Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
File: U9To6fSiMLDlaFh2X3EwrNNOni0.mft (raw, json)
Hash identifier: UOtnb4pKU90v5B6k2oMJx4Bv/6NvnXsKTZgVXhVTZas=
Subject key identifier: 82:68:1E:77:B7:FF:3E:F6:16:02:E4:B4:A1:87:1C:D4:7C:E4:5C:93
Authority key identifier: 53:D4:E8:E9:F4:A2:30:B0:E5:68:58:76:5F:71:30:AC:D3:4E:9E:2D
Certificate issuer: /CN=53d4e8e9f4a230b0e56858765f7130acd34e9e2d
Certificate serial: 019E9B17A3AA455E22AA8C22709CEB346051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
Manifest number: 0133
Signing time: Sat 06 Jun 2026 04:01:18 +0000
Manifest this update: Sat 06 Jun 2026 04:01:18 +0000
Manifest next update: Sun 07 Jun 2026 04:01:18 +0000
Files and hashes: 1: 3b2s3p4oMea8LJB4yErrpoSUMas.asa (hash: m3bshBr8tj8Wwq1Ja324OOM0o37SNVG1XxrRZZqFdC4=)
2: O860BZXE4oCrVhgqCDhjxlkYiZY.roa (hash: WAAeKTz5adCSs3a4JZFRxzoY1WO2G1GDA+qRkP/2UHM=)
3: U9To6fSiMLDlaFh2X3EwrNNOni0.crl (hash: 21PHRQSnz5jKbsgnnFyoBNVPDXgw5F6Ap/u/1jnJEM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:17:a3:aa:45:5e:22:aa:8c:22:70:9c:eb:34:60:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d4e8e9f4a230b0e56858765f7130acd34e9e2d
Validity
Not Before: Jun 6 04:01:18 2026 GMT
Not After : Jun 7 04:01:18 2026 GMT
Subject: CN=82681e77b7ff3ef61602e4b4a1871cd47ce45c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:06:0c:8b:10:93:e3:a5:98:30:2a:c2:df:
06:bf:9e:6d:42:d4:d8:17:93:22:92:3b:05:a2:59:
47:2c:8c:28:6c:a2:67:89:da:c4:23:6f:5f:93:e1:
65:2d:1c:da:9a:da:66:d2:6c:53:04:55:ef:2f:75:
09:07:32:9e:46:c7:77:4c:91:31:c5:16:28:60:07:
5e:35:d2:b7:eb:8d:39:d4:0e:9a:74:46:a1:79:03:
fa:c1:29:a4:14:0e:42:14:33:68:1f:1c:70:a7:6a:
46:26:43:a5:02:14:04:3e:ec:78:b3:8f:0c:c8:03:
a8:d2:d0:73:f7:cc:b8:0c:dd:93:eb:a7:8c:d7:6b:
87:4f:f9:6c:4b:8d:6c:73:fe:a9:4e:f2:d8:90:6b:
2f:97:12:21:24:46:d4:3a:c2:f0:26:f1:78:8d:d0:
c9:a7:2a:5d:d5:da:bd:27:8b:3b:85:ed:0d:3f:0d:
cb:97:42:f7:d2:df:bd:cb:44:f8:00:fc:1c:d8:68:
41:5e:57:db:a1:c3:5d:2f:62:b5:7e:fb:c9:54:d1:
cc:67:52:83:18:5e:47:f9:01:73:56:55:fc:c7:8b:
c5:9e:f0:d8:ef:5c:c8:26:14:e7:51:89:ff:49:4e:
d3:26:d3:3c:af:87:43:ff:03:5d:35:6e:cf:b1:6f:
86:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:68:1E:77:B7:FF:3E:F6:16:02:E4:B4:A1:87:1C:D4:7C:E4:5C:93
X509v3 Authority Key Identifier:
keyid:53:D4:E8:E9:F4:A2:30:B0:E5:68:58:76:5F:71:30:AC:D3:4E:9E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4f:15:4e:e3:0e:77:fe:87:de:1f:e6:68:77:fd:fb:d9:b7:
bd:6f:5b:61:47:5c:b5:4f:4a:1a:94:b3:f4:ff:df:f1:22:04:
f3:4c:e7:47:01:21:57:e6:12:0c:b5:fe:6c:db:f9:30:50:da:
ef:e1:ae:af:4e:73:b8:bb:b4:a4:23:5b:07:a3:47:ef:3f:07:
ce:4d:22:c1:5f:af:9a:73:e0:1e:8b:73:64:62:e7:94:0e:d8:
76:ca:61:c8:8d:6b:d9:3f:71:ec:c6:45:4f:7b:95:fc:45:be:
83:16:1b:36:50:4a:2d:50:42:45:b2:9d:d9:bf:e1:b1:72:a0:
52:41:ae:4e:ea:df:ab:6d:3e:ba:8f:4b:52:5a:4d:5f:44:0e:
c9:b9:4d:31:b9:2d:35:3b:f4:dc:cf:f4:11:94:e1:12:a8:b9:
57:f6:fa:59:d9:85:9b:cf:65:d6:5f:73:e1:c9:48:a2:ed:b9:
db:23:db:64:c5:f6:a6:fa:2c:03:6b:e6:5d:e8:5b:3a:45:17:
c0:97:0d:2e:00:4f:5f:78:17:7e:e5:69:5e:d8:4a:2d:48:cb:
6e:38:8b:e4:ca:be:70:13:fc:89:e7:7c:69:47:10:2d:30:8d:
c9:7c:e7:d8:b2:f6:f8:af:7b:46:da:15:83:25:f9:e3:42:bd:
7e:82:8d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:48:13 2026 by rpki-client