
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
File: U9qZ-TUY4pqUWwf2ChjvhumznmU.mft (raw, json)
Hash identifier: brkrCZhTfAbYbxbxw/k5F6a/SMMELpF/xYySHbdgC6U=
Subject key identifier: 4C:B9:6F:DD:48:8C:5D:25:0D:67:90:D3:11:21:5A:AB:B4:99:8B:AE
Authority key identifier: 53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65
Certificate issuer: /CN=53da99f93518e29a945b07f60a18ef86e9b39e65
Certificate serial: 019D37C0DEBDAF5037D224FA0CA2DA581C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
Manifest number: 15D3
Signing time: Sun 29 Mar 2026 04:01:19 +0000
Manifest this update: Sun 29 Mar 2026 04:01:19 +0000
Manifest next update: Mon 30 Mar 2026 04:01:19 +0000
Files and hashes: 1: U9qZ-TUY4pqUWwf2ChjvhumznmU.crl (hash: CacRR4THJ2loh8Uox4iDBeoXwuBk8HDFMcw3pZdXH6s=)
2: lqa3yfi-IJTce6zbolyaur2GC34.roa (hash: euw2FgarLlwQhKJB1B+fQ7g3yZOfq06R+9gYUXAI1v0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:de:bd:af:50:37:d2:24:fa:0c:a2:da:58:1c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53da99f93518e29a945b07f60a18ef86e9b39e65
Validity
Not Before: Mar 29 04:01:19 2026 GMT
Not After : Mar 30 04:01:19 2026 GMT
Subject: CN=4cb96fdd488c5d250d6790d311215aabb4998bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6f:40:99:f0:fa:00:55:d9:f0:5d:0d:fa:6d:
df:a0:c2:5a:74:e6:c0:41:19:92:0d:42:64:d4:a3:
38:74:c7:06:bb:c9:46:99:77:a2:aa:0e:5f:2f:a2:
1a:6a:bf:e3:6c:26:b0:21:f8:d4:8f:7f:e9:54:db:
2c:7d:e4:1d:7b:6f:ef:b1:01:47:92:b6:38:a8:4f:
58:f9:46:e4:f3:f4:15:8d:d8:57:9b:83:a9:61:fd:
37:c9:2e:89:ee:a2:eb:4a:58:0a:66:c6:73:a9:08:
7a:56:3b:21:a5:51:7f:c5:65:4f:11:28:cd:eb:0f:
de:fe:db:0e:e5:e4:99:0d:87:56:f3:f8:80:ce:e3:
5f:a2:17:56:51:74:23:f5:54:0d:97:c4:07:0f:3e:
df:52:ff:f6:2c:e1:e0:a4:9a:96:76:a8:30:1d:06:
1a:35:87:32:c7:bb:68:ba:0c:75:2c:b8:71:d4:3f:
60:c4:ef:2f:da:dc:13:a5:ee:21:7e:d0:fd:5f:99:
34:89:bf:20:ca:7e:a9:da:8d:1d:5f:af:11:19:5d:
b8:82:78:e3:ee:f8:fd:90:b8:4f:a8:e5:87:54:3a:
1c:46:f9:a3:c0:d8:c8:db:fe:57:c1:6e:b4:f0:86:
7b:e6:e8:7d:2e:ca:0d:3e:8d:54:f7:34:9b:08:28:
4b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B9:6F:DD:48:8C:5D:25:0D:67:90:D3:11:21:5A:AB:B4:99:8B:AE
X509v3 Authority Key Identifier:
keyid:53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:04:d7:29:e4:3e:30:44:64:fc:88:48:bf:86:bd:4a:9a:d0:
b5:19:8b:eb:44:47:68:28:be:c8:84:39:43:50:c1:f6:e4:c3:
