Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/126851-432a-4edc-91a1-fb6a0f796b1b/1/URYCKqyLdp0wXPmCQI3cZt2cT74.mft
File: URYCKqyLdp0wXPmCQI3cZt2cT74.mft (raw, json)
Hash identifier: jnRzhGALQs/K10Ye8PCES0TZ7nWh5/+chlQ0R+RksSk=
Subject key identifier: 83:4F:93:AB:EE:1D:17:92:C9:A7:69:7D:9C:4A:30:F9:9F:D9:CA:C0
Authority key identifier: 51:16:02:2A:AC:8B:76:9D:30:5C:F9:82:40:8D:DC:66:DD:9C:4F:BE
Certificate issuer: /CN=5116022aac8b769d305cf982408ddc66dd9c4fbe
Certificate serial: 019D3AC21AE3BF4C38ADDE0B2E42C76A5403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/URYCKqyLdp0wXPmCQI3cZt2cT74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/126851-432a-4edc-91a1-fb6a0f796b1b/1/URYCKqyLdp0wXPmCQI3cZt2cT74.mft
Manifest number: A8
Signing time: Sun 29 Mar 2026 18:01:32 +0000
Manifest this update: Sun 29 Mar 2026 18:01:32 +0000
Manifest next update: Mon 30 Mar 2026 18:01:32 +0000
Files and hashes: 1: URYCKqyLdp0wXPmCQI3cZt2cT74.crl (hash: qTDspLv5gvA0flyZSo70vLkXpWgWwlWbv0qMLs7TF1o=)
2: WVySX_1YPfUbKYhRmr5hxZ-UT_w.roa (hash: VBsgWStHkn3YhxpLChmMtYiUHrs3xO4h3g8s2rt7NyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/126851-432a-4edc-91a1-fb6a0f796b1b/1/URYCKqyLdp0wXPmCQI3cZt2cT74.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/126851-432a-4edc-91a1-fb6a0f796b1b/1/URYCKqyLdp0wXPmCQI3cZt2cT74.mft
rsync://rpki.ripe.net/repository/DEFAULT/URYCKqyLdp0wXPmCQI3cZt2cT74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c2:1a:e3:bf:4c:38:ad:de:0b:2e:42:c7:6a:54:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5116022aac8b769d305cf982408ddc66dd9c4fbe
Validity
Not Before: Mar 29 18:01:32 2026 GMT
Not After : Mar 30 18:01:32 2026 GMT
Subject: CN=834f93abee1d1792c9a7697d9c4a30f99fd9cac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6a:32:37:b5:78:20:27:4c:46:e3:d4:a0:a2:
29:78:2e:ce:eb:28:86:38:6c:dc:a7:d1:72:ac:1b:
f7:30:8c:d7:e6:7b:6d:7b:84:3e:45:73:d0:c9:50:
ad:d4:d6:77:6a:1f:34:48:8d:a3:95:f8:72:44:78:
c8:6b:37:d3:c2:a5:e6:39:49:47:c5:2e:4b:e9:93:
33:a1:93:ae:5a:88:dc:4b:e8:04:eb:5d:ba:f7:a2:
ab:f0:5a:c0:24:bf:1e:2d:29:09:1e:dd:94:db:f8:
9e:c4:0c:27:c2:4f:fb:47:65:bb:48:d6:f2:34:0a:
49:b3:85:99:80:88:17:f1:4c:0e:5e:0e:9d:22:3a:
4c:f2:d4:93:4f:b6:31:e5:16:4a:10:22:44:af:b1:
3d:34:7e:c3:f8:8d:6e:cc:6d:ac:54:23:57:23:9b:
9b:e5:aa:85:34:e8:cf:4f:be:a2:d8:85:7e:f7:3b:
46:c1:04:57:23:c9:88:51:32:89:fb:79:9f:89:5b:
ad:43:a3:bb:45:fc:d3:e2:7d:ce:17:e2:ca:4f:f6:
20:e3:43:89:77:bf:22:0f:3b:23:23:d7:0e:8c:03:
92:bd:85:ab:2f:ea:88:87:a1:c4:47:a7:fc:16:bb:
76:4e:d2:60:43:20:bf:5b:39:fd:c2:9f:62:58:8e:
44:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4F:93:AB:EE:1D:17:92:C9:A7:69:7D:9C:4A:30:F9:9F:D9:CA:C0
X509v3 Authority Key Identifier:
keyid:51:16:02:2A:AC:8B:76:9D:30:5C:F9:82:40:8D:DC:66:DD:9C:4F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/URYCKqyLdp0wXPmCQI3cZt2cT74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/126851-432a-4edc-91a1-fb6a0f796b1b/1/URYCKqyLdp0wXPmCQI3cZt2cT74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/126851-432a-4edc-91a1-fb6a0f796b1b/1/URYCKqyLdp0wXPmCQI3cZt2cT74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:45:c5:80:83:7e:ed:c6:20:bc:ab:78:3c:26:af:3d:26:ed:
2e:2b:bd:57:c2:eb:b5:0d:15:05:e4:49:e3:2d:bb:a6:25:20:
18:8d:b9:5f:ea:41:fd:df:2c:60:c0:db:a9:00:a2:43:b5:92:
83:af:30:ca:2d:1c:5f:fb:23:ef:c2:01:a0:75:ce:ad:24:f8:
27:61:32:f6:60:73:8f:0e:10:74:95:39:a4:90:79:5b:d0:43:
f1:d1:e0:65:87:c3:07:47:46:c5:81:fa:0d:29:35:dc:cc:b8:
2a:7f:05:c0:ff:4d:13:1d:fe:65:51:6b:12:8d:b5:75:68:36:
3c:a0:89:cf:d1:f9:c5:f0:75:bd:a5:b3:f9:72:c7:a6:21:e9:
3b:5b:1b:29:78:27:1e:70:b5:34:c5:51:b9:60:b0:d5:c5:fb:
3d:09:d9:ed:13:db:1e:7d:f9:88:0f:e8:29:9b:75:3a:fd:00:
bb:7d:6f:32:d8:bb:4e:7e:79:b6:5c:25:0d:35:97:a4:5b:3a:
a1:53:18:10:a3:dd:16:fd:f0:20:41:db:d9:23:0b:21:7b:1d:
d9:ad:b8:4c:10:65:e6:34:97:55:a2:ef:31:48:04:67:fb:8d:
bb:a0:fd:a3:22:2d:81:f3:40:d2:68:14:b6:41:bc:a6:b8:d8:
c7:95:5e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:24 2026 by rpki-client