Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
File: U7u7qj7iTHrZssYEMuFO2jhJteI.mft (raw, json)
Hash identifier: WWvNOf6lDDdj3nMEFSKkgw9KU1VklsR1WeWfc0sBOfA=
Subject key identifier: 76:DA:82:27:43:86:74:30:A4:DE:50:F8:CB:F2:21:8B:8C:D0:4B:1F
Authority key identifier: 53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
Certificate issuer: /CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Certificate serial: 019DCDBE0A2E7363F74960CA5EBFFAFE7439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
Manifest number: 0ED4
Signing time: Mon 27 Apr 2026 07:01:16 +0000
Manifest this update: Mon 27 Apr 2026 07:01:16 +0000
Manifest next update: Tue 28 Apr 2026 07:01:16 +0000
Files and hashes: 1: U7u7qj7iTHrZssYEMuFO2jhJteI.crl (hash: +40yNvrP+s4y0U8w0qKNzJHZA0Bg91zyxsuZmt5JjD8=)
2: VtaKLbc1bmC0OT-Q3JTgdIZyayc.roa (hash: UBrKjUxBC5vtYfpevFvOXwmeammg36EmC9n/o1kbyUg=)
3: ZT6FomeiG8V5UVVq_9nhQvhkJ7E.roa (hash: VNWPoTgK+6WszCC/cUNxFvYDKEgpXvtoe5rvFlIxorQ=)
4: fgZ2gr9j8nkuTcXKTHLTyjKT7Rs.roa (hash: /jAuQCxC5qXXEGyOBRWBeLTs2UBCn/Kok1gqE38op4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:be:0a:2e:73:63:f7:49:60:ca:5e:bf:fa:fe:74:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Validity
Not Before: Apr 27 07:01:16 2026 GMT
Not After : Apr 28 07:01:16 2026 GMT
Subject: CN=76da822743867430a4de50f8cbf2218b8cd04b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f9:bc:20:37:fb:a1:b7:e6:4c:14:1f:22:f8:
58:f5:cf:4b:d0:29:df:e3:c8:c4:54:7b:69:c7:65:
3d:ab:a4:ca:3a:7b:a7:40:01:c1:47:eb:dd:f3:68:
4e:f6:17:03:af:e9:09:55:89:30:67:a8:a9:30:ef:
37:bf:73:e8:84:07:1e:3e:eb:7f:43:4b:73:58:a3:
61:e9:26:30:b8:01:c1:77:90:33:89:a8:75:93:05:
26:19:55:9b:c5:ef:a5:a7:59:77:3a:a1:cd:71:ae:
5a:95:42:4c:51:47:92:03:67:ec:43:b2:30:d2:17:
46:66:5f:bc:c2:00:95:f8:b7:fb:5c:3f:10:0d:43:
ee:99:0d:e6:d2:b3:36:b8:4f:36:5f:e7:0c:62:1b:
6c:e7:9c:e9:9a:3b:1a:68:2d:4a:44:d5:70:e5:37:
56:28:24:e0:7e:54:8c:7f:6f:e3:8b:df:2e:45:0b:
bf:4f:7d:e2:59:a9:ae:75:2e:fe:81:fc:01:6b:cc:
4c:62:de:52:06:05:90:de:21:52:9e:b7:5c:d3:b9:
de:05:9d:84:d9:d7:20:89:be:ce:10:3b:a8:33:8a:
55:8b:0b:55:a0:92:a8:37:2d:fa:a1:5f:ef:8f:71:
b6:71:98:4a:cf:3b:d2:84:90:18:ee:44:da:c7:90:
59:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DA:82:27:43:86:74:30:A4:DE:50:F8:CB:F2:21:8B:8C:D0:4B:1F
X509v3 Authority Key Identifier:
keyid:53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0b:9d:c9:89:97:19:2b:30:37:9c:b5:ff:e0:0e:5c:ed:66:
73:0c:8c:18:19:54:b9:22:d2:61:82:94:aa:9a:1b:48:f5:80:
c5:71:36:7a:0e:37:5c:a9:86:ed:80:99:0c:f2:28:b3:ea:10:
ed:30:0e:d9:07:e5:2e:ea:0d:ef:2b:a2:b8:36:7c:b1:dd:cc:
7b:87:ae:fe:f1:3f:ca:9a:25:ba:d9:99:9d:0c:68:b4:a7:64:
34:fd:c6:95:0e:96:28:e3:59:75:40:17:52:c0:d9:9b:e4:d9:
67:43:46:f1:00:48:28:42:82:4f:f1:dc:f1:51:33:a8:b0:53:
f5:2f:7f:51:b5:92:e7:89:0d:7f:af:b9:ce:b6:a8:d6:db:09:
6e:2e:d4:da:89:ff:f7:4b:ce:62:0e:79:eb:b7:48:df:fb:23:
4e:87:1e:c1:62:66:ef:a7:31:aa:c6:29:bc:1a:91:fa:88:d1:
c5:93:4c:ff:56:09:85:26:d8:41:c3:bc:fd:5d:60:d1:af:53:
39:29:9e:4a:37:fe:dc:55:43:af:17:bf:b4:d4:4e:ac:49:74:
28:b5:87:ed:71:4b:a3:6a:f2:fe:43:3e:59:69:cb:3d:25:c9:
af:b9:ad:08:40:8f:84:cc:a3:dd:ec:a2:6e:2d:a2:59:87:46:
ee:f0:a5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:56:01 2026 by rpki-client