Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
File: U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft (raw, json)
Hash identifier: lwDM8ucD+Ss2EyRCBqPq3SjCvDsG4N6P2//lrkMxPmo=
Subject key identifier: DE:68:E2:56:06:1C:73:C9:D9:F8:4F:C4:94:02:6D:1B:58:E7:11:C3
Authority key identifier: 53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
Certificate issuer: /CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Certificate serial: 019D382EBC14D895A79C19012F0146D79305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
Manifest number: 15DD
Signing time: Sun 29 Mar 2026 06:01:19 +0000
Manifest this update: Sun 29 Mar 2026 06:01:19 +0000
Manifest next update: Mon 30 Mar 2026 06:01:19 +0000
Files and hashes: 1: U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl (hash: uP4SqBOEqxUK9HZUa9BdqxLDL+6yjPdTJ0kyOiaQHI8=)
2: Xn8q_66t7wzhb4v1l5kcWKBFQNs.roa (hash: 6vO+ulMoF82yem5grlAhBfA3FaHkdUHzR33O3qHwMWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:bc:14:d8:95:a7:9c:19:01:2f:01:46:d7:93:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Validity
Not Before: Mar 29 06:01:19 2026 GMT
Not After : Mar 30 06:01:19 2026 GMT
Subject: CN=de68e256061c73c9d9f84fc494026d1b58e711c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c4:eb:59:79:fd:26:9d:8a:49:d2:09:9c:b0:
cb:fb:46:07:01:54:46:d8:3a:08:8e:fc:da:85:e9:
00:bc:be:4c:dd:d0:bc:87:d7:44:19:63:45:00:2f:
26:6a:86:fc:b3:df:e1:14:74:e2:b4:6f:41:bf:dd:
5c:ed:f9:46:0a:61:9e:a8:8b:2b:db:86:68:b1:8d:
86:b6:ab:19:3f:9f:c1:c1:8d:8d:9a:0d:56:c9:03:
9a:6b:6e:93:8c:0b:24:dd:67:22:77:e8:69:54:56:
c2:98:b3:d6:f0:1d:88:1a:a8:fe:8f:61:ac:3c:74:
43:0e:e7:d5:74:5e:5e:af:88:3a:a0:73:db:c4:3b:
04:47:f2:ad:36:f1:28:65:3c:0f:d6:40:03:a6:dd:
d7:b1:b1:1e:69:bb:26:b6:5a:7f:32:56:ce:1b:77:
b2:56:02:64:60:6d:0b:35:af:78:70:f6:e3:c7:51:
6b:f9:49:ab:e4:0a:0a:f7:94:b8:f0:29:b0:04:c6:
7a:8a:5f:45:0c:83:f4:d1:a4:f6:8a:46:ac:a9:3a:
cc:8d:ed:3e:9d:cc:77:f1:a4:96:5e:e6:04:59:dc:
46:41:32:cc:57:4c:b8:ac:3f:de:52:09:2c:81:83:
7b:02:7d:6e:cf:cb:82:3e:a1:08:98:9b:ce:a4:55:
04:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:68:E2:56:06:1C:73:C9:D9:F8:4F:C4:94:02:6D:1B:58:E7:11:C3
X509v3 Authority Key Identifier:
keyid:53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:45:f5:e3:b6:44:63:1f:0b:6a:9c:ac:d4:1a:ae:49:fd:1f:
a6:63:e3:eb:b5:06:53:d2:2c:bc:bc:d3:65:86:44:a1:4b:c5:
