Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
File: U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft (raw, json)
Hash identifier: Mb5ohIPyJtUgZjusVrGz8gpAJ/ZENq8IC9sOkTzFPgI=
Subject key identifier: E1:FD:BF:C6:37:F6:47:72:E0:D0:9C:D3:86:74:35:14:5D:F0:92:19
Authority key identifier: 53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
Certificate issuer: /CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Certificate serial: 019E73D28B3B6184DD9A92D2D37DAA02BF77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
Manifest number: 048B
Signing time: Fri 29 May 2026 13:00:38 +0000
Manifest this update: Fri 29 May 2026 13:00:38 +0000
Manifest next update: Sat 30 May 2026 13:00:38 +0000
Files and hashes: 1: U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl (hash: xdIZpz69vpWi70BeeuEFrgdFPgXCGJbEl6tbk5uxZs0=)
2: qAWpsleSdTKU2QK0ge-DYDJtKTg.roa (hash: hBYa6IMYEuL9W6YmuZd1vKmz/EkBj75T5fHCqH+FPYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 30 May 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:d2:8b:3b:61:84:dd:9a:92:d2:d3:7d:aa:02:bf:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Validity
Not Before: May 29 13:00:38 2026 GMT
Not After : May 30 13:00:38 2026 GMT
Subject: CN=e1fdbfc637f64772e0d09cd3867435145df09219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:1d:6e:54:e3:42:d6:d0:f5:ad:27:fc:ac:
93:d4:a7:8d:4b:88:1e:2a:2a:19:9c:52:82:69:3c:
b7:86:c8:e9:72:e2:a9:f7:7a:9d:b0:1b:e2:87:46:
bc:83:69:ce:8d:5f:00:05:90:25:60:ef:06:32:3f:
24:52:31:3f:45:ac:96:9b:a8:7b:35:b2:70:37:88:
4f:fb:0e:ad:d7:6f:ac:5b:39:d9:d0:9e:b0:86:13:
b6:0a:36:d9:f0:74:da:15:c2:87:80:74:f4:13:0e:
fd:61:fc:e7:48:d6:f0:a4:ae:81:95:38:1a:41:fa:
13:b6:5a:72:3c:98:19:15:36:f6:38:b4:92:b0:d3:
c9:b9:80:ad:f8:ee:69:88:d2:c4:c7:a5:37:23:4b:
32:8e:47:ad:6a:ad:77:41:a6:a3:04:16:ae:5b:6c:
87:44:e1:b7:2c:07:a4:d7:74:56:72:e3:8e:64:71:
41:f0:9b:20:cf:70:23:7c:ae:07:3a:4c:d8:d1:a3:
e1:88:0c:f6:89:e8:a1:ae:c5:71:85:92:44:a4:28:
48:b9:69:29:b8:04:22:41:50:0c:a4:af:e6:66:fc:
ab:c3:56:7d:4f:af:7c:c3:8e:77:66:22:b2:44:52:
96:b3:f5:30:99:31:bf:ff:ee:8a:84:f1:4e:ae:02:
48:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FD:BF:C6:37:F6:47:72:E0:D0:9C:D3:86:74:35:14:5D:F0:92:19
X509v3 Authority Key Identifier:
keyid:53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:83:48:3b:07:0f:98:fe:19:f2:da:c9:8b:13:6e:4e:e4:c0:
93:ea:c8:a0:2b:25:04:e9:6b:f7:e9:98:d6:86:22:e9:36:cd:
79:7c:4a:b8:95:cf:1a:c5:59:ae:36:b1:af:c3:a4:10:c3:e4:
1c:9f:a7:69:eb:e4:c3:17:34:6e:cc:f8:a8:66:f9:14:b4:e6:
11:a3:10:51:05:be:d9:42:28:30:42:d1:90:04:4b:af:00:b5:
e6:00:11:bb:f9:66:63:87:e1:8d:c4:9b:4b:60:80:13:5b:b0:
2e:13:24:61:32:2a:4d:ad:3c:96:39:8f:80:1a:9c:ff:ef:b5:
f4:e0:c7:a1:0b:22:a6:34:ae:49:36:2e:21:f0:ff:63:82:b4:
c9:91:87:f9:f3:bc:bb:e3:8f:23:d6:b0:9e:16:f3:1e:d6:d3:
b9:e0:20:6d:2e:4f:b5:9c:6b:e9:24:b0:5e:8e:f5:55:6f:a3:
f2:39:11:c6:fc:40:c4:87:f2:2d:3a:f2:43:ad:31:3d:4a:99:
98:b6:ab:6f:13:9e:c1:38:e1:18:ed:34:92:4f:b4:33:60:b1:
bd:92:9a:6e:53:56:8b:49:bf:dd:e7:39:98:58:bf:76:25:23:
6a:1a:d9:e6:8c:01:ef:6a:ed:82:14:75:9d:3a:d8:6c:3f:95:
2d:be:cf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:01:55 2026 by rpki-client