Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
File: U8dzEuDSzshFoEYThF-KG-Jjw5k.mft (raw, json)
Hash identifier: FxxkAAehejb76QDV/netExpDRR2CTnmTVtjDxWUCrTQ=
Subject key identifier: C4:1B:64:82:EC:8D:C2:C5:62:E3:D7:E9:7C:16:51:3A:CB:27:8F:4D
Authority key identifier: 53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
Certificate issuer: /CN=53c77312e0d2cec845a04613845f8a1be263c399
Certificate serial: 019D3A53EC4640681EF264FD2D45FE61EA0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 16:01:11 +0000
Manifest this update: Sun 29 Mar 2026 16:01:11 +0000
Manifest next update: Mon 30 Mar 2026 16:01:11 +0000
Files and hashes: 1: LMMdVEDfefO9DMTodcqsmRU-LHM.roa (hash: hRe5cV7EwZ0Fcxo17tUpXTTj4tA391QQdgKYjlbkJTk=)
2: U8dzEuDSzshFoEYThF-KG-Jjw5k.crl (hash: SaV/8fjpL6iPHzmcHu5CN4TGD6uqXNGwUuBYpaKeu2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:ec:46:40:68:1e:f2:64:fd:2d:45:fe:61:ea:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c77312e0d2cec845a04613845f8a1be263c399
Validity
Not Before: Mar 29 16:01:11 2026 GMT
Not After : Mar 30 16:01:11 2026 GMT
Subject: CN=c41b6482ec8dc2c562e3d7e97c16513acb278f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:95:b3:49:d1:06:63:25:64:d9:6a:0a:e9:15:
b2:92:05:a7:79:e7:52:bd:03:a3:41:70:52:47:3f:
9b:94:1d:94:d9:33:f7:16:47:07:d8:09:4b:31:1d:
f1:24:b3:5f:1b:84:52:68:71:ac:05:b1:08:43:3f:
09:bc:f5:7f:12:c2:2f:43:ea:a8:4e:28:57:8c:71:
0c:59:60:38:c1:bc:f2:26:fb:dc:cc:14:6a:54:6b:
09:37:ff:d0:f3:80:09:5b:4c:4a:bb:9c:e3:3d:62:
8c:ed:6a:73:6c:9b:22:a0:89:f6:84:de:c1:e7:cb:
cf:02:03:6d:6e:35:95:98:19:e0:b5:b6:2c:e5:6e:
8e:c4:d1:51:f6:99:ae:04:24:6d:53:0f:80:86:b6:
8e:60:b9:88:3d:2a:44:8f:92:d9:89:66:40:1a:24:
98:38:8a:b1:c1:d2:24:77:7b:d2:19:08:fe:d4:62:
e7:cd:d5:d7:d6:aa:d0:f4:41:4a:1e:80:5f:f0:2a:
f5:44:f7:d2:7c:8d:1d:6f:44:19:30:59:08:4b:db:
92:ef:70:56:3d:ea:b5:53:14:9f:65:e8:aa:d2:11:
9e:35:43:a7:67:82:9f:3b:a8:bc:b9:89:0f:86:79:
8e:76:de:35:62:65:4e:c3:e5:55:d7:e5:2f:64:33:
85:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1B:64:82:EC:8D:C2:C5:62:E3:D7:E9:7C:16:51:3A:CB:27:8F:4D
X509v3 Authority Key Identifier:
keyid:53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:be:40:53:61:6e:5c:2a:62:80:25:1b:fa:19:e9:89:82:52:
35:e5:f0:8f:0a:6f:3f:c0:ad:68:ad:db:bf:cb:48:0a:e3:dd:
02:4d:41:b3:31:4e:19:37:7a:75:2d:36:03:53:b1:4c:3d:1e:
75:fc:e3:8e:2f:27:99:4c:49:8b:dd:29:00:9c:a5:4b:40:b6:
53:c3:93:bd:2a:b1:41:82:ed:77:4e:59:14:f1:1f:82:fc:db:
4f:19:95:13:3c:57:11:09:88:db:65:49:26:a8:40:ce:f6:a0:
d5:6f:ab:df:00:87:63:f5:c0:8a:03:30:b9:05:00:92:d8:b1:
e6:17:f5:da:5e:10:48:46:3f:76:6b:f2:e2:a1:74:96:0c:a9:
61:b8:22:70:3f:ee:74:eb:a4:e8:f4:a4:32:6a:c0:f0:96:68:
b1:9e:df:72:b6:ed:c9:37:ee:ff:ce:dd:ab:55:97:59:8c:c5:
c8:8b:65:2d:73:52:d0:56:5e:fd:41:c9:fc:fd:95:80:c0:c7:
f3:c9:77:72:c4:c6:70:ec:7d:0e:68:e5:c5:13:fb:53:e7:ac:
2e:58:4a:ab:78:53:e9:81:4c:5e:f0:eb:d4:2f:35:4c:1b:0a:
1a:83:fb:92:34:f2:5e:1e:51:64:18:a9:60:bf:f8:1d:a8:8f:
2c:9f:05:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:43 2026 by rpki-client