e7:2c:85:7f:58:ed:0c:c7:89:39:9c:e1:e7:dd:7c:4b:bd:61:
7e:2b:ec:0d:35:17:ed:90:07:06:f8:9d:b7:80:f6:9a:4e:c3:
9a:65:a9:79:a2:9a:9a:d1:e5:01:60:43:8a:6b:39:de:04:49:
5b:87:48:41:fb:24:0f:c0:a8:af:31:15:06:61:cb:1f:36:2d:
76:93:6b:f9:54:e1:f1:12:c1:f3:ff:a8:6b:de:8f:ad:9d:35:
9b:a5:b0:0c:dd:85:b1:cf:9e:a7:12:27:6a:ba:7f:2f:2e:45:
fc:92:d5:4d:0f:f9:f5:32:e2:bc:c2:18:23:2b:51:3c:ef:25:
33:31:61:35:d9:be:80:7c:b0:5d:b9:06:b5:7f:a2:90:c5:94:
1c:85:0b:8d:15:8f:59:d9:06:a9:e8:d4:05:db:61:41:de:1f:
68:ce:1e:e0:39:a4:f0:4e:ca:69:59:da:9e:f9:95:d6:44:e9:
4b:3b:59:05:46:e1:b1:6c:b2:c9:36:01:a2:1a:ce:66:83:83:
72:d0:c3:8a:74:25:a3:aa:12:0c:ee:b0:42:19:49:bb:df:c5:
81:3b:ef:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LrwU2JWnnBkBLwFG15MFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYjhiNGNlYTk0Yzg2N2QzNGMyYmZmOWFjZTc2NDBiZmY1
MWQwNmIwHhcNMjYwMzI5MDYwMTE5WhcNMjYwMzMwMDYwMTE5WjAzMTEwLwYDVQQD
EyhkZTY4ZTI1NjA2MWM3M2M5ZDlmODRmYzQ5NDAyNmQxYjU4ZTcxMWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8TrWXn9Jp2KSdIJnLDL+0YHAVRG
2DoIjvzahekAvL5M3dC8h9dEGWNFAC8maob8s9/hFHTitG9Bv91c7flGCmGeqIsr
24ZosY2GtqsZP5/BwY2Nmg1WyQOaa26TjAsk3Wcid+hpVFbCmLPW8B2IGqj+j2Gs
PHRDDufVdF5er4g6oHPbxDsER/KtNvEoZTwP1kADpt3XsbEeabsmtlp/MlbOG3ey
VgJkYG0LNa94cPbjx1Fr+Umr5AoK95S48CmwBMZ6il9FDIP00aT2ikasqTrMje0+
ncx38aSWXuYEWdxGQTLMV0y4rD/eUgksgYN7An1uz8uCPqEImJvOpFUEVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5o4lYGHHPJ2fhPxJQCbRtY5xHDMB8GA1UdIwQY
MBaAFFO4tM6pTIZ9NMK/+aznZAv/UdBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTdpMHpxbE1objAwd3JfNXJPZGtDXzlSMEdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kZjk0ZmYtZGU5Yy00OGE4LTk3NmQt
OTY1ZjE3NjM3ODJjLzEvVTdpMHpxbE1objAwd3JfNXJPZGtDXzlSMEdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kZjk0ZmYtZGU5Yy00OGE4LTk3NmQtOTY1ZjE3NjM3ODJj
LzEvVTdpMHpxbE1objAwd3JfNXJPZGtDXzlSMEdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0X147ZE
Yx8Lapys1BquSf0fpmPj67UGU9IsvLzTZYZEoUvF5yyFf1jtDMeJOZzh5918S71h
fivsDTUX7ZAHBvidt4D2mk7DmmWpeaKamtHlAWBDims53gRJW4dIQfskD8CorzEV
BmHLHzYtdpNr+VTh8RLB8/+oa96PrZ01m6WwDN2Fsc+epxInarp/Ly5F/JLVTQ/5
9TLivMIYIytRPO8lMzFhNdm+gHywXbkGtX+ikMWUHIULjRWPWdkGqejUBdthQd4f
aM4e4Dmk8E7KaVnanvmV1kTpSztZBUbhsWyyyTYBohrOZoODctDDinQlo6oSDO6w
QhlJu9/FgTvvpQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:29 2026 by rpki-client