Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
File: U_azaGcjiqcYvhfm5zzkCpiVeKA.mft (raw, json)
Hash identifier: MUUphkol122zr/MEGa/hDYwjrBRdy+ePXdPBo1cLK+4=
Subject key identifier: BE:CA:F2:BF:FC:D8:CB:B2:16:EF:99:C3:B1:AF:3B:5B:88:63:1D:66
Authority key identifier: 53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
Certificate issuer: /CN=53f6b36867238aa718be17e6e73ce40a989578a0
Certificate serial: 019D394155DF9F47B69ACB81E702470E680A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
Manifest number: 159D
Signing time: Sun 29 Mar 2026 11:01:16 +0000
Manifest this update: Sun 29 Mar 2026 11:01:16 +0000
Manifest next update: Mon 30 Mar 2026 11:01:16 +0000
Files and hashes: 1: HqhLC8dqnQNE0kDdL6ayiqhSPGU.roa (hash: bRPK732wUADitLmAxuB4OFABp+AoeaHAzcNtveMQOmo=)
2: U_azaGcjiqcYvhfm5zzkCpiVeKA.crl (hash: 4DCHxfxjQa5jGanHVmoTlDoWtx/6JKwrOCKgV29WWMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:55:df:9f:47:b6:9a:cb:81:e7:02:47:0e:68:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f6b36867238aa718be17e6e73ce40a989578a0
Validity
Not Before: Mar 29 11:01:16 2026 GMT
Not After : Mar 30 11:01:16 2026 GMT
Subject: CN=becaf2bffcd8cbb216ef99c3b1af3b5b88631d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:04:4b:af:ee:71:fa:f2:e8:ce:25:fa:45:7a:
e3:48:42:9e:1d:4d:7c:13:c8:c3:d8:ef:3e:74:29:
d6:68:63:6d:c1:e2:e7:5d:3a:15:b9:4f:6c:d9:8b:
58:4d:3f:02:34:53:64:c7:3e:1c:c2:16:f6:51:79:
67:34:60:51:8b:e4:16:50:90:99:55:38:39:c6:7f:
d7:85:3a:6b:6f:7c:25:d7:13:9a:12:f3:3a:74:41:
d7:c2:4c:31:45:85:e7:6a:5f:7b:32:10:55:60:33:
9a:6c:8a:0b:83:67:db:18:73:df:12:81:cb:68:8c:
40:ca:14:18:73:46:b4:37:11:aa:e9:2a:55:a8:6d:
74:80:0a:4a:7c:8c:ea:e6:43:df:bf:d2:f3:b5:e4:
e1:7d:5d:e8:0a:61:46:b6:07:35:68:61:b7:a1:db:
eb:96:95:66:50:03:4c:8b:67:2b:fd:d7:54:bc:a9:
4c:37:b7:d0:ca:6c:e3:41:d1:f3:90:ae:6e:19:5f:
58:ca:4c:d0:b5:e0:3b:be:9d:32:f6:4e:7c:27:94:
bc:2d:e6:bf:fa:a6:22:38:bb:c4:70:03:92:1c:14:
2e:eb:22:d4:c6:81:97:c9:7f:8b:82:79:e6:e3:74:
6d:49:fe:89:83:b7:f3:5b:87:84:5f:f6:dc:ea:6f:
67:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CA:F2:BF:FC:D8:CB:B2:16:EF:99:C3:B1:AF:3B:5B:88:63:1D:66
X509v3 Authority Key Identifier:
keyid:53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:dd:11:d5:17:3c:f3:22:c4:ab:44:1b:c2:ab:fd:f4:0e:ae:
fc:7a:53:0a:70:57:fe:10:d0:17:53:98:d5:dc:db:f9:21:15:
f6:f2:60:92:d6:a4:fd:13:0c:57:d0:d8:ef:2a:a7:29:d2:16:
5f:0d:7b:e2:d6:46:0f:94:55:38:75:2b:81:bc:26:7e:a6:6e:
30:90:52:03:57:90:84:01:71:a2:27:9e:6d:d3:8a:cd:43:23:
df:66:0b:dd:c7:7c:1e:e4:b3:ad:71:17:5a:6a:24:ff:96:62:
c5:1f:19:ce:6c:6b:dc:9d:45:2c:d6:ed:26:2c:49:be:03:ba:
d3:0b:b7:9b:90:a2:32:7f:70:4c:cd:b2:1d:b8:15:a4:28:fa:
73:7b:b7:0d:2f:f9:3a:1f:ed:14:02:f0:2b:ea:72:6b:72:af:
bb:ca:5c:d2:a1:0a:b5:6b:72:e6:03:a7:f5:d3:5b:89:1f:3a:
8d:e2:2c:b3:da:63:80:b6:f2:23:46:47:4e:e3:90:b8:98:c1:
37:41:53:8b:c6:7a:91:27:51:eb:e2:31:3f:95:b8:4e:82:2b:
bb:c2:68:35:d5:a8:2b:8f:b7:4a:38:d8:90:fc:37:33:61:95:
66:59:9e:38:cf:62:aa:79:84:0b:8f:6e:6f:5b:df:27:f1:63:
06:b0:38:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:22:10 2026 by rpki-client