Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
File: U0OOy3Xh1es-gP26waaw-vg_c-E.mft (raw, json)
Hash identifier: LwYitdvupB/yoOaQ4Jh/O2QCU+ulDuRuQCZ447iMi8s=
Subject key identifier: BD:F4:E4:EE:90:57:19:9C:6B:0C:34:19:72:24:28:55:FA:54:82:DE
Authority key identifier: 53:43:8E:CB:75:E1:D5:EB:3E:80:FD:BA:C1:A6:B0:FA:F8:3F:73:E1
Certificate issuer: /CN=53438ecb75e1d5eb3e80fdbac1a6b0faf83f73e1
Certificate serial: 019D371C006B6AE0D33949138CAC5CB00C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
Manifest number: 93
Signing time: Sun 29 Mar 2026 01:01:15 +0000
Manifest this update: Sun 29 Mar 2026 01:01:15 +0000
Manifest next update: Mon 30 Mar 2026 01:01:15 +0000
Files and hashes: 1: U0OOy3Xh1es-gP26waaw-vg_c-E.crl (hash: j113Ob4E6H6EQj30KJAFs5sStD5Q/CncOpU7OhYXKQI=)
2: WosD3hO75NeEA5i1pYu4jjBvKZk.roa (hash: OY0wCbzw4br81Lxlh7tGimlRcQLzd5IIOnNVOlypPYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1c:00:6b:6a:e0:d3:39:49:13:8c:ac:5c:b0:0c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53438ecb75e1d5eb3e80fdbac1a6b0faf83f73e1
Validity
Not Before: Mar 29 01:01:15 2026 GMT
Not After : Mar 30 01:01:15 2026 GMT
Subject: CN=bdf4e4ee9057199c6b0c341972242855fa5482de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:78:0c:9e:b7:85:15:2a:00:a6:bc:1f:c1:b3:
04:e4:9f:43:f9:0b:e1:c1:c4:c7:96:16:28:44:3e:
d7:e7:4d:54:f2:d0:57:3c:a5:cc:06:e8:e3:de:26:
7e:19:18:e0:75:eb:8e:01:b9:2d:d6:1b:56:c1:47:
5f:b0:c0:80:78:a3:1d:aa:9a:6c:01:ea:e4:66:4c:
c4:ca:eb:1d:f3:32:0f:54:98:d7:4e:e0:84:e0:3e:
7a:e6:17:e0:e6:a5:5e:31:38:d1:0b:c5:14:cf:3a:
08:c5:ea:d0:aa:2f:de:c1:6e:22:74:52:0a:15:8d:
6e:49:0d:24:0f:fe:5f:9e:e4:8d:41:94:5d:92:d9:
b5:91:1c:18:1d:6a:cc:3d:ac:ae:59:ec:a4:b5:4c:
d6:ec:6e:b9:90:59:70:fb:bd:06:ec:84:7c:ef:3c:
1a:cd:bb:55:44:fe:38:ad:0c:29:16:6c:d1:4b:b3:
ac:2b:1a:10:e5:cc:4e:a1:88:74:3f:fc:f4:01:37:
ec:9b:8f:6b:2b:46:94:5c:3c:d9:85:79:0c:64:9a:
9f:d7:14:6a:75:f6:47:31:57:a3:7c:80:34:33:f2:
3c:9e:6c:65:c7:35:08:5b:50:d0:86:a1:d1:e2:40:
38:ec:1b:4a:64:3e:f1:ea:b2:d4:72:9b:c0:ac:72:
6c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F4:E4:EE:90:57:19:9C:6B:0C:34:19:72:24:28:55:FA:54:82:DE
X509v3 Authority Key Identifier:
keyid:53:43:8E:CB:75:E1:D5:EB:3E:80:FD:BA:C1:A6:B0:FA:F8:3F:73:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ac:5e:d3:c0:99:ae:31:3f:72:c8:b0:23:0f:d3:43:78:a2:
7e:f5:ea:76:03:c6:ee:77:3a:8e:f2:5f:5c:82:b8:71:50:cf:
18:73:52:15:f4:8c:a6:b1:9a:2c:a3:89:48:a8:80:6a:34:d7:
7f:8c:64:d4:88:7c:33:77:b9:e7:26:2b:c1:23:b6:23:b0:a9:
18:00:1f:74:7d:eb:ad:7b:3a:74:b0:47:ed:2f:87:ea:77:60:
16:38:15:91:02:fa:91:88:1f:c7:80:ea:15:64:1f:7e:d4:e8:
b3:15:3c:e0:ab:5d:28:99:27:fb:78:99:f6:8e:69:30:60:aa:
56:07:99:98:57:bb:b3:da:f7:03:d7:44:0f:02:9f:9a:fd:25:
e9:5e:46:48:a4:f0:53:be:e5:41:6c:c8:66:76:24:31:65:41:
f3:33:ae:9e:7d:96:72:2e:fc:82:d9:07:e3:c9:c8:fc:d8:2c:
c2:28:28:c8:7a:96:84:28:f6:8d:56:f7:bf:bb:74:38:31:5c:
2c:7f:3f:1d:c1:ad:df:63:68:fd:7a:31:93:8c:a5:3a:39:c3:
c5:e7:1c:39:46:50:b3:1e:73:3d:29:6e:7e:87:82:10:86:81:
a4:8c:50:e8:69:1e:6b:e1:11:59:3d:63:4d:2f:46:e0:25:17:
95:a9:8a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:44 2026 by rpki-client