Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
File: U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json)
Hash identifier: CR8cK+sQS5YQv9FVTex+6dd6x12EZqHTY+dDq0Gi1v0=
Subject key identifier: 87:C5:F2:D7:7C:DF:0C:BC:A8:B7:A7:03:55:C5:85:81:A9:5F:B5:B4
Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Certificate serial: 019D39AEC1C721040F4E2FB32E70292853D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
Manifest number: 0574
Signing time: Sun 29 Mar 2026 13:00:47 +0000
Manifest this update: Sun 29 Mar 2026 13:00:47 +0000
Manifest next update: Mon 30 Mar 2026 13:00:47 +0000
Files and hashes: 1: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: t+lB2g2FIqkHKQ23QTA15L0vpizaa4GYa5FLd2BxwB4=)
2: mVapMmHRdrNnHP7qEe61fUd9MJ4.roa (hash: 7gjqh37t5TbJMLovzwK7uE6PbR35tPIiZgeHv6oUC54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:c1:c7:21:04:0f:4e:2f:b3:2e:70:29:28:53:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Validity
Not Before: Mar 29 13:00:47 2026 GMT
Not After : Mar 30 13:00:47 2026 GMT
Subject: CN=87c5f2d77cdf0cbca8b7a70355c58581a95fb5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:61:6e:f6:f7:ce:c9:e0:27:a9:11:a0:81:ac:
42:d2:a6:db:39:fd:eb:3d:18:85:d4:9a:10:5c:c6:
eb:25:d0:4a:b1:f8:df:e1:7b:cd:80:ed:ac:f4:dd:
46:b1:8d:81:de:98:38:dc:25:00:b2:fa:95:c2:c2:
84:f3:b1:47:48:0f:fc:13:d6:16:2d:cb:88:28:ea:
76:35:8e:c9:23:4d:45:06:67:f7:a1:0c:19:8f:e1:
80:92:50:0d:de:6f:10:12:ec:55:e5:37:f9:51:56:
6d:7b:e9:ee:5f:53:9c:79:71:c2:5d:a9:39:f6:3b:
12:4d:17:6a:78:a2:3c:ea:2f:00:7b:09:90:b4:70:
8b:e0:de:14:f4:4d:0d:b2:e7:be:d0:9d:86:75:5e:
fb:e8:8a:9c:0a:c9:f9:77:7a:1a:d0:49:28:04:9b:
d0:6b:97:59:81:84:07:ed:ce:c7:01:10:de:44:9a:
7c:4f:c6:cd:f7:c3:d2:8c:00:56:86:d4:28:04:6b:
5b:55:d2:50:18:a2:dd:0c:bf:1b:f8:84:42:e0:57:
ab:4b:03:05:df:e1:d5:90:e9:10:33:ec:12:a1:fd:
6e:9b:73:73:9d:39:5f:08:cd:f1:d1:e8:4e:a2:22:
b8:cf:42:71:e1:9a:85:63:2a:f3:52:27:34:5a:e1:
8b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C5:F2:D7:7C:DF:0C:BC:A8:B7:A7:03:55:C5:85:81:A9:5F:B5:B4
X509v3 Authority Key Identifier:
keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c5:68:bd:0d:04:a1:d7:e9:c5:03:24:2f:d7:06:d0:37:cd:
63:05:f9:ae:ed:08:92:35:1d:23:22:60:23:5f:cb:62:e0:5c:
bb:ba:de:ec:e6:d1:36:bf:e9:bf:87:4b:16:47:0b:fd:e1:d3:
03:fc:c1:50:ef:d7:53:06:ec:82:85:d6:9a:70:79:d2:d7:a1:
42:fa:8f:bc:a5:8a:6d:2d:78:9f:18:81:c3:0c:a9:c7:9e:d2:
f8:5e:71:ae:c0:21:17:d4:ef:94:4a:f9:bd:21:2a:bf:2d:ca:
2b:d7:b1:da:47:de:91:b6:18:27:9d:a8:40:d9:8a:54:52:10:
57:e5:60:5a:30:d9:fb:24:f9:22:14:8c:a9:4e:4b:e7:60:6b:
0c:c7:16:16:d3:f1:fa:38:22:d8:a5:0a:9b:c4:e5:6b:31:4e:
90:b2:45:6d:33:fc:cd:98:9c:55:af:04:8a:00:9e:2e:0a:22:
bc:43:43:21:6a:e8:70:6e:11:39:2e:d3:e0:37:f6:97:56:98:
d8:43:0c:83:78:6d:1b:3d:8f:c5:4d:76:b7:5d:82:6b:13:15:
76:df:14:82:99:13:80:6b:83:fa:07:1e:38:b2:ed:18:c4:7b:
fe:5f:ff:69:6e:51:e6:67:bf:f6:00:eb:25:db:2a:c5:cc:05:
5f:56:e4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:33 2026 by rpki-client