Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
File: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft (raw, json)
Hash identifier: xuFJZahV1hnsMIer5RniIr72PLxbQ4XdnU6b+YZqd4A=
Subject key identifier: F2:C3:35:4B:99:A0:47:A5:1E:90:86:33:72:1C:B7:8B:EA:03:54:F1
Authority key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
Certificate issuer: /CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Certificate serial: 019D29CECE1F323079C5D7B891047695254F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 11:01:52 +0000
Manifest this update: Thu 26 Mar 2026 11:01:52 +0000
Manifest next update: Fri 27 Mar 2026 11:01:52 +0000
Files and hashes: 1: 7pmNInk-dCH6WsuaRDxg2ILy8pg.roa (hash: 2m1FS9YMqm9NTE7E4KU6Pg9M6MzDGeacr6q3JFeGbKM=)
2: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl (hash: M03Qv4oNacQ3JqTFIMQhCqiKr+2zN85Hc0fxhna8mfE=)
3: t_7IHQAUEyaUbl5DxXVWHE2bbGE.roa (hash: a851GGpE/WvCnOovf5sLJTvqxcyYbrGtDw0UsU9RPPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:ce:1f:32:30:79:c5:d7:b8:91:04:76:95:25:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Validity
Not Before: Mar 26 11:01:52 2026 GMT
Not After : Mar 27 11:01:52 2026 GMT
Subject: CN=f2c3354b99a047a51e908633721cb78bea0354f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fe:10:72:92:bb:7b:15:c1:d8:b3:78:19:db:
af:8b:07:94:bf:d6:0d:50:13:98:14:d3:e9:0b:a0:
9f:18:aa:dd:39:39:7e:9f:80:c0:6a:b4:12:07:9e:
28:39:5f:41:31:6b:f5:1d:79:4b:ca:80:8d:a7:45:
3a:6f:e7:8d:79:5d:c9:fe:38:5f:6c:35:c4:8d:ac:
9f:32:59:94:b9:12:17:16:98:d3:e2:5b:cc:35:91:
56:05:9e:50:1e:18:05:12:96:56:d4:ab:fa:d9:e4:
f9:91:e8:f5:1b:2d:e7:07:a2:76:f0:27:bf:55:0b:
5d:12:fb:08:c4:04:2f:1e:9b:ee:39:be:b7:2e:02:
e0:eb:c9:b7:40:af:7b:b3:3e:a2:4b:c0:be:3b:0a:
e8:b4:4a:03:7b:7a:fe:c9:10:d4:f5:ad:a3:4b:e1:
ea:96:9f:a0:90:b7:da:8c:12:20:22:fe:30:7f:49:
c5:5d:58:5b:1f:45:59:db:f4:c5:87:e8:10:cd:9f:
75:89:3a:7f:b7:d1:e4:dd:cc:0f:03:b3:d1:53:57:
5d:c0:56:7c:bb:67:03:d6:2a:13:0e:04:36:16:ca:
09:b3:fe:22:72:81:50:6d:c5:2c:71:b7:3d:00:1d:
06:93:f5:cf:70:b1:8c:15:14:3d:42:24:21:80:cf:
ed:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C3:35:4B:99:A0:47:A5:1E:90:86:33:72:1C:B7:8B:EA:03:54:F1
X509v3 Authority Key Identifier:
keyid:53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:46:79:84:9f:39:2c:7f:25:f0:78:2a:ec:7c:68:6c:23:94:
ff:ac:28:fa:37:6a:af:3e:da:52:c2:a7:7d:5f:c4:49:d7:50:
31:d5:9a:49:81:3a:49:df:c3:68:64:4b:70:7f:7f:e4:22:f0:
20:96:54:ff:48:da:c0:a3:38:e6:c8:54:48:9f:9e:03:23:ea:
9d:a1:11:4c:b2:33:2e:e6:00:b5:ab:11:48:49:9a:a2:3a:b7:
3c:51:8f:7e:97:fe:87:fc:4b:ed:94:d2:da:ff:6a:17:fc:fd:
dc:80:7f:bd:58:a2:22:70:87:f7:ef:b5:29:f0:a9:2f:63:c6:
ce:cf:d0:f4:7c:ee:73:36:c7:38:d9:92:86:3a:6e:64:6b:f7:
37:84:d6:3d:4a:08:2d:e9:74:6e:f8:ba:ea:52:78:49:79:1a:
18:ec:5d:c6:bb:73:bb:3f:9f:33:52:27:f5:02:b2:59:bc:c5:
e5:97:00:4f:75:5c:0c:d1:0c:08:9f:da:ee:46:15:ad:bc:fe:
a8:cb:87:36:b7:6c:c2:69:06:43:0a:0c:cd:69:0a:21:f4:5b:
2f:35:df:9e:ba:9c:07:8b:6c:ed:57:7d:15:6b:85:83:fa:02:
f8:00:3c:80:c9:05:d6:8e:99:d9:3b:4f:29:ab:62:88:a4:2a:
c7:fd:28:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:35:56 2026 by rpki-client