Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
File: U43RixaS2KPncS0-a5KLCaoK5mw.mft (raw, json)
Hash identifier: 4MbJKEULVJuPipDijyQaO//pHiTxvcZb7Vyg/5YEtjw=
Subject key identifier: 76:86:35:6C:51:68:57:57:32:73:A5:D2:EC:B6:7C:ED:99:11:AE:51
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 019DB246748351D2CF09E769B395239B8213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
Manifest number: 03AF
Signing time: Tue 21 Apr 2026 23:00:54 +0000
Manifest this update: Tue 21 Apr 2026 23:00:54 +0000
Manifest next update: Wed 22 Apr 2026 23:00:54 +0000
Files and hashes: 1: 2ZPAoDVMpQcEFj6ZwF6t3pvmnvE.roa (hash: 1rHNnFMhQDvJllSq2QAXfLYw1Y4xr+/L6lecMSt4yzM=)
2: 49wISrZvaWfJmuYUokxBAxCFFnA.roa (hash: fVyYSxQVcSLUIxvGvzkQ4MbdrWMkDcckbPhROtPlP1s=)
3: U43RixaS2KPncS0-a5KLCaoK5mw.crl (hash: agY2wYFCqiEKlO60kqhyuziHOSVxIrOrZEc/IdNyHhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:46:74:83:51:d2:cf:09:e7:69:b3:95:23:9b:82:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: Apr 21 23:00:54 2026 GMT
Not After : Apr 22 23:00:54 2026 GMT
Subject: CN=7686356c516857573273a5d2ecb67ced9911ae51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e8:b6:21:bb:cb:af:2a:20:0f:a6:78:56:d8:
81:f3:e7:c4:62:bc:1b:90:b2:97:d6:7c:ff:1d:8c:
96:14:e1:f7:14:e5:69:37:82:6d:ce:f1:73:0b:a9:
68:29:cb:55:eb:0b:67:f2:30:f3:00:1c:aa:9b:40:
e8:b4:7a:40:1b:25:fb:1b:f9:0f:39:14:10:0e:53:
dd:c1:58:59:fb:62:13:82:20:68:2d:41:f0:6f:88:
d6:8c:53:bf:f9:d3:ab:af:9f:3e:7c:7c:ab:7f:e9:
7e:66:95:d0:ad:fd:10:50:9b:86:d7:9b:26:14:23:
45:6e:26:cf:34:3a:3c:70:10:da:f2:b3:7f:05:dc:
07:70:85:f2:69:02:40:10:e3:ea:e7:09:36:98:53:
16:10:0d:01:d0:81:a2:49:a7:ee:e9:da:9b:58:3b:
99:26:82:9e:88:f0:1d:e7:81:8e:7c:46:bd:90:fe:
16:3e:68:9b:75:b8:36:94:18:0c:1b:56:80:bb:09:
c7:dc:92:ce:ad:2b:92:7d:f1:66:21:dc:c9:e2:bd:
db:1e:ad:22:1c:ee:b6:07:91:27:28:04:ac:03:85:
26:cc:b2:5e:a3:16:be:88:78:cc:8b:54:ae:b6:50:
dd:04:7b:df:0b:d0:07:25:cf:30:bf:45:da:a6:bb:
fe:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:86:35:6C:51:68:57:57:32:73:A5:D2:EC:B6:7C:ED:99:11:AE:51
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0d:89:52:bb:0b:2d:4b:ac:92:e3:f7:49:ff:ac:02:c5:0b:
15:20:7d:6d:18:13:9c:23:54:54:31:f3:0e:3a:5b:89:19:8b:
fe:66:31:39:01:ad:60:46:02:fb:b0:ff:91:7e:66:25:53:ed:
06:c7:f2:9c:62:cd:df:cf:15:3a:78:c0:bd:c2:5a:fd:6c:cf:
1d:ad:7c:20:3a:2a:9d:da:ad:10:4f:c7:9b:ec:89:fd:b0:74:
55:2d:55:28:15:5e:b7:68:30:59:67:7b:5e:c9:67:f3:07:53:
c9:b9:f3:df:f8:ad:a7:f4:6c:70:b3:e9:75:70:a3:d1:51:26:
45:8f:3b:38:f7:06:25:9c:69:bc:4d:e9:cc:77:a9:61:28:aa:
ef:1b:d7:55:4a:83:a1:01:f7:41:55:5e:39:38:59:21:c4:a2:
9f:3a:9a:b3:ee:e4:dd:b9:b4:9c:40:48:23:38:56:a4:8a:91:
de:2e:05:01:4c:10:61:4d:05:36:1f:28:d7:47:81:c3:30:2d:
17:dd:52:17:ba:77:3f:1f:1a:e3:89:1a:4d:74:37:7c:21:c5:
d2:26:bb:88:96:b7:e3:54:17:77:b9:04:88:bb:f6:36:71:26:
1f:86:b8:eb:f2:8d:71:b4:fe:60:26:c0:03:8c:15:ee:e9:3a:
6b:6f:bc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 10:30:39 2026 by rpki-client