Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
File: U1ULI4LgD6ffGU5khf4UJYNiE_8.mft (raw, json)
Hash identifier: 5byJrK1tjYZM5fxZ/SHHH8hZpSyrSD9iZYmXrHIy9Tc=
Subject key identifier: 45:B1:5B:DA:CA:DA:A9:3D:2A:99:CE:0A:D6:5F:21:EC:1C:51:B7:AF
Authority key identifier: 53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
Certificate issuer: /CN=53550b2382e00fa7df194e6485fe1425836213ff
Certificate serial: 019D3752E560EC2A43896F25E732A361A118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
Manifest number: 102B
Signing time: Sun 29 Mar 2026 02:01:12 +0000
Manifest this update: Sun 29 Mar 2026 02:01:12 +0000
Manifest next update: Mon 30 Mar 2026 02:01:12 +0000
Files and hashes: 1: 3_TF1Jd76sN3QxPbPepv9qZrq6c.roa (hash: ML2ZijwEfiwVvzhcT4qRWRAEYKvPQK5MksfX4SSNLgQ=)
2: U1ULI4LgD6ffGU5khf4UJYNiE_8.crl (hash: Ha1DjIKf3FshqMeQzeCdoWxsNlCMt8iPHIUemS9RAgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:e5:60:ec:2a:43:89:6f:25:e7:32:a3:61:a1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53550b2382e00fa7df194e6485fe1425836213ff
Validity
Not Before: Mar 29 02:01:12 2026 GMT
Not After : Mar 30 02:01:12 2026 GMT
Subject: CN=45b15bdacadaa93d2a99ce0ad65f21ec1c51b7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e8:ff:cd:03:fc:9c:cf:07:cd:a2:d5:e3:d3:
27:ed:49:11:d7:47:53:16:ba:4a:34:c9:41:07:97:
84:cf:11:83:5f:5e:5f:fa:51:4d:5d:38:4b:9f:30:
c1:48:a3:d5:09:39:de:2a:da:73:0e:0e:ca:d3:af:
7d:50:05:d1:11:a6:ea:a5:7e:0c:b9:4f:a8:eb:ee:
a9:82:36:39:c1:d1:34:67:74:66:88:14:f2:7d:bd:
0d:8b:b4:f9:58:7e:97:36:1f:b4:7d:bd:48:d4:f2:
b3:bb:36:09:e1:c4:19:05:4f:c9:0d:78:c0:99:7a:
fa:24:ae:69:30:b9:2c:ba:36:ea:32:97:a1:59:37:
2d:ef:42:95:40:42:f4:7d:26:4d:83:5d:7d:f2:b5:
5c:15:3f:2c:47:cd:df:78:be:f8:91:8d:4b:37:a2:
ce:5f:74:d8:7c:a5:32:8e:67:65:c3:92:ba:f0:99:
aa:b1:f8:dc:f2:a6:c3:c5:6e:ec:70:1e:7b:e5:68:
08:ff:63:68:df:16:50:91:44:82:be:e3:eb:e3:88:
1f:8e:3a:52:8f:c0:ff:ce:26:70:d3:10:3f:79:e8:
74:d4:b3:34:ec:ff:50:f8:6f:a5:9e:98:e1:e4:2c:
33:1f:2e:70:94:9c:37:e6:64:f5:43:27:05:c5:98:
e9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B1:5B:DA:CA:DA:A9:3D:2A:99:CE:0A:D6:5F:21:EC:1C:51:B7:AF
X509v3 Authority Key Identifier:
keyid:53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4f:6a:94:8c:fd:7d:3d:f9:76:03:e7:97:1a:04:59:13:5b:
41:90:42:cd:88:47:c9:ce:c8:e0:f2:a2:37:fe:f6:71:48:95:
5f:1c:06:a9:8b:ab:72:ab:05:9e:6b:30:1b:74:5e:09:06:69:
91:c0:a6:99:0e:30:f4:93:94:ea:c2:48:f1:f3:4a:e9:62:75:
57:9a:af:cb:c2:e9:8e:2a:7f:0b:d8:fe:9d:d9:95:30:9e:a2:
72:69:d9:ac:4e:d7:cc:56:ad:89:c6:bf:25:e7:32:62:ff:a0:
d5:7c:4e:e9:84:67:6d:9b:15:e7:d5:8d:b8:0a:aa:9d:25:6f:
a4:82:d4:48:6e:48:4b:04:0c:e1:f9:1a:18:77:a9:c9:38:a6:
ad:c2:28:c2:f1:89:fe:2a:e9:33:d4:e0:5e:0e:cc:46:e0:dd:
b1:f9:ea:bd:89:fb:40:46:5d:72:81:48:a0:bc:ba:2c:2a:0c:
17:cc:4b:e3:df:8b:36:91:a1:09:ef:18:bf:9e:46:4d:c7:ef:
4d:fa:1d:43:a8:51:f1:e8:be:84:bc:ed:ba:f0:65:55:5e:40:
82:61:f4:f8:cb:77:32:a0:e7:47:69:08:1c:ca:89:72:cd:44:
aa:be:b1:d6:79:52:7c:f8:1b:91:f0:4c:ed:87:3b:af:95:72:
56:0e:56:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:37 2026 by rpki-client