db:ee:7b:05:ef:2e:ea:c3:36:57:ec:c0:2b:aa:0e:d5:e3:2d:
e3:10:65:ea:dc:5c:5b:f8:db:e5:25:ee:82:53:f1:29:16:92:
4c:b0:32:07:7d:2d:8f:ac:ca:93:52:03:40:72:66:5a:b9:38:
62:6c:8f:f5:2e:5c:02:49:54:9f:11:d3:11:42:b2:7b:dc:f0:
98:20:6e:b6:3f:f4:99:96:bd:c7:2b:f2:c0:06:79:0d:6c:b3:
b1:9a:0f:6a:a0:85:fc:00:f1:f2:a2:71:ed:46:05:b1:b4:cc:
04:28:71:92:b8:a1:38:02:d3:86:d4:b4:df:9c:ba:8d:2d:be:
6c:e6:dd:12:6f:15:ef:62:1a:fd:6c:51:b4:47:ba:20:44:6d:
7c:3d:db:e7:d1:c7:c1:a6:64:96:91:b3:d1:bd:66:36:c6:ee:
b7:9c:16:58:a7:08:19:fd:72:d6:36:2e:d1:da:b8:cd:9f:68:
53:85:30:9f:5e:83:b7:98:71:b3:58:e9:29:41:dd:58:0d:83:
9e:de:10:65:0a:23:65:a9:c6:09:32:89:97:1c:65:b6:bb:9c:
e4:c8:b6:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wN69r1A30iT6DKLaWBwzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZGE5OWY5MzUxOGUyOWE5NDViMDdmNjBhMThlZjg2ZTli
MzllNjUwHhcNMjYwMzI5MDQwMTE5WhcNMjYwMzMwMDQwMTE5WjAzMTEwLwYDVQQD
Eyg0Y2I5NmZkZDQ4OGM1ZDI1MGQ2NzkwZDMxMTIxNWFhYmI0OTk4YmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA329AmfD6AFXZ8F0N+m3foMJadObA
QRmSDUJk1KM4dMcGu8lGmXeiqg5fL6Iaar/jbCawIfjUj3/pVNssfeQde2/vsQFH
krY4qE9Y+Ubk8/QVjdhXm4OpYf03yS6J7qLrSlgKZsZzqQh6VjshpVF/xWVPESjN
6w/e/tsO5eSZDYdW8/iAzuNfohdWUXQj9VQNl8QHDz7fUv/2LOHgpJqWdqgwHQYa
NYcyx7tougx1LLhx1D9gxO8v2twTpe4hftD9X5k0ib8gyn6p2o0dX68RGV24gnjj
7vj9kLhPqOWHVDocRvmjwNjI2/5XwW608IZ75uh9LsoNPo1U9zSbCChLyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEy5b91IjF0lDWeQ0xEhWqu0mYuuMB8GA1UdIwQY
MBaAFFPamfk1GOKalFsH9goY74bps55lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTlxWi1UVVk0cHFVV3dmMkNoanZodW16bm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81ODM1NDMtZTMzMS00NTkyLThkODkt
OWYzMDJjMjBhZTcwLzEvVTlxWi1UVVk0cHFVV3dmMkNoanZodW16bm1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny81ODM1NDMtZTMzMS00NTkyLThkODktOWYzMDJjMjBhZTcw
LzEvVTlxWi1UVVk0cHFVV3dmMkNoanZodW16bm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGATXKeQ+
MERk/IhIv4a9SprQtRmL60RHaCi+yIQ5Q1DB9uTD2+57Be8u6sM2V+zAK6oO1eMt
4xBl6txcW/jb5SXuglPxKRaSTLAyB30tj6zKk1IDQHJmWrk4YmyP9S5cAklUnxHT
EUKye9zwmCButj/0mZa9xyvywAZ5DWyzsZoPaqCF/ADx8qJx7UYFsbTMBChxkrih
OALThtS035y6jS2+bObdEm8V72Ia/WxRtEe6IERtfD3b59HHwaZklpGz0b1mNsbu
t5wWWKcIGf1y1jYu0dq4zZ9oU4Uwn16Dt5hxs1jpKUHdWA2Dnt4QZQojZanGCTKJ
lxxltruc5Mi2rg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:23 2026 by rpki-client