Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
File: U4DNitL4ThTptbZCOJN7bUIH4iE.mft (raw, json)
Hash identifier: sSmBcxgIOJjAJMVwuBviwpd58pBKsYn2jOBecoRHun8=
Subject key identifier: 24:D6:A8:68:C9:49:A2:63:B1:0E:A4:34:D8:F5:1C:87:49:D6:4A:8B
Authority key identifier: 53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
Certificate issuer: /CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Certificate serial: 019DCF3E764F3450BB8F1E07C096725F220D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
Manifest number: 0A72
Signing time: Mon 27 Apr 2026 14:01:10 +0000
Manifest this update: Mon 27 Apr 2026 14:01:10 +0000
Manifest next update: Tue 28 Apr 2026 14:01:10 +0000
Files and hashes: 1: 3gqZ21ZiXWY8Si7snLEpMyMD74g.roa (hash: X/t/+w5YUcvfs+3nGPGjtJ/Fhg4+BcTTk+/zNwVCFHo=)
2: U4DNitL4ThTptbZCOJN7bUIH4iE.crl (hash: XCRhZdww99Rbsynspr3J5PKo0OsqLH98OWHAv3JnE0g=)
3: wlQ0t9w-oLkcGuhWCMs9Bpc2jac.roa (hash: 3f94DHQ4ocfCNVkT9++XQcXx0yPrdObfv5lQ1Z9Etr8=)
4: x0JWlbPq7LDeu4Dm0_N7oeK38ow.roa (hash: tbOy3beQewSvz0vDOcHNb1UEiU3Vzot4Nk2R+I8UvvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:76:4f:34:50:bb:8f:1e:07:c0:96:72:5f:22:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Validity
Not Before: Apr 27 14:01:10 2026 GMT
Not After : Apr 28 14:01:10 2026 GMT
Subject: CN=24d6a868c949a263b10ea434d8f51c8749d64a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2d:b7:75:b9:42:3c:01:46:be:e2:75:e7:b1:
e2:2e:22:ee:3d:e5:dd:1e:d7:bf:ea:19:a5:6a:34:
ee:a2:9a:21:8f:27:55:78:9f:eb:46:81:c4:4d:5c:
ff:b5:a0:41:d3:e2:fd:3c:49:76:78:b6:b6:da:3c:
69:10:00:83:da:ba:bb:ac:f2:48:f0:dc:39:47:75:
fe:14:87:5b:24:8a:a6:3e:9e:68:23:dd:0e:17:f1:
4f:0a:f4:42:10:f8:6a:73:c3:7e:55:ae:a5:33:1e:
8e:d9:7c:fb:f1:7d:8c:0a:32:69:2d:e3:13:51:59:
c7:02:b8:79:1d:aa:57:aa:d2:ae:45:2d:ca:40:8d:
72:c0:0a:e7:12:14:4e:1d:78:84:66:5a:e5:cd:aa:
68:19:a2:65:00:9a:ec:bf:db:3f:d5:9c:2e:fe:08:
80:5b:d3:3f:13:db:ba:64:d6:80:b4:8d:58:b9:a5:
f1:57:52:90:a5:c0:0e:39:1d:20:f8:9e:b0:8c:9d:
c0:9b:c4:69:c8:f7:3a:7d:5f:b1:f5:86:87:06:9d:
79:3b:a5:78:18:1f:5f:98:f0:e2:ff:5e:52:7f:b4:
ff:99:16:9d:08:99:42:38:b9:35:18:f4:4b:57:11:
39:d9:79:57:14:d7:e2:f4:c9:9e:e2:0b:11:ec:8f:
05:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D6:A8:68:C9:49:A2:63:B1:0E:A4:34:D8:F5:1C:87:49:D6:4A:8B
X509v3 Authority Key Identifier:
keyid:53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d1:21:5f:55:20:3f:0a:f0:41:e7:6c:58:18:17:e5:4a:07:
d8:4f:41:1c:29:a1:d5:3c:7d:fc:ab:bc:d4:0d:5b:17:c9:7b:
8f:6b:ca:53:b8:b9:a8:6d:58:89:fe:6e:92:a8:f1:9b:90:b9:
ae:a8:d9:60:26:93:be:d3:d5:80:ef:97:73:f2:51:93:e4:3d:
47:68:00:5a:5a:55:49:8d:2e:75:cb:1e:25:75:5d:f0:75:b9:
e0:b8:7b:71:58:9b:98:1f:59:80:10:41:df:6c:60:85:53:c6:
35:32:5b:1a:88:5d:0e:2a:09:2c:e0:cd:cb:15:95:37:e9:ca:
f4:7c:cc:a4:69:4d:9c:8b:19:d3:ff:f1:04:99:01:f5:f1:b1:
ca:42:7a:58:b9:ce:90:7d:8f:67:33:26:db:0a:42:8c:be:ba:
c0:ed:51:06:d6:51:40:41:26:69:f7:7c:b7:64:53:2c:46:d2:
8c:df:e0:6d:c6:5e:34:5b:6e:21:3f:4f:24:d8:e0:dc:a6:89:
2b:21:df:0c:4e:36:dd:b0:af:e7:b7:4d:7c:4c:a1:9a:f3:aa:
00:cf:2f:01:80:ff:ec:6a:d3:3e:54:db:94:6b:97:22:e6:16:
73:f3:7b:fc:e0:0d:1e:99:11:19:21:f4:cd:68:67:f2:76:f7:
98:28:90:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:25:11 2026 by rpki-client