Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
File: _U0cuqkAydq9Kh92gZih5VvPtQ8.mft (raw, json)
Hash identifier: 3cyfnUy1+jx6WVugDMCHgbqXtRPA8jmxAo+8V534cDg=
Subject key identifier: 11:06:9D:0C:AC:22:54:4C:84:21:CC:B5:38:DB:BF:4B:89:2F:44:AD
Authority key identifier: FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F
Certificate issuer: /CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
Certificate serial: 019D390A50A57347260C6A9132CD57B3CDF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
Manifest number: 086D
Signing time: Sun 29 Mar 2026 10:01:10 +0000
Manifest this update: Sun 29 Mar 2026 10:01:10 +0000
Manifest next update: Mon 30 Mar 2026 10:01:10 +0000
Files and hashes: 1: _U0cuqkAydq9Kh92gZih5VvPtQ8.crl (hash: IyxztZKFyMQP+iK8Jz8BhJCUm7IRqCcEefEPY9sNx9g=)
2: w6o_mFdaC1iE9HreLWZZW7CeetE.roa (hash: ULCFerhBb+X2OLMdFVdyDjPTSfhj+p+sqvjNiKXZOJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:50:a5:73:47:26:0c:6a:91:32:cd:57:b3:cd:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
Validity
Not Before: Mar 29 10:01:10 2026 GMT
Not After : Mar 30 10:01:10 2026 GMT
Subject: CN=11069d0cac22544c8421ccb538dbbf4b892f44ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:9c:ab:4d:5b:90:91:b9:5a:bb:be:28:90:
5b:4d:da:c1:93:1c:fb:d5:e0:02:e5:85:3d:fd:3d:
bb:39:69:46:80:80:72:fb:a0:7a:51:65:3e:cf:4c:
1c:0f:c1:ba:73:67:1d:86:1b:81:7b:bc:85:43:f6:
a5:1a:5b:e7:0d:3f:87:96:71:a5:d2:2b:71:8a:d9:
a2:ac:7d:c9:0e:36:5b:f3:ee:14:11:59:7f:e4:46:
50:d1:96:3c:a9:e8:c8:b8:25:a5:50:e4:cf:75:18:
8b:72:52:76:13:d5:19:e8:50:39:59:f6:ef:61:69:
20:0e:3b:76:06:be:7e:df:fd:f3:0f:63:39:9e:ea:
e2:c5:5a:88:80:e1:de:77:ac:29:94:29:e7:52:89:
85:8d:42:48:b7:5b:a9:e1:1a:05:30:32:57:ed:ca:
56:75:cf:ab:e7:ac:88:32:7b:e7:e9:9f:f2:29:34:
a4:84:af:a3:0e:c3:57:a0:17:82:5a:fa:8f:0b:55:
8f:f6:15:eb:c2:9b:a4:e1:d3:09:86:28:d2:d7:9d:
e0:f1:12:a7:3f:7a:8c:83:1b:d2:c5:1a:bd:90:de:
2d:31:d2:da:28:63:e8:4e:6c:5b:a6:25:07:ff:e1:
d0:7c:87:1e:a4:33:98:2a:2a:cc:d6:5f:e0:0b:c5:
3e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:06:9D:0C:AC:22:54:4C:84:21:CC:B5:38:DB:BF:4B:89:2F:44:AD
X509v3 Authority Key Identifier:
keyid:FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:be:7a:50:19:5f:8f:e7:6c:f5:1e:b5:77:83:3f:24:68:01:
5e:a8:ef:1b:1c:ec:43:3b:ca:df:20:2c:1f:95:9e:cc:22:2c:
72:15:31:91:61:ba:1d:02:22:3e:d4:f7:ad:b7:10:e2:44:8f:
85:76:f6:84:f3:36:d3:ec:de:ba:9f:b9:c7:22:57:e5:0f:93:
05:af:54:f8:76:6e:f3:e9:e8:bf:b9:b9:c6:17:b0:1a:bb:52:
4e:fc:df:bf:3d:18:e9:f1:4f:37:86:c4:f0:0a:be:a8:d9:e3:
07:db:87:a6:0d:da:49:72:cf:91:98:90:a0:36:77:96:41:8a:
4b:c8:86:f4:01:71:3f:b9:af:fa:39:75:f7:2c:af:4d:e6:ea:
7e:27:1e:c4:1d:f5:0d:37:e8:72:2f:e4:24:80:d4:a7:72:d4:
92:23:f8:c5:78:a8:8f:01:f7:c9:9f:43:3f:82:0c:63:80:0d:
77:a6:46:91:b5:ad:20:be:ba:c4:67:5e:3a:6d:45:3e:d0:f1:
6f:06:a9:26:94:c4:de:46:f0:0a:bd:9c:20:50:96:d4:f5:b0:
8a:41:b5:c6:92:5e:75:50:10:a5:84:2a:2f:df:21:ca:81:43:
3c:ac:49:d8:ab:dd:c8:c1:f8:80:b2:02:a5:06:23:11:11:06:
9c:32:60:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:39 2026 by rpki-client