Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
File: U0eCGSFVj2agN_6coNzBBGz0hOA.mft (raw, json)
Hash identifier: rV3E4VpRXszE9Kwmr++s5ExSYX2BDwYc/PtVhthjWpA=
Subject key identifier: 5B:60:51:7A:E3:91:08:E0:BD:0F:18:BA:5E:F3:D5:EB:06:8C:D3:A9
Authority key identifier: 53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0
Certificate issuer: /CN=5347821921558f66a037fe9ca0dcc1046cf484e0
Certificate serial: 019D37521E336E4555F7C70AF7F7AD13F525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 02:00:21 +0000
Manifest this update: Sun 29 Mar 2026 02:00:21 +0000
Manifest next update: Mon 30 Mar 2026 02:00:21 +0000
Files and hashes: 1: B8DoC5brIbdcKCleVmQPvjtWXBY.roa (hash: fwuSLYiomHoCM+ValZyW+pJ6ZXG5StCk1C5NhErYdTA=)
2: U0eCGSFVj2agN_6coNzBBGz0hOA.crl (hash: JiY5wMyDlgEGdHYuZtyIzhjqV//9vm3M3k9jdkUuTjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:1e:33:6e:45:55:f7:c7:0a:f7:f7:ad:13:f5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5347821921558f66a037fe9ca0dcc1046cf484e0
Validity
Not Before: Mar 29 02:00:21 2026 GMT
Not After : Mar 30 02:00:21 2026 GMT
Subject: CN=5b60517ae39108e0bd0f18ba5ef3d5eb068cd3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:83:c8:51:0d:c1:b2:99:d9:7a:d0:56:f5:5f:
1c:a2:d4:d1:2c:14:d7:9e:e4:99:06:54:17:6d:28:
90:c9:2d:1a:1e:a3:dd:0b:46:66:52:e2:c2:5a:ee:
d4:17:30:09:51:40:af:63:1c:41:6e:bf:c1:10:ec:
b0:9a:c9:70:c4:3a:cd:df:a8:d9:a4:0e:15:43:de:
35:c7:c3:b5:51:84:51:83:54:c0:2c:cf:26:9d:46:
78:45:bc:e1:bc:09:57:ae:09:17:f0:4b:f8:e9:c8:
ed:f4:50:54:99:a5:c8:43:ff:66:b5:51:5f:55:fa:
d5:81:25:04:b4:f9:4b:3e:e1:a6:73:bd:93:05:ef:
40:b5:f2:28:62:46:21:c0:06:32:bd:f2:62:01:4a:
56:3b:d8:bf:75:be:ef:39:0f:34:96:3e:80:43:92:
75:6e:42:9c:30:25:d6:95:1b:bc:fe:e2:30:7b:e8:
9c:46:56:4e:60:c6:e6:96:34:84:6a:8d:f4:a4:77:
43:81:d0:a8:e5:52:64:fb:51:65:7a:fe:c8:9b:42:
27:3c:d4:a4:50:6d:50:4f:c9:db:81:47:85:6c:3b:
ff:6e:20:df:10:ae:9d:a3:a8:5e:87:e9:cf:cc:21:
71:0a:68:2a:63:81:5e:49:de:b5:49:51:53:61:04:
2e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:60:51:7A:E3:91:08:E0:BD:0F:18:BA:5E:F3:D5:EB:06:8C:D3:A9
X509v3 Authority Key Identifier:
keyid:53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d1:a1:cb:86:eb:57:69:cc:c5:8c:16:2b:29:8f:b4:d5:f6:
29:97:d6:27:7d:76:31:0f:f2:9d:2f:71:71:05:53:ba:0b:23:
b9:39:e7:00:cf:e8:77:ad:93:56:52:2d:08:63:e6:ee:b4:c2:
2e:0e:43:4d:c3:ee:b2:81:ae:63:2a:40:4e:5a:19:fe:fc:81:
5b:f9:8d:e4:7a:d1:50:86:ee:91:a7:ea:26:8c:df:6d:76:ac:
40:2f:bd:ec:c3:67:29:b4:56:2d:72:b7:21:87:e2:ca:54:dd:
db:e7:0d:ca:2d:8f:3f:a8:8c:e4:58:00:70:c1:d3:78:f3:38:
e4:93:b3:a3:d6:89:41:5e:88:1a:ec:e2:82:62:b7:71:8b:09:
33:db:2a:95:e3:e6:9f:4b:f5:67:98:be:44:a1:27:45:f6:5a:
32:e5:3d:a0:23:40:53:6c:c6:79:f0:a1:1d:3d:fe:93:08:67:
2b:67:78:14:22:b4:90:cd:a0:26:4f:5a:d9:cc:f7:f9:a5:57:
26:52:03:72:20:54:7a:d2:82:07:09:f2:d6:cc:8e:1e:c7:19:
e5:cc:bf:a8:ab:8d:37:ef:13:21:05:4c:6e:24:46:c6:f5:49:
9c:f8:75:70:74:d6:8a:4e:78:81:33:ce:b1:0c:17:b4:9f:f9:
c5:1f:b1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:23 2026 by rpki-client