Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
File: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft (raw, json)
Hash identifier: VSTqxPMAhaSPgsr6E3OeYAF4gbj9vxUEvPjn7i+Xlvw=
Subject key identifier: 7D:10:B8:B4:EF:A4:42:17:2E:54:3F:DA:92:E6:68:96:99:AA:46:3E
Authority key identifier: 53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
Certificate issuer: /CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Certificate serial: 019D3752814F0CDAC07D1057B45B0E8E7D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 02:00:47 +0000
Manifest this update: Sun 29 Mar 2026 02:00:47 +0000
Manifest next update: Mon 30 Mar 2026 02:00:47 +0000
Files and hashes: 1: IhNm1XAjTUBP_UYjIGIEELcWiWc.roa (hash: TcGN7ZBSR/KDo/mk7XwRToavEZ6usSTJYaYD26UCIPE=)
2: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl (hash: WeQr9uS37m1DGfIuy2kpeqennKz0LMnTPKXFTAEg9tE=)
3: mjm_jL6FnCZyLJAmMfTaUZL_DF4.roa (hash: 7TBTThhJXxwuqJMKV3smo+3dSUEAzVVTW36ntOu96Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:81:4f:0c:da:c0:7d:10:57:b4:5b:0e:8e:7d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Validity
Not Before: Mar 29 02:00:47 2026 GMT
Not After : Mar 30 02:00:47 2026 GMT
Subject: CN=7d10b8b4efa442172e543fda92e6689699aa463e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:ca:0d:f0:ba:f3:ff:21:5b:0c:45:12:04:
d3:d2:54:1f:8a:13:36:23:3a:07:d5:e0:10:08:4c:
c4:d2:f9:8c:ea:8e:5a:07:bb:2e:34:84:da:fa:42:
5c:13:7e:60:40:de:52:92:06:a8:42:2a:83:97:21:
06:7b:62:8b:18:c7:f9:bd:88:44:96:2e:a4:80:05:
bc:69:8c:8b:ed:7e:a2:92:e1:40:ea:f8:6f:53:e6:
2a:cd:eb:c1:07:d3:f8:b6:ac:5d:b3:08:bc:7b:13:
b0:c2:d8:8a:98:3a:68:29:39:c7:82:fb:d7:39:5b:
b5:5a:ce:d2:4c:d4:65:01:a4:76:f4:34:31:a1:c1:
37:b7:83:6c:13:b5:af:81:b9:bf:bd:8b:3d:e8:f9:
4d:d2:55:09:11:7e:d6:87:ec:39:3b:e4:f4:59:2f:
14:3d:b5:2e:dd:54:83:ea:d3:a6:bc:a7:c7:73:04:
e1:76:0b:45:b4:11:85:8a:0c:08:d5:38:af:21:9a:
6a:5b:82:8d:eb:02:9b:67:62:91:8e:59:91:13:74:
c7:23:31:69:e3:be:fe:df:57:5d:36:c6:bb:1a:4b:
b8:86:4e:b2:3f:5e:57:9e:ed:32:8f:6f:a3:16:32:
fc:db:6c:f6:5c:ee:f2:18:ef:b8:86:22:07:75:de:
6e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:10:B8:B4:EF:A4:42:17:2E:54:3F:DA:92:E6:68:96:99:AA:46:3E
X509v3 Authority Key Identifier:
keyid:53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:31:56:35:63:8f:fd:9a:d4:e0:53:b8:68:cb:a9:f2:2f:31:
