Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: P3uBrkKhd+CYPUR9hsC54W3dLJGFwdRTWJBHmrRrIJg=
Subject key identifier: 4B:3A:A8:40:0F:D5:BF:51:99:98:9E:30:07:A8:58:00:BB:D3:4F:D2
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 019E31BC0395847E6D8ABD41E8455E0AA063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 17:01:05 +0000
Manifest this update: Sat 16 May 2026 17:01:05 +0000
Manifest next update: Sun 17 May 2026 17:01:05 +0000
Files and hashes: 1: HiUqKu1CLOYfZbl3wCDGIXPaQ18.roa (hash: jutim/UTVgLR2CiOBLYd1qnaODFkPt/SBYjCIEf8wS8=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: KHjD8IOjlt+dQ+9YL8OKYMoOsjFpff/0j5/GWRSer/Q=)
3: aQCGqbkR7pZwAY5aB2nDuU5di8E.roa (hash: 6xFhZTjV0UNGd+XOChz+C1HRl/SOHjV9aweW1aP17pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bc:03:95:84:7e:6d:8a:bd:41:e8:45:5e:0a:a0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: May 16 17:01:05 2026 GMT
Not After : May 17 17:01:05 2026 GMT
Subject: CN=4b3aa8400fd5bf5199989e3007a85800bbd34fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8c:47:df:67:f7:04:32:ae:8c:29:7f:f2:c6:
3a:4a:01:35:d9:fb:ea:c4:e7:7f:00:20:32:82:5b:
b0:5b:ac:02:4c:c1:af:0f:b7:bc:1a:a0:53:78:82:
83:62:b0:0b:2d:4c:e5:b8:ab:d0:63:7b:55:8a:ab:
6a:b9:e3:a4:03:86:9c:6f:51:04:e8:8f:af:6f:8b:
33:89:37:63:97:d2:d1:e3:ea:8f:1b:c3:c2:63:4a:
e9:da:49:46:3a:c1:8c:d5:bc:5d:13:06:4d:c8:39:
aa:a1:12:ae:3f:c0:c0:80:d9:2a:4f:3e:54:41:bf:
4e:89:07:d7:2d:e2:cf:a3:3d:65:de:22:1e:62:52:
9c:72:10:98:06:d8:d4:b8:d9:91:cb:4f:64:13:24:
00:99:d5:5f:b1:52:a3:2c:ba:a3:ea:54:8e:49:71:
1b:de:8d:0e:1c:79:ad:f2:79:de:36:f2:9b:13:84:
cb:47:57:e1:d2:f8:74:6d:94:47:c8:1d:9b:a0:0d:
54:df:48:1f:1c:ea:4f:01:8f:e3:7c:7b:08:5c:ab:
e2:0e:24:7e:28:82:58:84:aa:59:f5:f3:f5:cb:f4:
5c:82:d4:88:c5:f6:1f:38:e2:44:cc:4d:e2:2e:13:
35:c1:c0:30:e2:e4:b9:55:14:84:fb:bb:56:d8:07:
33:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3A:A8:40:0F:D5:BF:51:99:98:9E:30:07:A8:58:00:BB:D3:4F:D2
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:db:68:29:72:1e:6b:f6:45:55:3a:82:61:da:63:bb:5e:2a:
5c:bf:92:35:f2:9a:4b:e6:3d:00:a8:f1:b1:03:a4:0e:fc:3d:
79:ae:de:97:76:ca:86:e5:15:d1:04:37:ee:6d:3a:da:71:7e:
36:28:41:41:76:e1:82:55:38:8c:1c:1e:99:7a:4c:82:de:5d:
6e:45:cb:b3:67:68:94:e4:4d:a0:df:e2:be:db:4a:00:f9:43:
f0:ab:9a:e1:46:03:19:71:ae:ee:cf:9f:d3:85:2b:e2:ac:70:
c8:dd:29:dc:53:bb:52:ba:68:44:3d:1a:e3:8c:eb:c0:4f:d3:
d9:89:a4:3e:1d:da:98:88:17:2a:c8:47:a2:3e:01:17:bc:dd:
c8:34:9c:61:24:3f:8a:a6:f9:5e:f3:c2:2a:f3:78:5e:37:7a:
d3:9f:be:b7:90:16:3e:2d:00:5c:cf:08:f4:5a:02:03:28:a2:
09:19:2f:c4:73:51:9e:bf:50:70:1b:c2:d1:f4:55:87:11:7e:
98:23:32:c5:d1:4a:9d:10:34:64:2a:65:28:79:eb:d3:34:76:
b3:d3:f4:3c:16:90:0c:8c:64:36:0b:05:08:b5:ed:1d:5f:f7:
b2:66:b2:9d:d8:2a:6c:af:3a:94:45:06:d4:37:5e:9f:4d:69:
55:0e:82:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:28:19 2026 by rpki-client