Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
File: U9To6fSiMLDlaFh2X3EwrNNOni0.mft (raw, json)
Hash identifier: fDfWzsY/hu1frIKg9zyhxOJRoot2nEgW9F0mxnQnwyk=
Subject key identifier: 53:CF:B8:E9:37:0B:1F:39:B8:8A:DF:65:4D:CE:8D:94:1D:FB:27:71
Authority key identifier: 53:D4:E8:E9:F4:A2:30:B0:E5:68:58:76:5F:71:30:AC:D3:4E:9E:2D
Certificate issuer: /CN=53d4e8e9f4a230b0e56858765f7130acd34e9e2d
Certificate serial: 019DB0FCB88061A51A4CFA8D0EF9FF3D9AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
Manifest number: B9
Signing time: Tue 21 Apr 2026 17:00:45 +0000
Manifest this update: Tue 21 Apr 2026 17:00:45 +0000
Manifest next update: Wed 22 Apr 2026 17:00:45 +0000
Files and hashes: 1: EkTvlRcL5gr2sd6yVsi4cUhXAkc.asa (hash: jZzPjsomaR5uIyS92PagAAHydVGUAeZDGGUA6STCd1M=)
2: O860BZXE4oCrVhgqCDhjxlkYiZY.roa (hash: WAAeKTz5adCSs3a4JZFRxzoY1WO2G1GDA+qRkP/2UHM=)
3: U9To6fSiMLDlaFh2X3EwrNNOni0.crl (hash: lKkZK3X6TATjf545w4g3HinGblKnGUdixchA/ZTFH00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:fc:b8:80:61:a5:1a:4c:fa:8d:0e:f9:ff:3d:9a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d4e8e9f4a230b0e56858765f7130acd34e9e2d
Validity
Not Before: Apr 21 17:00:45 2026 GMT
Not After : Apr 22 17:00:45 2026 GMT
Subject: CN=53cfb8e9370b1f39b88adf654dce8d941dfb2771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:25:f9:65:f9:1e:33:f0:ab:8c:78:e3:a3:
15:e4:c9:99:de:0d:f3:0f:e4:7a:4e:a6:2c:96:70:
a8:c6:24:8e:a1:b8:59:a8:aa:f7:f0:e6:e6:61:d1:
1c:24:b6:5a:15:1a:c6:18:73:73:7f:1b:b4:5a:99:
ca:9d:62:84:f6:e5:33:68:c6:cd:b4:63:56:5b:5d:
01:d1:45:a6:b4:f9:53:72:ab:ab:9c:b7:bc:af:72:
d1:2b:ff:3b:90:ab:f2:87:87:7d:17:39:f0:4f:47:
4e:30:e3:97:1b:c5:84:d9:9c:39:4b:07:54:a7:e6:
6c:07:51:c7:91:71:ae:f6:b3:f9:04:8c:30:64:76:
5b:00:67:01:ae:61:bf:74:bf:a3:08:50:56:80:0e:
a1:ef:92:d2:6e:d9:4f:75:9f:e3:a7:30:38:3b:5a:
c0:28:d2:1b:cf:47:3b:4d:3e:2d:92:67:0a:53:92:
42:d7:4d:59:6f:77:26:35:74:cb:a0:e9:e4:59:4c:
00:ab:cc:4b:f3:20:d0:d4:d5:3e:45:e2:6f:01:5b:
6e:52:89:18:3e:ba:10:6b:04:63:c6:b7:ef:10:b3:
60:c9:9c:4e:86:a1:ed:36:9d:92:83:e5:2b:20:38:
bc:00:9d:16:0f:cf:1f:71:81:32:30:98:13:36:55:
45:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CF:B8:E9:37:0B:1F:39:B8:8A:DF:65:4D:CE:8D:94:1D:FB:27:71
X509v3 Authority Key Identifier:
keyid:53:D4:E8:E9:F4:A2:30:B0:E5:68:58:76:5F:71:30:AC:D3:4E:9E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f3:cc:81:fc:a1:de:5d:0b:9e:e2:61:60:cf:84:8c:df:4b:
9e:34:dd:0d:3b:75:c6:d2:71:46:de:e4:4c:e1:32:b5:0e:7e:
da:84:00:d6:ab:2a:f1:4d:12:76:03:01:69:e9:2b:10:b1:18:
e2:49:e1:5a:e4:65:5c:22:e4:5c:02:d5:57:ec:9d:99:f9:b4:
9e:b0:2f:ca:8d:4c:e2:52:64:7b:54:5d:c9:19:1a:60:1e:9f:
b4:53:8f:9f:8f:11:13:b3:50:ed:ab:9d:2d:cc:d4:10:5c:53:
0b:7b:88:99:f0:67:c6:45:d7:24:69:68:0c:0e:9c:f6:e0:a4:
27:5a:61:70:ec:1f:1d:d6:cb:72:76:54:24:91:46:b5:8f:53:
8c:d4:b5:be:6c:17:24:00:5b:9b:52:f5:52:ae:3f:27:a1:fe:
fd:00:5e:ce:75:01:9f:5f:f0:a4:94:8c:37:fd:ad:b5:51:88:
cd:d9:b6:01:5e:56:a8:cd:b6:25:be:b3:1b:46:b9:ed:12:68:
a6:66:6d:f0:2b:a1:4c:db:f9:51:61:5b:21:42:7a:c5:83:71:
79:e0:c9:5c:e0:02:23:f3:e2:d0:d9:2c:14:d0:8a:1f:68:fa:
f2:9f:be:d5:ad:3c:8d:a3:ee:16:34:d2:83:11:ff:34:38:3d:
f4:70:b0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 22:23:47 2026 by rpki-client