0d:0d:94:e0:7e:24:4d:3f:bc:e7:27:3f:98:b1:b6:9a:34:94:
f7:e4:db:43:3f:76:13:76:b2:48:2f:69:01:e6:3f:9f:ac:54:
31:08:12:d2:70:27:37:b8:44:08:10:a3:08:4d:13:c1:a1:9a:
bd:0e:37:a6:4c:8c:20:a1:fe:c7:43:38:a8:77:bc:5e:c4:ba:
95:23:7a:be:30:8c:00:d5:8e:4d:fe:ec:d1:83:8f:08:83:05:
90:ed:6f:17:f7:77:9c:82:91:28:5e:30:81:6c:87:5b:9d:d7:
87:c7:e4:95:30:b4:dc:66:60:4a:d5:9c:4e:1c:d7:96:36:57:
aa:23:74:d3:b1:88:dc:c6:29:e0:11:c8:2d:55:d8:25:24:00:
4f:51:ce:b4:1e:be:cc:b2:d8:e4:13:77:27:1a:a7:14:33:28:
95:81:cd:f2:f1:03:69:32:70:4e:58:cb:7b:10:69:aa:7d:59:
fc:a8:b7:7b:43:d4:8a:25:a2:96:5c:86:99:ee:35:c2:c9:a6:
e4:bb:0c:e8:e6:2e:79:d1:b8:9e:3c:85:c4:fd:11:8e:6c:f3:
32:60:2f:15:cc:95:ee:3a:5d:d0:4c:10:93:da:86:c1:af:d2:
5e:f9:93:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UoFPDNrAfRBXtFsOjn1vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYjFhOGViYzNlY2Y3ZjVkYjdmNmNhY2QwMGU5MjBhZjg1
YWU4YjQwHhcNMjYwMzI5MDIwMDQ3WhcNMjYwMzMwMDIwMDQ3WjAzMTEwLwYDVQQD
Eyg3ZDEwYjhiNGVmYTQ0MjE3MmU1NDNmZGE5MmU2Njg5Njk5YWE0NjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ/KDfC68/8hWwxFEgTT0lQfihM2
IzoH1eAQCEzE0vmM6o5aB7suNITa+kJcE35gQN5SkgaoQiqDlyEGe2KLGMf5vYhE
li6kgAW8aYyL7X6ikuFA6vhvU+YqzevBB9P4tqxdswi8exOwwtiKmDpoKTnHgvvX
OVu1Ws7STNRlAaR29DQxocE3t4NsE7Wvgbm/vYs96PlN0lUJEX7Wh+w5O+T0WS8U
PbUu3VSD6tOmvKfHcwThdgtFtBGFigwI1TivIZpqW4KN6wKbZ2KRjlmRE3THIzFp
477+31ddNsa7Gku4hk6yP15Xnu0yj2+jFjL822z2XO7yGO+4hiIHdd5uWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0QuLTvpEIXLlQ/2pLmaJaZqkY+MB8GA1UdIwQY
MBaAFFOxqOvD7Pf1239srNAOkgr4Wui0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTdHbzY4UHM5X1hiZjJ5czBBNlNDdmhhNkxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wNzA2MzAtNTIzNC00OWM0LTg0ZmUt
MTViZGE2Yjg2N2NiLzEvVTdHbzY4UHM5X1hiZjJ5czBBNlNDdmhhNkxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wNzA2MzAtNTIzNC00OWM0LTg0ZmUtMTViZGE2Yjg2N2Ni
LzEvVTdHbzY4UHM5X1hiZjJ5czBBNlNDdmhhNkxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGzFWNWOP
/ZrU4FO4aMup8i8xDQ2U4H4kTT+85yc/mLG2mjSU9+TbQz92E3aySC9pAeY/n6xU
MQgS0nAnN7hECBCjCE0TwaGavQ43pkyMIKH+x0M4qHe8XsS6lSN6vjCMANWOTf7s
0YOPCIMFkO1vF/d3nIKRKF4wgWyHW53Xh8fklTC03GZgStWcThzXljZXqiN007GI
3MYp4BHILVXYJSQAT1HOtB6+zLLY5BN3JxqnFDMolYHN8vEDaTJwTljLexBpqn1Z
/Ki3e0PUiiWillyGme41wsmm5LsM6OYuedG4njyFxP0RjmzzMmAvFcyV7jpd0EwQ
k9qGwa/SXvmTMQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:05 2026 by rpki-client