Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
File: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft (raw, json)
Hash identifier: 11uLKyV/yHU+0PyRKECerLPyWvZCmw8WW0ahj8S5D8Y=
Subject key identifier: 99:ED:8F:97:8F:0B:46:70:17:1A:88:AF:EB:D1:08:F9:9F:70:DB:54
Authority key identifier: AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
Certificate issuer: /CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Certificate serial: 019D37F74DD091E1BD88184803492A63A6D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
Manifest number: 04B5
Signing time: Sun 29 Mar 2026 05:00:47 +0000
Manifest this update: Sun 29 Mar 2026 05:00:47 +0000
Manifest next update: Mon 30 Mar 2026 05:00:47 +0000
Files and hashes: 1: 5bBSbPRJU7MitFpRgPerCchom28.roa (hash: QAwUl9Lhrh1n1EXirxYX4rz+UIQVZLyQirDHc9Fe4Ek=)
2: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl (hash: PF/ujbYIAAAZJv0mVCd9K3YfHW3DN1R4tjuL2ToOjtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:4d:d0:91:e1:bd:88:18:48:03:49:2a:63:a6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Validity
Not Before: Mar 29 05:00:47 2026 GMT
Not After : Mar 30 05:00:47 2026 GMT
Subject: CN=99ed8f978f0b4670171a88afebd108f99f70db54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:25:a4:76:44:d7:fe:52:47:84:34:d1:12:44:
46:9b:6a:ec:b2:fc:7a:b4:d2:45:87:9a:01:b3:1c:
c1:71:c4:af:50:ad:d4:83:3b:7f:d8:2d:aa:5e:d1:
dc:9f:40:b8:60:a9:8d:54:69:ee:85:41:8b:eb:0d:
fd:bd:d1:7d:21:d1:25:a2:e6:2c:81:12:36:41:ae:
b2:3a:d0:81:b2:e0:ed:6f:c4:01:99:2a:e5:4b:58:
d7:7f:29:0a:f8:4d:d2:f1:45:e1:ca:a8:69:87:c2:
73:2a:fd:b0:58:a7:a5:16:7b:dd:d9:06:09:ac:94:
05:4a:5d:b5:28:88:fe:89:6a:b1:77:92:ef:24:33:
c1:53:e2:55:b9:ee:fa:23:f6:1a:e9:9f:c3:f0:69:
ef:f7:d7:86:eb:f4:1d:b4:37:df:80:76:94:31:ae:
65:a7:ec:e7:17:05:22:36:9a:11:1a:29:8f:9a:c8:
d3:30:70:83:88:68:a0:7c:97:a8:98:00:a6:b5:e8:
f4:5a:cc:ed:21:9d:e0:8f:4e:0d:62:c0:dc:d2:a6:
e3:b5:d8:a3:84:93:b7:01:f3:fe:64:ef:88:8f:62:
9f:5c:88:b2:c2:f3:29:f9:21:f6:3a:4b:58:14:6e:
bd:e5:a0:c2:13:ea:f0:2e:b4:18:79:02:19:22:d2:
4a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:ED:8F:97:8F:0B:46:70:17:1A:88:AF:EB:D1:08:F9:9F:70:DB:54
X509v3 Authority Key Identifier:
keyid:AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:af:46:3c:96:89:cd:79:72:53:09:25:25:86:69:51:60:bc:
89:b9:52:f8:83:6c:6a:19:fd:ae:81:af:47:78:6d:0a:f6:3d:
56:cb:23:c9:24:d7:e1:69:22:74:b7:e8:66:0f:86:2c:85:83:
f7:b6:35:76:2b:5d:5a:9c:6d:79:41:1d:10:4f:ef:5a:1d:80:
30:85:ac:96:1c:9c:8d:cf:1c:9f:39:30:50:94:24:8f:74:1f:
7b:6a:fc:d2:76:9b:53:e2:5f:28:07:88:fd:44:41:04:ac:e9:
e4:77:8d:55:7d:55:a7:6f:1a:a9:62:4c:c3:55:15:46:67:89:
b1:b1:d4:d9:0e:6b:9f:65:e7:c0:b4:8b:0f:c6:2b:18:96:22:
af:3e:c1:c0:97:2f:1b:41:b9:35:48:8c:de:ed:ea:8a:9c:e3:
98:fc:38:8c:ee:73:0e:b6:b4:7d:2c:83:4b:5f:ff:c7:6d:30:
ce:49:51:41:65:33:d0:ca:ce:c5:38:a2:c4:f0:f3:83:ee:d8:
c2:3b:76:cf:fa:11:35:db:2e:52:83:cc:4d:fe:de:54:ce:c5:
52:26:64:14:f1:f9:b9:4e:8e:4d:78:0f:28:66:60:de:2d:5d:
a2:07:05:3e:4f:96:c1:41:1e:15:d8:70:ea:92:05:d6:d2:aa:
af:71:3d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:15 2026 by rpki-client