Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
File: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft (raw, json)
Hash identifier: 8V+eFq3wfX1ywvb/7DXS4rAs5/QlEornjZ2Q+7RK9c4=
Subject key identifier: 6C:52:E9:93:63:1D:1D:76:AA:B0:58:23:E9:A3:71:61:5C:C5:C3:C5
Authority key identifier: 53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
Certificate issuer: /CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Certificate serial: 019D371B8A2B4F326F2F5C7D27EF842B526B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
Manifest number: 1877
Signing time: Sun 29 Mar 2026 01:00:44 +0000
Manifest this update: Sun 29 Mar 2026 01:00:44 +0000
Manifest next update: Mon 30 Mar 2026 01:00:44 +0000
Files and hashes: 1: NnLh8TC21_I7aIxYqBVOxMDsYn8.roa (hash: abZc4byKeRvjtv7jM3QRQhlxOH/1CVxvgCdUA7yEv1Y=)
2: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl (hash: 4KPLUcK6u9sCbU7RFiLquCAlVaglHtZmGUjdfXjhS4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:8a:2b:4f:32:6f:2f:5c:7d:27:ef:84:2b:52:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Validity
Not Before: Mar 29 01:00:44 2026 GMT
Not After : Mar 30 01:00:44 2026 GMT
Subject: CN=6c52e993631d1d76aab05823e9a371615cc5c3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:bf:a1:d2:75:ba:61:19:f7:72:6d:54:64:
bc:75:42:98:c7:3f:c4:b5:ba:d5:61:5f:4e:33:48:
bc:7e:08:2f:44:ce:fc:4b:02:c1:ff:bd:f9:1b:2d:
4f:92:a9:d0:7b:f5:fa:00:81:21:fd:34:f1:59:ca:
13:e1:21:55:90:dd:a4:93:3d:c2:5b:fd:bb:8c:3b:
5c:97:5f:26:ce:e5:e7:68:c9:60:32:aa:6a:c3:37:
f1:c2:29:e0:35:61:08:cf:36:8d:7a:0b:b3:ee:8b:
e6:42:f8:b3:f2:48:15:20:e5:1f:ff:4e:d2:f8:5e:
d4:45:95:fe:61:6e:77:93:12:5b:b4:f5:6f:47:37:
a2:05:e6:ab:c1:5f:ab:c5:51:41:d8:af:8f:5f:80:
6e:d4:34:31:1d:f5:0f:5d:72:05:13:af:b3:db:83:
6a:28:f6:b7:7c:17:99:d7:f6:be:33:58:73:40:27:
33:0f:77:d8:01:98:de:d0:ac:e5:ad:ca:2d:be:8e:
02:41:e9:fb:6a:b2:c2:b8:c7:19:43:ac:86:fd:51:
2e:4b:db:4b:55:68:5f:ac:16:19:f7:c6:89:72:95:
61:8e:ec:8d:61:c3:a0:ba:d6:62:41:c2:94:a2:32:
d6:d3:61:0b:bc:51:62:9c:f7:dc:b5:da:90:6d:60:
a3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:52:E9:93:63:1D:1D:76:AA:B0:58:23:E9:A3:71:61:5C:C5:C3:C5
X509v3 Authority Key Identifier:
keyid:53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d8:55:58:8e:04:47:32:98:6c:39:09:c7:3a:9a:30:08:32:
61:1f:13:64:aa:0f:78:fb:14:a7:11:66:b4:78:8c:69:8b:ee:
