Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
File: U70JkochUqhtYNljuH0BgXwA_FM.mft (raw, json)
Hash identifier: y10/jMC4/w7ClDmZgJASmzApOsI9nHryjoSCX/nultU=
Subject key identifier: 6A:AE:5A:67:6B:28:95:F0:11:F9:8B:EF:DC:89:F1:C5:B4:56:F8:BD
Authority key identifier: 53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
Certificate issuer: /CN=53bd0992872152a86d60d963b87d01817c00fc53
Certificate serial: 019CE55B14EF3CF27966723A866D2C27414E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
Manifest number: 1865
Signing time: Fri 13 Mar 2026 04:01:17 +0000
Manifest this update: Fri 13 Mar 2026 04:01:17 +0000
Manifest next update: Sat 14 Mar 2026 04:01:17 +0000
Files and hashes: 1: S_bLPS21FFHSFgzqZbLQgGjdapU.roa (hash: ntP7qUH7mD4+qqNvUodX6WEcYgeevuhwX8/sIbaDqz4=)
2: U70JkochUqhtYNljuH0BgXwA_FM.crl (hash: sH8Fqc98JiWlSxhFWQt/N5ErKl8KUA3F6JnJPjmBgf4=)
3: vuogQOiw-NsRjP2TO25Dr4VGU1g.roa (hash: /xeIMQbmMftTFD0OnGKJGQk5eie+bKtG5JesE4wKpZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5b:14:ef:3c:f2:79:66:72:3a:86:6d:2c:27:41:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bd0992872152a86d60d963b87d01817c00fc53
Validity
Not Before: Mar 13 04:01:17 2026 GMT
Not After : Mar 14 04:01:17 2026 GMT
Subject: CN=6aae5a676b2895f011f98befdc89f1c5b456f8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:17:a5:25:4b:9a:62:e4:e4:6d:77:3e:cf:8a:
15:6f:a3:01:d0:a8:b7:2f:01:8d:73:08:cb:0d:e8:
f2:f3:75:4d:a4:50:49:34:4b:ef:c4:93:d9:06:da:
cb:81:43:de:57:6e:23:1b:34:82:38:59:d7:71:70:
fb:71:a6:cb:e1:10:b6:8a:cd:83:06:16:2c:b4:b0:
9c:86:b8:2d:71:1c:dd:76:ae:bb:ce:93:45:1e:73:
8f:9b:92:a7:5f:6a:27:35:f2:cf:60:20:c2:a2:0e:
e2:b8:85:6f:0b:e9:ea:53:09:5e:84:36:5c:2c:2f:
8d:92:f0:ff:2b:26:4f:f2:59:0c:64:1e:15:91:d5:
cb:8f:6b:25:75:cf:32:f4:7c:4a:98:1d:3a:9e:72:
56:a3:64:e1:03:10:3c:69:05:2b:f4:3d:15:44:26:
06:8e:52:38:21:56:77:bd:f7:ee:c1:c4:3c:c2:c5:
d7:10:6e:e5:05:a2:d0:55:3e:72:7e:37:68:cb:20:
3c:78:47:ec:84:c1:8c:3d:81:ab:bb:7a:9d:a1:16:
e4:54:be:e7:55:89:26:b3:ce:9c:cd:a2:41:d0:57:
89:1a:85:f4:55:7e:6b:7e:50:56:5c:1d:90:db:aa:
2c:23:c1:bf:9d:9b:ae:b4:b7:44:2b:16:92:04:0b:
a4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AE:5A:67:6B:28:95:F0:11:F9:8B:EF:DC:89:F1:C5:B4:56:F8:BD
X509v3 Authority Key Identifier:
keyid:53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:cf:0e:0f:d4:c4:d3:4f:cb:33:3d:b4:f4:df:09:60:3b:a2:
19:8c:7e:91:ae:01:96:b3:56:39:34:5b:09:2b:09:3e:53:66:
db:38:e5:08:3a:38:9a:eb:c0:1b:51:75:68:b9:8b:56:94:e2:
6c:ff:1e:fc:59:2d:48:35:41:2f:ce:b7:4c:6e:6f:70:6c:68:
b9:ef:c7:68:66:bb:fe:40:34:31:19:fb:c1:50:90:97:d2:c7:
4e:5e:ae:c9:6a:2c:f4:38:70:0c:38:5d:b8:94:44:a3:2e:8b:
b8:c1:91:26:1b:85:6b:c8:38:a0:4b:35:65:a8:69:32:5c:97:
92:5f:00:9e:33:83:97:bc:ac:94:a0:5c:52:dd:de:58:6c:6d:
b8:c5:a4:29:d6:2d:5f:cd:63:6f:62:22:e6:7d:25:55:a9:76:
3d:d7:64:d2:30:94:29:a3:45:e9:d5:17:91:ce:11:bb:85:24:
af:5f:54:5c:fa:d2:16:0f:53:c2:1d:ce:5b:51:d8:23:21:88:
76:49:ed:ef:79:dd:dc:18:90:49:04:43:de:45:b1:22:e8:d9:
1a:a9:1d:4b:72:d0:82:6c:ff:e3:1d:37:fb:b1:0f:89:62:53:
02:6b:90:c2:a5:49:16:07:7e:1a:c4:8a:29:d2:16:76:da:29:
b8:2d:bc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:56:33 2026 by rpki-client