Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
File: U43RixaS2KPncS0-a5KLCaoK5mw.mft (raw, json)
Hash identifier: +RCVLE9C8lw0XCKCPdZ8/V2YSkbIbKY3bjWOqmzEajY=
Subject key identifier: 01:30:9C:80:CD:BF:C8:E2:B6:39:B3:16:0F:93:17:EB:5A:48:F8:B7
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 019CB16D3B6B7CB8B3D630CEA10581EEA97C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
Manifest number: 032A
Signing time: Tue 03 Mar 2026 02:00:51 +0000
Manifest this update: Tue 03 Mar 2026 02:00:51 +0000
Manifest next update: Wed 04 Mar 2026 02:00:51 +0000
Files and hashes: 1: 2ZPAoDVMpQcEFj6ZwF6t3pvmnvE.roa (hash: 1rHNnFMhQDvJllSq2QAXfLYw1Y4xr+/L6lecMSt4yzM=)
2: 49wISrZvaWfJmuYUokxBAxCFFnA.roa (hash: fVyYSxQVcSLUIxvGvzkQ4MbdrWMkDcckbPhROtPlP1s=)
3: U43RixaS2KPncS0-a5KLCaoK5mw.crl (hash: syoeEj28f9t5RyVLhbh4UuZ34+bR8e4611CDw4tuvHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b1:6d:3b:6b:7c:b8:b3:d6:30:ce:a1:05:81:ee:a9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: Mar 3 02:00:51 2026 GMT
Not After : Mar 4 02:00:51 2026 GMT
Subject: CN=01309c80cdbfc8e2b639b3160f9317eb5a48f8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:ee:64:3f:5c:94:42:5e:ca:10:7d:27:44:
62:76:cd:f1:2b:2c:13:31:b0:87:00:b3:e6:c3:1d:
eb:a3:b5:ce:4d:bc:bd:28:f3:35:46:45:63:4d:29:
46:0c:ff:a9:05:1f:62:d1:9d:f8:a7:0f:57:6f:59:
2e:9c:05:a3:ed:ad:75:af:6a:74:69:c7:8a:ca:cd:
27:9b:6f:eb:8c:92:24:b5:73:a0:58:ed:95:17:66:
d8:e0:45:27:3e:f7:28:97:7a:b9:92:2e:93:2a:87:
30:eb:e6:eb:c0:33:df:bd:88:64:01:fd:7d:33:08:
cb:ef:cc:d8:63:f3:8f:f5:bc:ab:ce:3e:9c:56:65:
d0:b4:ab:df:dd:f9:e7:d2:8b:75:7b:b0:9d:f4:13:
0d:b4:20:17:5c:31:c9:0d:07:9e:87:c0:e4:68:18:
93:d7:26:bf:d8:47:02:f1:4a:4e:f3:92:ba:d4:52:
ac:83:ff:70:ca:dc:1b:64:9b:06:8e:f1:a7:0c:04:
e3:aa:4d:f5:03:53:c1:52:8d:4b:a5:39:64:50:54:
0c:63:de:bd:05:43:15:92:e5:7a:3d:2f:ec:5a:ab:
9f:38:8e:ed:55:25:70:42:15:40:38:50:02:7e:2e:
53:25:d8:4a:fd:37:3f:8f:a9:cf:e1:8c:4f:01:dd:
9a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:30:9C:80:CD:BF:C8:E2:B6:39:B3:16:0F:93:17:EB:5A:48:F8:B7
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:33:a8:41:0f:b2:c9:65:27:dc:20:44:73:1f:4d:58:27:4d:
aa:66:07:c9:7b:ce:9c:61:65:41:4c:06:56:d6:b6:c6:cd:3f:
54:2e:37:32:85:70:48:a3:88:e7:76:3f:e1:c3:fc:17:a7:0a:
69:ea:a6:75:6f:05:6c:4e:dd:ca:f6:c4:17:ad:90:12:cc:4f:
ce:e6:78:8e:2a:2f:c2:8c:03:e7:eb:9b:03:6e:6f:ee:31:8d:
aa:d9:8a:2f:b0:a3:66:ef:75:e2:c7:6a:1e:38:63:8d:be:2b:
17:64:9e:25:8a:1f:f5:ac:3a:85:18:5e:e2:1c:9c:e6:4e:32:
19:3f:ae:42:09:e7:bf:69:1c:35:34:ad:d6:92:48:ff:12:b9:
8a:34:cb:1f:7e:60:12:d0:9c:6a:3b:d5:91:95:ff:50:eb:e0:
52:20:15:8b:2a:e7:7f:3a:8a:da:8e:18:cc:39:2b:05:23:58:
82:2e:78:d0:e5:f5:bc:0b:0a:64:4c:13:fd:df:bd:ae:5e:b1:
cb:e2:94:d6:15:1b:b4:35:5a:f8:7f:8e:ed:9a:b4:81:f3:e4:
9f:f0:02:4e:f6:48:55:7b:bd:5f:95:cf:49:2e:97:db:db:7b:
87:64:93:53:2c:1f:fa:c8:bc:5f:03:65:a9:b4:03:7d:98:69:
a9:46:14:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 12:29:33 2026 by rpki-client