Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
File: U8NcqD_N9xskTtgDrEaOFFPYJo8.mft (raw, json)
Hash identifier: g5SWPgmTpbLM1Ugkiz9ePPpp5A+HWEWETlQsIG1mzUI=
Subject key identifier: 22:C6:18:D1:D0:47:8F:A1:76:AA:66:82:95:E8:8C:B2:54:7B:19:AA
Authority key identifier: 53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
Certificate issuer: /CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Certificate serial: 019D352D22DC9897BEE9B25CD5179BEE2B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
Manifest number: 0AD3
Signing time: Sat 28 Mar 2026 16:00:43 +0000
Manifest this update: Sat 28 Mar 2026 16:00:43 +0000
Manifest next update: Sun 29 Mar 2026 16:00:43 +0000
Files and hashes: 1: 0P9xPfTELLOLsIkje98I5DI3JMM.roa (hash: /5GbceYSZZKUMKDpKsep1xA2kefROVR28hBE+53Ms/s=)
2: U8NcqD_N9xskTtgDrEaOFFPYJo8.crl (hash: R4o2nfdoe0XMiPyj4fRkcihDF7s1nTws4SHVBIV/OOs=)
3: pfH2GwBcvDoKyHCIT0cM2iz_ms0.roa (hash: Mm7/tRb+RTedsr3+m2DHJUxAaM0FcO0MUgT9eZ4XDVI=)
4: zMo_08BFuPtuYYrEDlRKq-rmGBo.roa (hash: vZCIJPH6khDNzPRPnP73DDsgX8UFqI/TfAzpfgqnDZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:2d:22:dc:98:97:be:e9:b2:5c:d5:17:9b:ee:2b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Validity
Not Before: Mar 28 16:00:43 2026 GMT
Not After : Mar 29 16:00:43 2026 GMT
Subject: CN=22c618d1d0478fa176aa668295e88cb2547b19aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:1e:70:a0:7d:f9:a1:8c:6b:54:40:ac:68:
82:f2:aa:2f:17:53:c8:9e:7a:d1:a9:c5:ad:69:cd:
28:02:8b:f5:a8:ce:68:ce:3c:79:56:a4:e2:3b:e6:
86:22:b7:2e:45:a0:91:5a:97:ab:11:c6:7b:02:c1:
76:01:25:cc:25:6d:5c:1e:68:70:f4:01:87:4c:83:
98:17:ea:d9:c4:e5:59:41:65:21:0f:51:36:f5:df:
96:f9:31:89:c4:27:3c:5c:6f:eb:67:70:d9:c5:ee:
27:d4:fd:e2:a0:02:7a:3c:83:33:af:01:59:df:f8:
cc:ab:75:23:64:be:ec:d0:11:bd:1d:07:e8:16:21:
7c:f4:ee:1e:b6:28:e9:71:f3:d2:c8:4c:f1:d4:c9:
c0:bf:e4:32:60:ea:16:bb:2f:e6:ad:ca:9b:c7:7f:
9e:a4:85:1b:ba:e8:13:19:9c:89:8c:a4:cc:ef:16:
5a:2b:3b:a7:1f:9d:12:e2:12:b2:6a:ff:31:8a:e4:
e7:5f:68:3d:5f:4e:a7:55:6f:ec:f2:33:f4:d0:2c:
3c:c2:3e:fa:e6:33:b4:54:23:74:15:50:ff:1e:b3:
54:ad:52:15:47:83:d1:df:86:4b:20:f4:85:b4:9f:
2e:b8:57:30:1e:73:70:72:dd:7b:de:3f:33:4e:8e:
9e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C6:18:D1:D0:47:8F:A1:76:AA:66:82:95:E8:8C:B2:54:7B:19:AA
X509v3 Authority Key Identifier:
keyid:53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f8:dd:2b:c9:8a:17:d4:ed:33:a6:1a:b4:43:f1:87:8b:1c:
2f:84:44:e9:e7:1e:76:f7:1d:e8:25:64:a1:b8:72:f9:0a:56:
9c:dd:c6:77:e8:71:bf:2e:07:b2:2c:36:f5:53:71:83:c6:3d:
3a:ce:7d:92:a1:83:0d:36:59:ad:62:23:0e:70:d6:e9:cf:18:
15:ab:04:56:8c:81:ab:8f:4e:14:d1:69:7e:04:60:d8:41:9e:
73:6e:5f:b2:d9:ee:a3:3b:cf:32:ae:8e:ac:2a:f9:10:1b:98:
23:44:d5:a9:c8:3b:34:ef:7e:86:d7:b9:77:ec:2c:6b:43:54:
bf:02:90:70:b0:4f:a4:33:48:0d:5d:63:33:fe:e2:2b:c7:9a:
ce:1a:dd:bb:ff:36:ea:3b:e6:f6:26:92:a9:60:5c:9c:57:f5:
35:0a:76:b4:bf:3f:e7:6b:a2:39:f1:54:ca:a5:c6:57:e7:14:
ff:b1:5c:5e:65:28:69:46:de:06:6f:7b:bc:60:02:b7:83:9c:
9f:e5:c0:04:99:5c:e3:a8:d3:39:80:c4:89:22:d5:51:65:ed:
73:41:e9:01:33:c3:22:de:ec:0d:7f:a7:88:ea:33:b5:82:4d:
6a:1b:97:e0:34:8c:08:7e:80:ea:48:e1:03:d5:80:2c:a4:3f:
7f:9d:0f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 20:14:56 2026 by rpki-client