Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
File: U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft (raw, json)
Hash identifier: /Ha3xlnb44BOqVg2OkDENAGiIGFLGgY5LSE3FWWQN2U=
Subject key identifier: 34:FF:5E:42:A3:5D:B5:09:B1:4A:17:F4:5D:52:AA:F7:2C:08:29:FD
Authority key identifier: 53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
Certificate issuer: /CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Certificate serial: 019D3909D9D4E37F47CEDD8DAB30F4C45CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
Manifest number: 03E8
Signing time: Sun 29 Mar 2026 10:00:40 +0000
Manifest this update: Sun 29 Mar 2026 10:00:40 +0000
Manifest next update: Mon 30 Mar 2026 10:00:40 +0000
Files and hashes: 1: U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl (hash: Q7iYi5xiQH6n7dWi27j1z8lZqezbJCYWaQEOUVDoFpQ=)
2: qAWpsleSdTKU2QK0ge-DYDJtKTg.roa (hash: hBYa6IMYEuL9W6YmuZd1vKmz/EkBj75T5fHCqH+FPYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d9:d4:e3:7f:47:ce:dd:8d:ab:30:f4:c4:5c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Validity
Not Before: Mar 29 10:00:40 2026 GMT
Not After : Mar 30 10:00:40 2026 GMT
Subject: CN=34ff5e42a35db509b14a17f45d52aaf72c0829fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:1c:13:86:42:2c:35:b8:7b:a6:67:4a:9e:
16:62:ee:e7:db:23:71:48:a1:c5:54:2e:5e:b5:ac:
7f:80:56:8b:33:4b:3a:f8:b5:1b:00:4a:bd:14:78:
c7:b5:8e:bd:5a:b8:d1:4a:c0:77:49:19:84:96:d5:
7d:14:90:a2:8c:7d:40:f0:36:45:21:a4:39:c6:76:
6a:51:d7:6e:85:81:ee:72:75:02:61:9c:c0:f6:46:
c0:11:01:97:fb:05:ef:06:87:fa:1d:e6:c0:b1:f8:
90:88:d2:d6:e4:91:be:59:01:6e:93:f8:f7:46:2d:
49:85:f8:7a:91:ff:b6:5a:b5:9f:86:de:5e:dd:0b:
63:bc:39:4a:1e:83:aa:8c:e1:22:de:a8:eb:10:7d:
d5:4f:4a:0e:e8:17:26:67:99:95:86:e7:f8:44:f0:
77:79:d9:25:2e:24:d6:82:e2:3f:63:5f:5c:91:f5:
2c:e8:60:08:50:ac:d8:bf:88:24:83:2e:ea:24:ed:
08:57:10:c2:dc:b4:4b:ba:49:31:10:8e:f4:db:2e:
f1:00:0f:20:3a:89:44:fa:9d:40:6d:57:6c:fd:b0:
d1:ab:fd:6a:1f:2a:69:0d:66:94:17:aa:7a:77:72:
b0:e8:d4:00:f6:ef:17:6a:bf:d6:15:f0:3a:47:32:
a4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FF:5E:42:A3:5D:B5:09:B1:4A:17:F4:5D:52:AA:F7:2C:08:29:FD
X509v3 Authority Key Identifier:
keyid:53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ce:ea:5f:12:b6:b5:59:27:ba:ea:c9:29:f3:21:bb:c4:6f:
df:36:16:c4:9e:32:24:ec:28:e3:37:51:7b:7a:5a:d1:e9:13:
ac:12:f0:3a:5e:cc:12:c1:6f:53:04:ba:c9:95:7f:5a:95:14:
de:60:42:b8:fa:77:ac:1f:9b:0e:38:7d:50:f8:e8:7e:30:d0:
1f:f0:51:e0:9d:4c:99:6c:9f:dd:5d:0e:33:af:62:4d:9b:21:
87:04:39:15:1a:cf:9d:d8:19:3c:b8:18:5b:10:ea:04:9a:6e:
58:df:81:2f:b1:7c:35:2d:65:63:36:db:98:83:36:70:0b:17:
ab:ce:5e:3e:89:82:08:81:ac:cf:c0:4b:a0:e6:1e:02:88:4d:
6c:21:86:89:31:79:93:44:ca:0a:c8:b6:24:2b:c5:6f:40:fb:
2e:4c:06:05:79:e4:a4:4b:a8:05:a6:e4:31:0f:8c:b4:f9:d0:
c7:86:2e:37:fc:2b:50:29:70:9f:8e:1c:78:39:db:79:9b:58:
c2:c4:0a:56:0d:a8:7c:26:d1:8b:8b:03:a2:4a:b9:7a:19:22:
59:1f:e3:cf:95:53:e7:99:81:53:eb:07:ac:34:8c:3f:02:69:
52:e3:82:1e:95:50:99:f2:c5:f8:c7:41:c7:3d:63:53:83:bc:
36:12:8e:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CdnU439Hzt2NqzD0xFyhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNzAwNzMxYzVhZGM3MGJjYjcxM2U1N2E1MWE0MDNlNjRl
ZDkxYzgwHhcNMjYwMzI5MTAwMDQwWhcNMjYwMzMwMTAwMDQwWjAzMTEwLwYDVQQD
EygzNGZmNWU0MmEzNWRiNTA5YjE0YTE3ZjQ1ZDUyYWFmNzJjMDgyOWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFAcE4ZCLDW4e6ZnSp4WYu7n2yNx
SKHFVC5etax/gFaLM0s6+LUbAEq9FHjHtY69WrjRSsB3SRmEltV9FJCijH1A8DZF
IaQ5xnZqUdduhYHucnUCYZzA9kbAEQGX+wXvBof6HebAsfiQiNLW5JG+WQFuk/j3
Ri1Jhfh6kf+2WrWfht5e3QtjvDlKHoOqjOEi3qjrEH3VT0oO6BcmZ5mVhuf4RPB3
edklLiTWguI/Y19ckfUs6GAIUKzYv4gkgy7qJO0IVxDC3LRLukkxEI702y7xAA8g
OolE+p1AbVds/bDRq/1qHyppDWaUF6p6d3Kw6NQA9u8Xar/WFfA6RzKkIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDT/XkKjXbUJsUoX9F1SqvcsCCn9MB8GA1UdIwQY
MBaAFFNwBzHFrccLy3E+V6UaQD5k7ZHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC84M2NmNzMtYjdjZS00NDQwLWE0YWQt
N2M1MjNiNThkZWNmLzEvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC84M2NmNzMtYjdjZS00NDQwLWE0YWQtN2M1MjNiNThkZWNm
LzEvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAss7qXxK2
tVknuurJKfMhu8Rv3zYWxJ4yJOwo4zdRe3pa0ekTrBLwOl7MEsFvUwS6yZV/WpUU
3mBCuPp3rB+bDjh9UPjofjDQH/BR4J1MmWyf3V0OM69iTZshhwQ5FRrPndgZPLgY
WxDqBJpuWN+BL7F8NS1lYzbbmIM2cAsXq85ePomCCIGsz8BLoOYeAohNbCGGiTF5
k0TKCsi2JCvFb0D7LkwGBXnkpEuoBabkMQ+MtPnQx4YuN/wrUClwn44ceDnbeZtY
wsQKVg2ofCbRi4sDokq5ehkiWR/jz5VT55mBU+sHrDSMPwJpUuOCHpVQmfLF+MdB
xz1jU4O8NhKOpw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:37 2026 by rpki-client