Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
File: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft (raw, json)
Hash identifier: E0LWb7pZwQPz8xkQWcmLNU4QZR8iVL9XJI4eYrPYx0E=
Subject key identifier: 74:CA:0B:53:ED:5D:F1:90:A7:8C:E4:79:DB:2C:F3:C4:EF:A9:C2:19
Authority key identifier: 53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA
Certificate issuer: /CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
Certificate serial: 019D26282DF376593301A95442D28CA9BF99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
Manifest number: 0869
Signing time: Wed 25 Mar 2026 18:01:00 +0000
Manifest this update: Wed 25 Mar 2026 18:01:00 +0000
Manifest next update: Thu 26 Mar 2026 18:01:00 +0000
Files and hashes: 1: Tv0ULnXhuU-LX5lHMmtC4uXh3f8.roa (hash: G7sOuhUNSdG8wE7mvWF+cLqHad92elbdv/9zhXuTLxo=)
2: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl (hash: 3FxuhGxyMhfn8j/YznE61eyYtzwmVUAbT1nrO/XfoZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:2d:f3:76:59:33:01:a9:54:42:d2:8c:a9:bf:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
Validity
Not Before: Mar 25 18:01:00 2026 GMT
Not After : Mar 26 18:01:00 2026 GMT
Subject: CN=74ca0b53ed5df190a78ce479db2cf3c4efa9c219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2e:f2:b7:62:53:f7:27:ee:37:bc:de:48:24:
47:6c:b4:68:e5:4f:45:2d:7c:b0:46:b5:c1:8c:ab:
a8:37:50:3f:2b:34:c8:04:ec:0e:f9:55:9d:c0:be:
f8:02:f7:56:fe:12:9c:01:68:0d:ed:16:7d:a1:bc:
b1:ae:19:52:6e:3c:24:2c:ee:ab:b8:af:8a:89:ae:
71:37:a4:2b:58:cd:22:ff:05:cd:3c:33:ca:8d:ba:
1c:bc:bc:97:5e:90:b4:29:c9:c1:a0:ff:85:30:d2:
65:b5:4c:7b:4a:76:aa:5e:f5:bd:40:34:2a:e6:54:
81:9a:93:fc:ea:60:b0:f1:e4:f9:07:ac:11:8b:7f:
1e:93:e3:8a:43:10:a0:1d:28:e9:60:bd:b7:e9:2c:
f7:4b:2d:28:fc:1d:a2:5a:35:97:67:fb:f1:53:39:
75:8f:a1:ba:18:ea:47:02:f5:8a:f2:6d:8e:8c:ca:
86:6f:ae:97:e8:d5:ef:86:13:96:d2:dd:6b:02:9d:
7a:51:8a:73:6a:6b:cf:26:66:61:d9:ac:ff:dd:0c:
ba:09:bf:f4:27:a7:65:8f:54:d3:e7:57:10:8f:48:
e3:90:ad:e9:92:64:02:f4:44:49:4e:55:e1:2e:b2:
a4:20:97:ae:5f:21:ec:ee:7c:22:68:e3:5e:76:27:
0e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CA:0B:53:ED:5D:F1:90:A7:8C:E4:79:DB:2C:F3:C4:EF:A9:C2:19
X509v3 Authority Key Identifier:
keyid:53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fb:25:92:a7:fe:01:04:2a:ec:46:3a:51:e9:c1:75:a0:aa:
a7:0b:7d:f3:1d:db:b8:21:ab:7b:00:38:34:b4:3f:6c:92:4e:
5e:18:7b:5b:d9:ec:b3:2d:2e:2e:1d:fc:fa:b5:c7:f5:45:ec:
a6:5a:76:e7:d4:d4:07:ab:03:92:e0:ad:86:f3:b2:ae:03:cf:
01:f0:4b:9b:d5:aa:2c:00:58:fc:da:79:ad:42:5e:17:d6:ba:
0c:61:97:58:20:ba:6a:02:bb:c5:68:a1:0c:1f:d2:d2:71:96:
f2:56:4c:d9:8e:f4:d2:60:bb:0a:27:26:ee:bf:ea:b0:44:0e:
41:0e:18:e2:14:88:af:31:21:fe:24:f9:6f:42:42:7a:1d:66:
4a:9c:d8:09:11:81:1b:bd:9f:27:d7:48:32:25:e6:2e:a4:31:
c4:f6:6c:d9:c5:3d:90:89:70:eb:e9:cd:d5:3b:a7:24:7b:64:
33:35:24:b9:84:55:c0:6c:1d:2e:fb:52:4c:ac:0e:22:f1:e2:
8d:3a:de:93:11:11:be:a7:cb:9a:ea:2c:84:e1:4c:e0:95:cf:
e9:b0:b2:19:ee:3b:b3:90:46:df:dd:02:a4:71:47:45:f5:b1:
65:ec:45:81:d0:0f:d7:80:a4:15:44:a3:92:97:30:90:12:c9:
71:c6:a1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:11:04 2026 by rpki-client