Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
File: U0Z21mkyx3oldhE2rJnrm3TYAaY.mft (raw, json)
Hash identifier: KecyzMbG9FwuH/hRyg0YLNns1bFFgnDRnspG9gowB/A=
Subject key identifier: 0C:CE:54:6E:AB:A2:E6:09:30:08:CC:55:61:CC:4A:4B:C2:BA:48:2E
Authority key identifier: 53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6
Certificate issuer: /CN=534676d66932c77a25761136ac99eb9b74d801a6
Certificate serial: 019D37F73968777377903CAD9E8B08E77C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
Manifest number: 0560
Signing time: Sun 29 Mar 2026 05:00:42 +0000
Manifest this update: Sun 29 Mar 2026 05:00:42 +0000
Manifest next update: Mon 30 Mar 2026 05:00:42 +0000
Files and hashes: 1: U0Z21mkyx3oldhE2rJnrm3TYAaY.crl (hash: GVbWg9aa3tag4dYlRg3CXeiQCMBAWnSdzVS7VRmB9Mk=)
2: aLUgnnQfJFpMYdLs4kwtonmb-hA.roa (hash: GymUmYXXa2s1YAQ4JdjPRXC1fKxQsyfynIWTDZIu0M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:39:68:77:73:77:90:3c:ad:9e:8b:08:e7:7c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534676d66932c77a25761136ac99eb9b74d801a6
Validity
Not Before: Mar 29 05:00:42 2026 GMT
Not After : Mar 30 05:00:42 2026 GMT
Subject: CN=0cce546eaba2e6093008cc5561cc4a4bc2ba482e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:28:fa:b2:e8:5a:57:7f:60:f5:6f:a0:50:
75:1e:7e:41:10:05:04:94:80:81:12:56:19:af:84:
9b:61:5d:b5:46:d3:12:d9:bd:7f:39:b2:31:d3:00:
ad:5e:7e:49:0f:7e:6e:13:c5:1d:1b:de:d3:8d:94:
5e:d5:a0:20:98:25:37:94:eb:3e:7c:77:20:cc:83:
f3:df:a6:7a:72:ad:5d:ae:d5:92:d7:57:0b:32:89:
79:3c:6a:ea:52:8d:53:73:11:56:14:60:14:47:16:
7c:36:a9:38:59:aa:ba:65:1d:e1:90:a5:1c:10:07:
b5:67:a4:db:34:d2:f3:d8:75:9b:b3:22:01:b5:fc:
3b:e2:df:5b:5b:d6:0a:e8:cd:11:2a:3a:32:36:3d:
3b:25:92:6e:90:93:4a:e7:92:62:66:54:4a:98:4b:
e3:8f:73:e7:52:58:ce:c3:ab:26:80:f8:0b:d8:bc:
83:be:44:8d:41:d0:d7:8e:c7:34:ab:cd:e3:0f:ef:
ee:f4:e6:ae:37:fb:8c:df:64:21:c9:95:e0:b1:77:
c8:b3:d9:72:4e:7c:8d:8d:92:c1:f9:c9:92:7a:aa:
aa:b9:2a:de:56:fd:a6:c0:ac:c6:56:77:c6:58:5e:
56:82:09:0b:5a:d4:77:17:84:85:93:74:73:66:d7:
2f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CE:54:6E:AB:A2:E6:09:30:08:CC:55:61:CC:4A:4B:C2:BA:48:2E
X509v3 Authority Key Identifier:
keyid:53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:93:9c:35:64:29:47:da:45:41:ba:16:83:e5:45:f4:b1:c2:
8a:0d:8a:ba:c1:8d:0d:d3:3a:68:e0:88:6c:41:20:7b:3d:3d:
d3:6c:5e:61:06:cb:81:06:3d:28:df:7f:e7:00:dd:d8:4e:28:
9d:db:ca:a9:00:28:d0:09:7c:01:40:c3:e7:df:81:0e:58:42:
79:6a:71:d3:d4:a5:cb:89:32:71:fe:ac:f8:e2:10:a2:b3:76:
bf:9c:50:47:e2:c0:d2:13:e0:40:af:f9:d2:9a:5a:b6:26:dd:
ab:fa:4a:45:18:88:c8:f3:a5:d1:de:8f:45:a3:4f:20:9e:bf:
03:c1:20:f6:35:15:de:b5:9f:ea:03:76:aa:05:40:0c:6c:1f:
b5:34:5b:ce:c0:ec:52:bd:9c:76:b2:36:36:81:3c:76:cd:da:
2d:a1:37:94:5a:0c:7a:da:45:83:7f:4b:35:6c:57:c1:a0:b1:
4d:89:e4:2d:29:95:8c:15:db:ae:02:9d:bf:69:88:94:1a:c0:
57:b6:6a:4c:43:68:b7:5b:76:53:33:e2:f2:54:4c:b9:46:59:
f8:d1:d7:19:ac:fc:2f:ae:05:df:9d:4b:9b:2e:81:74:c2:85:
22:df:52:86:94:28:99:0e:77:a2:ac:65:f9:1f:32:3f:2b:64:
3b:90:7e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:18 2026 by rpki-client