8b:09:6b:a3:17:6c:a1:8a:1c:6d:ab:0f:68:60:bd:37:81:9f:
6a:cb:a1:ac:ef:30:5d:2b:e3:9e:56:39:56:9a:69:4e:2d:94:
f9:7a:a2:95:21:63:d9:76:46:3f:53:93:c5:8f:0d:31:df:9a:
e1:a2:f4:04:43:22:1b:15:67:eb:cb:36:2a:11:a5:29:07:b7:
a2:47:97:94:97:09:c4:dc:f9:71:90:e5:35:f5:4e:ec:3f:35:
89:b1:5d:61:ea:0e:97:ad:eb:b2:2b:66:3e:17:0e:09:f9:ca:
83:0c:9f:79:38:38:16:12:7e:ea:3d:1a:10:0f:d0:38:76:bf:
37:09:92:ed:81:e0:99:95:16:ca:04:c0:07:16:e4:b2:90:ae:
e9:39:d1:2c:67:08:4b:7d:21:2f:c0:56:a2:56:06:c6:76:1b:
a4:a4:e9:ce:94:bd:43:66:db:83:e2:d8:02:f3:87:d3:1d:fc:
20:d0:f4:cf:e8:9f:ac:69:e2:5e:db:16:c1:c9:a7:ed:4e:e5:
6c:12:19:8f:58:d1:29:05:ea:13:8a:e9:f8:bf:d4:ed:57:74:
9f:58:84:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G4orTzJvL1x9J++EK1JrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZjhiYWNjMzY1OWRjYjMzODlhYTQ3ZTM2NjRhNWY4Mjg0
ZTAwYWYwHhcNMjYwMzI5MDEwMDQ0WhcNMjYwMzMwMDEwMDQ0WjAzMTEwLwYDVQQD
Eyg2YzUyZTk5MzYzMWQxZDc2YWFiMDU4MjNlOWEzNzE2MTVjYzVjM2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXK/odJ1umEZ93JtVGS8dUKYxz/E
tbrVYV9OM0i8fggvRM78SwLB/735Gy1PkqnQe/X6AIEh/TTxWcoT4SFVkN2kkz3C
W/27jDtcl18mzuXnaMlgMqpqwzfxwingNWEIzzaNeguz7ovmQviz8kgVIOUf/07S
+F7URZX+YW53kxJbtPVvRzeiBearwV+rxVFB2K+PX4Bu1DQxHfUPXXIFE6+z24Nq
KPa3fBeZ1/a+M1hzQCczD3fYAZje0Kzlrcotvo4CQen7arLCuMcZQ6yG/VEuS9tL
VWhfrBYZ98aJcpVhjuyNYcOgutZiQcKUojLW02ELvFFinPfctdqQbWCj1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxS6ZNjHR12qrBYI+mjcWFcxcPFMB8GA1UdIwQY
MBaAFFP4usw2WdyzOJqkfjZkpfgoTgCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVV9pNnpEWlozTE00bXFSLU5tU2wtQ2hPQUs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9iMzVkNmEtOGJkNC00MmJkLWFiZGQt
MTUxMDdiY2E0NWI1LzEvVV9pNnpEWlozTE00bXFSLU5tU2wtQ2hPQUs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9iMzVkNmEtOGJkNC00MmJkLWFiZGQtMTUxMDdiY2E0NWI1
LzEvVV9pNnpEWlozTE00bXFSLU5tU2wtQ2hPQUs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp9hVWI4E
RzKYbDkJxzqaMAgyYR8TZKoPePsUpxFmtHiMaYvuiwlroxdsoYocbasPaGC9N4Gf
asuhrO8wXSvjnlY5VpppTi2U+XqilSFj2XZGP1OTxY8NMd+a4aL0BEMiGxVn68s2
KhGlKQe3okeXlJcJxNz5cZDlNfVO7D81ibFdYeoOl63rsitmPhcOCfnKgwyfeTg4
FhJ+6j0aEA/QOHa/NwmS7YHgmZUWygTABxbkspCu6TnRLGcIS30hL8BWolYGxnYb
pKTpzpS9Q2bbg+LYAvOH0x38IND0z+ifrGniXtsWwcmn7U7lbBIZj1jRKQXqE4rp
+L/U7Vd0n1iElQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:38 2026 by rpki-client