Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.mft
File: U4LANwL31t1s72Zs4gUxU8mv6Us.mft (raw, json)
Hash identifier: +gDzV5BpSiiLGfQQ6H8cdg5MX2dGzGeCFjTgYlrqPuw=
Subject key identifier: 9F:4E:71:4E:8F:8B:89:CD:DF:97:FE:95:9B:A0:1E:8E:EE:DC:1E:AE
Authority key identifier: 53:82:C0:37:02:F7:D6:DD:6C:EF:66:6C:E2:05:31:53:C9:AF:E9:4B
Certificate issuer: /CN=5382c03702f7d6dd6cef666ce2053153c9afe94b
Certificate serial: 019EFCF201613ABF99186B5EA72A9D1B9757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4LANwL31t1s72Zs4gUxU8mv6Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.mft
Manifest number: 67
Signing time: Thu 25 Jun 2026 04:02:58 +0000
Manifest this update: Thu 25 Jun 2026 04:02:58 +0000
Manifest next update: Fri 26 Jun 2026 04:02:58 +0000
Files and hashes: 1: U4LANwL31t1s72Zs4gUxU8mv6Us.crl (hash: zd/J8bwDUTQW8kP/zatu9F1JVIXIfJ/b3Sy1XqG0CDg=)
2: m_nKiCuVzTi2TKccGiONJSKEB70.roa (hash: S3r/rA3wAxsL4UrMnk+l9Ka3WgxOB/UdzMyaqt2gqiY=)
3: xNohHyHNAtZbFs1TNTPBi4HGfmM.asa (hash: RKzmJOhU01ix0w7bW/M3Ue48L0hu6xJh91dZNeFrjAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4LANwL31t1s72Zs4gUxU8mv6Us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:f2:01:61:3a:bf:99:18:6b:5e:a7:2a:9d:1b:97:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5382c03702f7d6dd6cef666ce2053153c9afe94b
Validity
Not Before: Jun 25 04:02:58 2026 GMT
Not After : Jun 26 04:02:58 2026 GMT
Subject: CN=9f4e714e8f8b89cddf97fe959ba01e8eeedc1eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:57:6b:84:92:51:94:0f:b5:27:51:1f:d5:ad:
85:f6:10:28:72:fa:c3:8b:14:25:2d:83:e6:0f:2f:
3b:02:15:af:eb:9a:39:e2:c6:24:ce:a8:76:43:3a:
e4:62:6e:7f:28:19:f7:76:e7:fb:10:c8:c6:2d:88:
3d:b6:47:a9:ad:7c:e0:f2:3a:ac:4d:96:d7:f4:2c:
74:a7:49:24:51:35:c6:45:e8:c7:26:d1:0e:7f:6d:
e9:98:ad:f8:a7:33:cc:92:26:6f:e9:f9:7e:fc:e4:
0f:41:a2:3d:1f:06:9c:1c:03:1f:79:d7:2e:88:55:
e0:5d:ce:fc:ac:72:28:a9:7f:a3:c5:69:6b:61:85:
8d:0d:2a:d6:a5:55:ac:65:89:fe:49:d8:64:66:15:
d8:cb:7a:eb:4c:fd:be:fa:df:9a:c3:2b:6b:a5:40:
96:b9:db:a3:4a:e6:13:5d:03:6c:31:3d:03:42:dd:
6a:c2:c2:70:52:a6:5d:85:f1:29:99:94:ff:4f:a5:
8a:20:c6:58:fc:25:cf:07:1c:9b:4c:49:2f:a8:ab:
76:6d:27:1d:82:1a:85:74:20:87:b2:b8:aa:df:d9:
cd:81:c0:24:22:b5:c5:e6:e9:21:5d:32:01:e9:11:
30:f1:a8:35:7e:02:84:a3:5d:4c:4c:6e:9e:1a:49:
06:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4E:71:4E:8F:8B:89:CD:DF:97:FE:95:9B:A0:1E:8E:EE:DC:1E:AE
X509v3 Authority Key Identifier:
keyid:53:82:C0:37:02:F7:D6:DD:6C:EF:66:6C:E2:05:31:53:C9:AF:E9:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4LANwL31t1s72Zs4gUxU8mv6Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ef:c1:90:70:01:e2:c0:35:17:73:eb:8d:23:9a:d5:dd:aa:
08:5f:81:94:df:30:c4:24:9d:a4:d0:73:61:e0:28:44:e5:bf:
b3:86:23:4e:7b:6b:2e:53:17:aa:5e:ce:67:83:92:83:2c:64:
a5:48:bc:09:99:b5:0d:00:46:e5:8b:a0:c5:e2:78:86:c9:39:
f9:85:94:e5:bc:94:57:fc:de:6d:c1:1e:f1:56:e2:46:c0:76:
d3:0d:09:59:99:10:ad:f2:02:35:b7:cb:f4:c6:ba:f9:bd:14:
af:b0:e2:d2:d7:d7:ec:7f:fb:0c:57:40:d6:ef:ca:fc:07:1d:
c1:ea:d4:bf:dd:60:27:6c:f2:16:ab:b8:3f:d5:d0:f9:8c:e8:
75:0d:0f:09:70:d2:94:c2:72:dc:6b:d4:6c:3c:26:97:92:46:
bd:a0:bc:48:f1:68:d4:52:40:43:6c:84:a7:5b:58:cd:7d:ec:
8b:b7:50:32:81:17:9f:70:46:a4:a8:32:64:b8:0d:84:ab:34:
c1:3f:a7:51:41:57:32:5d:66:5c:1c:34:73:4f:a2:fd:7d:a3:
d2:5a:0c:f3:cd:9a:54:6b:ee:0b:00:bb:14:6c:a3:77:ab:b2:
bb:12:b1:8a:99:a5:05:29:66:1d:c1:40:59:b3:d7:82:b6:f5:
82:07:97:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:34:34 2026 by rpki-client