Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
File: U5Nwh4FLQ1glRwBp255yPb5yjzs.mft (raw, json)
Hash identifier: 66zW8lZ89iw1AxMtAlvpRLVqKBLVeMAQ/QmDpHZoyt0=
Subject key identifier: FC:AD:66:0C:9A:69:A0:8A:92:1F:F6:EC:9A:DE:B2:43:91:AA:C4:FC
Authority key identifier: 53:93:70:87:81:4B:43:58:25:47:00:69:DB:9E:72:3D:BE:72:8F:3B
Certificate issuer: /CN=53937087814b435825470069db9e723dbe728f3b
Certificate serial: 019D3A1CD43C95A58FEC3CA30926662D017F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 15:01:00 +0000
Manifest this update: Sun 29 Mar 2026 15:01:00 +0000
Manifest next update: Mon 30 Mar 2026 15:01:00 +0000
Files and hashes: 1: U5Nwh4FLQ1glRwBp255yPb5yjzs.crl (hash: xkAaiHiO13wC2LN5M7BLDLCZkv0cesIikOEXI/bQ74I=)
2: yO8zPdnLQTGP7FTjpB9nvhDS9uQ.roa (hash: WQ8kjol5PEW10sFGD7RLYN+v3wnRZb1OVJX+5S1910M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:d4:3c:95:a5:8f:ec:3c:a3:09:26:66:2d:01:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53937087814b435825470069db9e723dbe728f3b
Validity
Not Before: Mar 29 15:01:00 2026 GMT
Not After : Mar 30 15:01:00 2026 GMT
Subject: CN=fcad660c9a69a08a921ff6ec9adeb24391aac4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b2:11:f4:ae:0b:c0:00:18:24:86:96:5d:28:
f2:05:5c:45:2d:fd:db:65:78:5c:26:45:4d:4d:e3:
5d:53:14:c1:65:7c:91:5b:fe:b8:7a:8d:9d:41:ac:
1f:67:b9:b8:3e:42:f3:3a:4e:32:bf:67:ef:27:7e:
85:3a:2c:92:22:8b:5f:c6:b7:8f:e6:99:58:79:88:
d0:8d:16:18:82:c8:31:6f:98:f5:17:cb:ac:7b:39:
47:c0:30:61:0d:52:58:7f:ac:40:12:29:59:3a:e9:
5f:c5:46:95:06:b8:3b:7a:fb:96:62:15:65:cb:86:
f7:bc:0f:65:6e:f6:21:6f:43:2f:9d:5c:0d:80:90:
e8:90:b1:81:32:f6:78:c4:5f:f4:fb:43:8a:58:07:
b4:2f:82:ef:7f:bb:0b:4b:dd:09:93:2b:90:d5:47:
7c:fe:0f:77:32:1b:90:1b:f4:04:4e:99:55:16:b2:
b3:d8:12:bb:9b:97:9a:75:cf:49:1f:4b:6d:71:5d:
a9:4b:73:17:a3:c6:d8:f9:06:f1:25:ae:c7:76:9f:
ea:53:cb:41:bd:6c:9e:29:9c:1b:00:9d:6c:bd:66:
25:7e:eb:c7:38:87:00:91:e7:a9:09:31:d7:0a:dc:
ab:31:ca:a0:a1:8c:68:fd:3f:88:9a:a6:a5:f6:04:
6c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AD:66:0C:9A:69:A0:8A:92:1F:F6:EC:9A:DE:B2:43:91:AA:C4:FC
X509v3 Authority Key Identifier:
keyid:53:93:70:87:81:4B:43:58:25:47:00:69:DB:9E:72:3D:BE:72:8F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a2:8d:a9:45:c4:1c:41:cb:87:3c:90:b5:78:37:67:20:5b:
5b:d3:91:d9:fc:49:a1:2c:ad:b2:1f:2a:f2:51:67:21:3f:d9:
cc:aa:8a:ca:ab:c4:72:10:74:2b:fd:39:59:bc:03:09:a9:10:
44:b3:72:cc:b7:19:79:39:ba:4b:df:87:25:ac:36:33:bb:12:
07:5a:97:c2:09:c1:71:0c:68:90:2d:58:62:42:14:46:e4:84:
58:21:c4:67:9f:0b:57:4e:00:25:cc:04:b1:0c:1f:ca:48:08:
ca:e6:d3:13:38:c9:3d:bc:45:d9:fe:30:1a:05:78:2f:4d:ed:
6e:b7:87:d7:79:39:e9:75:c1:bf:d2:e9:ef:23:16:53:b3:f6:
b2:95:68:16:d6:9d:e5:9b:f2:00:06:47:71:61:a6:c4:dc:33:
4c:42:a9:2e:c6:09:ce:dd:50:2a:27:67:ae:77:96:a8:90:d9:
8e:86:89:17:de:42:fa:7b:19:bd:6e:fd:e8:d3:ee:96:54:ce:
ee:d6:e8:6c:08:26:2f:f0:8e:1e:67:92:5b:b8:e0:90:08:49:
7c:9a:88:7f:f5:dd:79:c0:48:fc:13:e0:18:76:09:82:c5:c0:
9a:ed:07:8a:b6:b4:76:8a:cf:8a:e7:82:54:c9:3c:2f:e1:96:
72:fb:2c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:40 2026 by rpki-client