Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
File: Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft (raw, json)
Hash identifier: 639PvzXCqIYsxcngVGk4D3eMMbSjU3YVuqy4EqDKjjc=
Subject key identifier: C9:E3:A4:B5:0E:11:81:66:13:20:4E:27:1F:60:8D:3C:0B:5E:71:36
Authority key identifier: 52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
Certificate issuer: /CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Certificate serial: 019D375235F31E807090B5D734EE1F18540C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 02:00:27 +0000
Manifest this update: Sun 29 Mar 2026 02:00:27 +0000
Manifest next update: Mon 30 Mar 2026 02:00:27 +0000
Files and hashes: 1: 7lREXn6K5l-DbJ8mjZvq6RJ1uEk.roa (hash: 3nD474BFUX8wCCyCzrtNJIx6J0yUBUFRCHlh3/kVZac=)
2: Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl (hash: prBdWy2ox18KgthaQLXJiZYiBDLOl7yHhOF1k4oNSYI=)
3: XqVaeCjaPtQW5nTcWKYaszB243o.roa (hash: 0c77i33BA9sh6hWoaqI47xWtW3Ms9jVeqGWtj/letD0=)
4: kEJSnxenHfD3MGsQVg0rWMsU-r4.roa (hash: CKWwPe7aGHyQIJbjGScWajSnRgDC3Bc7VORq9esiMd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:35:f3:1e:80:70:90:b5:d7:34:ee:1f:18:54:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Validity
Not Before: Mar 29 02:00:27 2026 GMT
Not After : Mar 30 02:00:27 2026 GMT
Subject: CN=c9e3a4b50e11816613204e271f608d3c0b5e7136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:db:ab:3c:bc:4e:1b:6c:38:0a:64:f1:60:
cf:96:98:84:ea:f9:2a:66:d7:e3:28:39:65:88:e4:
88:31:8d:f1:db:fd:c1:79:b9:53:33:3c:47:e5:80:
a0:78:63:65:2a:2b:16:8b:17:f9:f6:77:49:1b:51:
78:16:a1:fd:d2:2a:b0:1d:ad:07:b7:c7:a1:ed:6a:
cf:0e:7e:56:5f:25:c6:a5:82:6d:aa:9e:a3:36:62:
30:8c:89:e4:fb:9c:d3:7d:7b:5e:7e:2f:59:a5:94:
14:b3:29:09:7b:70:7e:1e:9e:bf:1c:bb:88:e6:49:
5b:b3:df:da:85:16:a4:1a:0b:dc:c0:e6:38:4f:87:
a9:91:7f:d3:90:f1:69:d3:be:ed:5f:80:28:5f:47:
8a:db:de:27:1a:c5:1a:11:7a:c9:71:94:44:1d:0a:
2d:17:85:b0:a1:a8:c5:36:46:f1:ed:2d:ad:36:7d:
c1:7b:18:a1:74:9c:91:4f:e0:d9:53:eb:fb:2e:f6:
ce:e2:7e:d7:9a:12:c8:96:e1:e1:9c:be:1a:12:00:
56:59:e8:a3:2b:97:40:53:ba:c3:df:7e:8c:8d:26:
ee:19:dd:21:99:03:41:a4:3f:69:bb:b5:b6:51:fe:
0d:0f:83:e2:a5:94:d2:28:4a:21:5b:6a:58:d4:81:
43:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E3:A4:B5:0E:11:81:66:13:20:4E:27:1F:60:8D:3C:0B:5E:71:36
X509v3 Authority Key Identifier:
keyid:52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f5:be:33:67:36:b8:7d:82:c9:1c:5e:e1:f3:88:e0:3b:f9:
99:a8:c1:f1:56:ee:3d:63:1b:6a:27:40:0a:89:e1:d2:b6:de:
5e:73:1d:bc:8e:6f:3e:19:12:1e:9e:a8:7b:18:98:37:a6:98:
88:f4:cd:ed:44:50:6f:82:cc:2b:e1:db:d9:fd:70:25:01:7e:
d5:a2:bd:8c:f1:5a:16:6c:97:d2:56:82:b3:ea:0a:ee:8e:66:
d3:ef:d1:46:c0:d5:91:0d:d9:59:e4:2d:57:a9:52:92:c8:ff:
a2:55:b7:d0:54:79:13:c2:b7:12:c2:b2:c9:a5:15:87:fc:19:
d0:27:b8:4a:98:86:9b:7a:82:d1:06:4f:ae:f7:77:07:9f:d1:
e1:53:39:d8:d8:16:8c:3f:b7:f8:51:a9:55:63:13:da:da:45:
37:86:19:01:27:b8:12:1b:e4:7a:7b:49:54:27:0c:da:48:27:
04:90:7c:7d:90:10:86:a1:1d:9a:45:3c:27:fd:45:47:50:e5:
ce:a8:dc:9e:ca:15:24:7d:8c:3c:9b:10:59:92:41:e7:5a:9c:
4d:bb:00:cd:31:ce:38:b8:43:da:4c:06:7b:38:7f:ff:f4:4d:
9b:e1:0e:0e:16:46:66:d5:c5:a1:96:5d:03:f5:b5:15:c3:2c:
62:c7:02:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:53 2026 by rpki-client