Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
File: U6EliQpK8JJFWrx7tav-SM2FLAY.mft (raw, json)
Hash identifier: AyHhT95hnq28ZiBC9+T+TPfQpxzFFemjelZK7o+2GjM=
Subject key identifier: A7:4D:42:75:D7:EB:CE:CC:D7:20:A7:9C:CD:1D:A4:DE:BB:26:4E:78
Authority key identifier: 53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
Certificate issuer: /CN=53a125890a4af092455abc7bb5abfe48cd852c06
Certificate serial: 019D382E36FEE9CD9DB4C608610E4E31A290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
Manifest number: 08CC
Signing time: Sun 29 Mar 2026 06:00:45 +0000
Manifest this update: Sun 29 Mar 2026 06:00:45 +0000
Manifest next update: Mon 30 Mar 2026 06:00:45 +0000
Files and hashes: 1: 8otHkib5_3i41JyAw70LeXUh0QU.roa (hash: 0qAK41CxT/RWAwJIryforayLl8dembnwnfhhCABuNu8=)
2: U6EliQpK8JJFWrx7tav-SM2FLAY.crl (hash: CdvXkYguTQ0AQ1EnpgASW4mj63dLvrROl4miXt08caU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:36:fe:e9:cd:9d:b4:c6:08:61:0e:4e:31:a2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a125890a4af092455abc7bb5abfe48cd852c06
Validity
Not Before: Mar 29 06:00:45 2026 GMT
Not After : Mar 30 06:00:45 2026 GMT
Subject: CN=a74d4275d7ebceccd720a79ccd1da4debb264e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b6:ee:2b:16:ac:38:da:53:ae:e5:fb:d6:a3:
a7:2c:28:a9:41:7d:31:34:5a:d6:5f:7b:b3:dd:29:
a2:cf:80:9b:9a:17:66:ec:a5:78:18:19:90:95:14:
b8:61:0e:1f:0f:30:e0:be:5c:51:09:cc:66:f4:8b:
9b:20:31:6e:0e:c6:11:cb:37:d8:63:61:7a:62:a6:
5e:fd:b5:06:48:8c:97:e7:af:65:57:7e:4c:ce:ba:
3a:7e:7f:a3:36:51:47:52:ec:f4:03:b9:47:30:02:
95:36:b6:22:60:3d:b5:12:2e:62:d3:c5:08:a8:31:
d7:cf:06:d4:30:0e:23:50:7b:47:78:2c:f9:a1:f0:
bc:ee:ea:b9:79:43:96:52:94:18:25:e5:b1:c0:45:
a3:c0:36:7e:4c:b8:1b:b1:d2:b0:46:39:2b:c1:7b:
b8:6d:6c:b6:28:42:43:3b:7f:81:de:26:3f:66:bd:
d0:33:86:00:50:4b:44:a2:c6:79:65:d8:6e:6d:bb:
6d:eb:6d:c6:30:8a:9f:b4:64:b7:56:43:67:8b:58:
f7:27:61:8e:54:93:31:ce:98:f4:cc:a4:9e:96:7f:
a2:f8:56:a4:d7:94:81:3a:f5:e0:e4:cc:07:77:b6:
08:c1:e4:72:ce:89:2d:d1:a0:22:f7:f1:99:4b:9c:
a0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4D:42:75:D7:EB:CE:CC:D7:20:A7:9C:CD:1D:A4:DE:BB:26:4E:78
X509v3 Authority Key Identifier:
keyid:53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:96:f1:f4:73:9f:ed:ac:08:56:a6:a4:3c:a0:de:d1:49:93:
52:12:1a:da:21:b8:fe:8e:00:c8:9b:2a:61:52:a8:71:45:3b:
01:52:52:a0:4b:16:13:9b:a9:23:1c:12:8e:c6:43:d3:4f:6a:
ef:1f:68:cd:29:ec:a2:c1:b3:89:df:23:83:c1:ae:66:f3:b1:
df:f9:ad:a2:e6:d8:c3:60:ab:ae:28:21:83:d2:d2:88:d6:b1:
1a:81:6c:37:ae:fd:4d:f1:2e:bf:5e:ba:70:2a:e2:48:13:8d:
b4:89:ab:45:15:bb:2f:37:08:7e:f4:d2:5a:60:c8:68:57:f5:
91:58:0b:37:9f:2c:ed:9a:31:65:b7:56:69:e9:30:ee:13:0d:
72:08:be:3c:f6:34:4c:39:73:cd:55:d5:81:19:64:db:d1:42:
e6:4e:15:ee:3e:15:76:c4:29:d3:64:12:31:65:b4:0e:97:8f:
cc:35:5a:1b:d2:0c:e0:c8:91:cd:de:e7:f0:24:e5:64:10:b5:
43:3d:e3:03:8b:82:f7:e5:f0:dc:bc:2d:14:b0:4f:df:4d:8e:
b8:34:d4:35:a0:f1:4e:3b:b4:7d:0b:e4:2a:fa:0d:46:a3:5c:
3d:bf:15:82:b8:88:c9:f2:73:82:a9:c3:bf:10:8c:42:e5:af:
17:59:e4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:21 2026 by rpki-client