Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
File: U4DNitL4ThTptbZCOJN7bUIH4iE.mft (raw, json)
Hash identifier: mRfdo/JAaw1GTdtGHqPLfQ0z6yPdyNL3S206w6zIvZE=
Subject key identifier: 96:DC:0C:67:7D:B8:2A:43:D3:7E:67:89:B9:AF:AB:F3:B0:11:92:26
Authority key identifier: 53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
Certificate issuer: /CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Certificate serial: 019CE59136CB361F499787F91E421BD67201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
Manifest number: 09F9
Signing time: Fri 13 Mar 2026 05:00:25 +0000
Manifest this update: Fri 13 Mar 2026 05:00:25 +0000
Manifest next update: Sat 14 Mar 2026 05:00:25 +0000
Files and hashes: 1: 3gqZ21ZiXWY8Si7snLEpMyMD74g.roa (hash: X/t/+w5YUcvfs+3nGPGjtJ/Fhg4+BcTTk+/zNwVCFHo=)
2: U4DNitL4ThTptbZCOJN7bUIH4iE.crl (hash: iMGljK+mqm3LLuYYQixaH9TNZ32Pmn9kQGlfVE66P5o=)
3: wlQ0t9w-oLkcGuhWCMs9Bpc2jac.roa (hash: 3f94DHQ4ocfCNVkT9++XQcXx0yPrdObfv5lQ1Z9Etr8=)
4: x0JWlbPq7LDeu4Dm0_N7oeK38ow.roa (hash: tbOy3beQewSvz0vDOcHNb1UEiU3Vzot4Nk2R+I8UvvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:36:cb:36:1f:49:97:87:f9:1e:42:1b:d6:72:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Validity
Not Before: Mar 13 05:00:25 2026 GMT
Not After : Mar 14 05:00:25 2026 GMT
Subject: CN=96dc0c677db82a43d37e6789b9afabf3b0119226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:88:7c:97:91:e3:7b:d8:64:79:35:a7:35:c5:
4d:10:07:5f:83:84:f6:24:ef:ee:6f:d7:ac:9b:b9:
af:79:db:dc:31:0a:39:97:61:ef:bc:e5:fd:dc:61:
bb:98:ca:73:84:62:ae:e9:75:2a:aa:92:73:04:c0:
de:40:0b:7e:ee:e4:82:bd:18:48:3b:40:90:7f:d9:
7f:1b:eb:1f:8d:24:4a:d7:d2:70:80:ad:57:43:9f:
ac:4f:43:81:ec:a9:4e:9d:6e:48:17:6e:ec:e7:fc:
bc:4f:ae:a6:8a:31:87:e9:2b:7a:e4:59:1c:9d:77:
52:22:62:68:05:9f:1f:e3:28:91:cd:1e:0c:f7:38:
e9:fd:79:43:39:aa:a3:60:39:50:e4:01:20:62:13:
64:7b:67:e4:fa:e5:b8:ab:47:8c:64:21:9c:98:cc:
43:7c:8e:ac:38:76:50:61:33:4c:86:4b:b4:08:41:
c5:52:81:82:c5:ad:f2:4c:8d:c3:d5:f6:8a:b3:6c:
75:24:e4:de:04:9b:13:62:6c:57:08:8e:c1:09:3c:
c9:87:01:8e:26:3e:99:a0:a8:fa:74:73:75:9d:69:
fd:37:0d:fe:57:0e:b5:ae:61:af:80:81:42:95:8d:
44:ba:d0:5e:1b:0a:e0:98:33:e8:f2:93:27:f2:a4:
1f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DC:0C:67:7D:B8:2A:43:D3:7E:67:89:B9:AF:AB:F3:B0:11:92:26
X509v3 Authority Key Identifier:
keyid:53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f1:f2:85:75:af:55:91:4b:b7:a0:a1:e7:16:8c:44:b6:48:
85:db:20:6a:c5:a2:ec:2b:c9:7c:d1:ac:ee:87:2e:df:2d:92:
c5:e7:aa:8c:65:e4:d7:b3:7c:4f:72:b6:72:b4:aa:ff:44:60:
5b:0c:69:14:1e:04:24:a8:15:2d:24:59:d6:49:1a:0a:a3:8d:
ca:28:b5:77:89:ce:4c:1c:46:60:69:fb:5a:d0:cc:96:f2:f4:
95:51:57:70:0d:48:83:30:0a:09:f5:13:ef:f9:3c:f4:6d:d7:
c3:c4:cf:72:13:59:cd:b9:21:58:53:eb:10:4a:5a:a6:b1:af:
bf:a4:db:8e:96:45:4b:39:6f:63:c4:51:7d:1a:11:11:e6:8c:
48:e7:63:5b:49:62:85:da:6e:f5:68:86:be:d9:a5:4c:63:04:
97:8c:25:97:f1:11:eb:e0:cc:43:fe:39:35:90:a0:99:c5:9a:
ff:94:25:22:39:ed:51:70:f2:d5:44:4e:96:c6:3b:4b:01:46:
59:91:f0:52:67:4e:06:67:6d:6f:85:6a:3a:5f:9b:2f:7e:a0:
74:1d:d4:0f:40:ae:9c:40:79:16:ce:c9:e9:8f:02:9b:09:6e:
1f:db:85:66:57:f9:c4:9e:1b:cb:4a:a6:8e:4b:9a:3b:38:27:
fe:c4:bf:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:55:26 2026 by rpki-client