Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
File: U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft (raw, json)
Hash identifier: ohWI1F7ApSTXd/tJDkrKXkcfmA48X2eXhvBCCudBMzA=
Subject key identifier: B6:6F:83:24:E0:3F:70:87:E5:2C:DD:2A:45:64:D7:B3:51:BC:9E:4F
Authority key identifier: 53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
Certificate issuer: /CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Certificate serial: 019D39AEF2D6BA714E66A82FDAF10430E90C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
Manifest number: 10C4
Signing time: Sun 29 Mar 2026 13:00:59 +0000
Manifest this update: Sun 29 Mar 2026 13:00:59 +0000
Manifest next update: Mon 30 Mar 2026 13:00:59 +0000
Files and hashes: 1: 9f-8muSj0lPpqv2C-uJT8RSg4Wk.roa (hash: SrfNBs8fLNs8CyzsQB76S5MYdUrN0e+cR0WQ3SPKGe4=)
2: MB6VGwOGXL__4GDkn2ifKfMOL5o.roa (hash: tgzruOGhqB7Wz++Uyka8T5HxSlsKFcquj+FXoKwEcRM=)
3: ORixJag7nGsUVhn_7z-jWKPNs6c.roa (hash: 5T3+aTdZe3zV/H6LETA51CJXrWU4B9XcKgVJJWWibzo=)
4: U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl (hash: ahUUH4FBcYxVIXgvLUiJBjErsaWhptmMe+c16zOUxJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:f2:d6:ba:71:4e:66:a8:2f:da:f1:04:30:e9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Validity
Not Before: Mar 29 13:00:59 2026 GMT
Not After : Mar 30 13:00:59 2026 GMT
Subject: CN=b66f8324e03f7087e52cdd2a4564d7b351bc9e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:10:4c:53:5b:06:91:ec:9c:1c:dc:c5:8d:37:
63:93:e2:c7:64:b9:ae:69:8b:f7:5a:9b:04:19:f7:
3a:ab:97:f3:5f:95:d9:7d:86:fa:5a:84:28:f7:99:
1d:ed:0d:da:cf:5f:4a:d9:3f:11:02:d4:8f:58:09:
04:7b:01:f9:d6:7e:39:4a:8f:4a:26:4c:09:c9:2f:
4e:07:eb:96:60:a7:9e:b1:c6:44:4a:c3:80:50:77:
7b:93:bc:4c:30:b0:30:2a:e5:be:95:08:51:c6:84:
09:a1:d2:09:6f:51:20:67:7a:35:51:b5:86:67:ff:
9f:88:0e:46:17:6c:d1:05:71:cb:c1:d7:32:eb:d6:
0e:eb:2e:2f:e7:80:9e:d9:05:20:01:4b:5e:9c:e7:
c9:a4:99:40:b7:f6:27:be:dc:3b:19:60:05:09:45:
b9:b1:31:fc:48:1d:64:d1:0e:2d:0b:5a:7e:9c:90:
c7:5d:6f:a6:f0:5f:17:e8:c3:45:64:9a:75:99:47:
b7:2e:65:8d:86:e6:a3:58:78:4f:68:6e:1d:aa:27:
31:d6:ce:37:08:5b:71:eb:ac:2c:43:6f:3c:18:35:
c3:a3:7e:6d:71:80:30:63:d7:73:b3:4d:75:35:a8:
25:9e:83:8d:78:71:75:4f:ab:bf:82:b4:62:43:aa:
7c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6F:83:24:E0:3F:70:87:E5:2C:DD:2A:45:64:D7:B3:51:BC:9E:4F
X509v3 Authority Key Identifier:
keyid:53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:dd:07:0b:5e:3d:26:2e:a4:88:18:6c:18:52:66:ca:fb:01:
6f:93:3d:76:11:5d:ff:8b:73:ab:8e:a8:3c:03:29:30:7e:8c:
84:af:fe:c3:ea:e8:71:0c:be:bc:56:95:04:a7:1d:cc:c6:bd:
0d:88:e1:30:07:7c:fc:d1:1f:4e:81:4e:48:45:7c:e2:44:3d:
d8:98:58:02:e6:cb:a6:f3:8c:ec:e4:cb:49:2e:f7:41:70:7b:
de:44:3d:f1:65:d7:4f:5d:aa:67:da:9c:bf:b6:d7:5e:6a:be:
61:8a:94:2f:50:00:c7:77:22:90:a0:4d:f8:e6:1b:28:7c:3f:
30:6d:4d:a5:ed:8f:d3:83:38:94:e8:44:86:e6:d4:47:dd:05:
83:30:9a:42:b7:e2:84:22:8f:2b:90:19:47:a0:d2:a1:75:2e:
f3:40:ca:c7:e3:d6:21:c3:c8:6f:b2:a2:3f:3d:0a:75:19:aa:
16:0b:3e:30:6c:3a:a7:f0:9f:3b:f5:3d:4b:56:22:ca:8a:ed:
32:5a:7c:7e:46:93:ef:b9:ab:c7:5f:2c:b9:f7:19:15:88:4c:
48:8c:dd:67:2b:31:22:af:9a:00:13:8f:85:c2:1d:5e:4f:18:
01:a0:4c:99:ce:58:00:5d:e0:69:4e:cd:f1:23:59:ca:22:99:
e7:1f:6d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:37 2026 by rpki-client