcYOq
tn9BcG52adymGsB58S+rcaESqIw0rmqT9BjOC8ZUdznAExSqdkd99KjFqeTFhgaE
lgtr2sCWSmZ+I+L0BIIGzGCFMw326G1bdO1B0eHBC7R2VdkDLy6btuwtSyqNgEdu
zwoonbuSjgQv28RsRo+6o1CilCeCmsTWFhKk6H9dQ86KhR8sriQU/FnXPc0v/zvC
4kaLOgVfzccMrA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:32 2026 by rpki-client