Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: dYAQrfiwKKcS2V8N5vgcz+6D0jIlfQS+u8npX32sFbw=
Subject key identifier: CE:E3:15:D5:9B:A6:96:83:E7:DB:7E:CE:6F:26:C7:BF:D2:3D:1B:53
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 019D3A8AE40280B67C8904AF9096A4704E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 17:01:14 +0000
Manifest this update: Sun 29 Mar 2026 17:01:14 +0000
Manifest next update: Mon 30 Mar 2026 17:01:14 +0000
Files and hashes: 1: HiUqKu1CLOYfZbl3wCDGIXPaQ18.roa (hash: jutim/UTVgLR2CiOBLYd1qnaODFkPt/SBYjCIEf8wS8=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: LWKd2E+pBXEDs1TZ3zeKIcpluRRbn+45w9XppYj2h7I=)
3: aQCGqbkR7pZwAY5aB2nDuU5di8E.roa (hash: 6xFhZTjV0UNGd+XOChz+C1HRl/SOHjV9aweW1aP17pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:e4:02:80:b6:7c:89:04:af:90:96:a4:70:4e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: Mar 29 17:01:14 2026 GMT
Not After : Mar 30 17:01:14 2026 GMT
Subject: CN=cee315d59ba69683e7db7ece6f26c7bfd23d1b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:72:e3:f0:8e:aa:56:ef:db:42:ba:9c:4b:12:
32:fe:bf:00:90:5a:3e:bd:33:cf:35:49:19:19:a6:
11:0b:6e:01:dd:18:4a:74:34:65:bc:93:14:7c:f1:
07:f1:3c:7a:88:5a:e0:7a:94:85:85:ef:bd:5c:a2:
e4:a8:0f:a1:f9:4e:54:e3:b2:50:33:bd:64:d2:aa:
78:d3:be:17:5b:fd:5a:41:84:a4:c7:4a:68:b4:6b:
19:16:1a:2f:d7:6e:0e:0b:94:37:66:a8:32:a4:b1:
59:37:fe:9e:1a:9a:6e:c5:63:3d:ef:e7:41:e4:14:
ee:84:30:10:b6:07:4c:57:58:d4:a1:1a:7c:2d:bc:
30:85:3b:ec:50:4a:c0:6b:42:ab:b3:c9:fc:eb:3e:
f2:00:f0:bb:19:c2:36:de:39:0c:2a:46:83:a7:12:
1e:19:21:74:e9:96:04:3e:db:b8:19:4e:28:3e:68:
5f:1e:f3:df:71:eb:86:a1:92:cb:a2:93:ab:24:e4:
52:1e:11:cb:4e:e5:4f:4d:b6:f4:12:90:b7:53:1b:
90:4a:97:1a:02:d0:60:3a:6e:db:9f:7e:d0:05:d9:
5d:39:0b:cc:ef:87:4b:57:e2:1e:1f:7b:8c:cd:9f:
02:e6:95:20:5b:46:26:4a:83:d7:75:3b:5b:ff:03:
c4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E3:15:D5:9B:A6:96:83:E7:DB:7E:CE:6F:26:C7:BF:D2:3D:1B:53
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5c:9a:d6:3e:b2:3a:07:9b:18:b0:ee:fd:f5:71:72:75:de:
76:02:e5:67:f7:f6:5e:d5:7d:3f:76:b5:2e:c8:01:37:30:ee:
6f:94:de:d3:54:24:a8:73:15:62:0c:82:4c:e9:90:b5:b5:8a:
77:3c:9d:6f:68:0c:e6:8f:77:f6:3a:b7:33:56:6c:5e:6e:5e:
a5:f6:63:a3:e5:c4:9d:63:10:6b:21:ed:99:74:b8:e1:08:91:
65:f4:92:95:25:1e:36:24:20:42:b4:5c:1f:f6:82:de:5a:74:
3b:42:58:a2:fe:eb:86:ef:30:80:af:71:be:10:41:d5:bf:23:
e0:9a:5c:d1:96:8f:70:58:04:0a:26:14:74:77:9f:cc:b6:cb:
82:0e:64:65:63:94:7d:24:41:44:c8:53:35:20:b2:17:92:08:
02:96:f7:7b:e0:99:da:44:ef:f7:75:6a:64:fb:5d:ab:96:cc:
f4:fe:e3:0a:c1:fc:f9:40:ca:26:13:66:4b:56:a6:e6:cc:fe:
01:31:23:05:41:1c:8b:a7:1e:47:ed:7b:cc:7b:74:fa:2e:8e:
b6:2a:69:16:5f:d1:4b:0c:50:3e:e0:a1:50:07:94:88:9b:ba:
4a:bc:30:96:94:a9:7b:e2:3e:0e:bb:ed:73:8a:4a:89:ce:e1:
fb:41:59:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:57 2026 by rpki-client