Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
File: U3YJ5EhhINufF7bT10v4VfJxV18.mft (raw, json)
Hash identifier: gJ5aWZ1jXrHZoUlSy2bRXQ4XoSGZ/B1KrKvun8sKZxE=
Subject key identifier: 48:6F:61:9D:8E:16:36:26:A0:0A:51:5F:1B:B6:61:F0:28:B8:03:81
Authority key identifier: 53:76:09:E4:48:61:20:DB:9F:17:B6:D3:D7:4B:F8:55:F2:71:57:5F
Certificate issuer: /CN=537609e4486120db9f17b6d3d74bf855f271575f
Certificate serial: 019D3865FC00D2E13313DBB8B06C278A396D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
Manifest number: 0F0D
Signing time: Sun 29 Mar 2026 07:01:40 +0000
Manifest this update: Sun 29 Mar 2026 07:01:40 +0000
Manifest next update: Mon 30 Mar 2026 07:01:40 +0000
Files and hashes: 1: U3YJ5EhhINufF7bT10v4VfJxV18.crl (hash: Dbj/r2JEHDfZhT9Z83YFOOIODlbrwmz+rgKEh3FlFfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:fc:00:d2:e1:33:13:db:b8:b0:6c:27:8a:39:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537609e4486120db9f17b6d3d74bf855f271575f
Validity
Not Before: Mar 29 07:01:40 2026 GMT
Not After : Mar 30 07:01:40 2026 GMT
Subject: CN=486f619d8e163626a00a515f1bb661f028b80381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:c9:f9:27:04:61:66:a9:1a:90:98:b5:68:
e9:c2:34:79:fa:ca:96:5c:ec:ac:0a:ae:0b:3b:04:
ba:22:50:4a:e8:6a:ec:fd:f7:f9:d9:d8:ff:a5:e6:
26:87:09:3c:4b:cb:94:03:94:a0:6d:3b:15:a4:5c:
fb:c8:8c:cd:35:a9:84:67:86:93:9c:ec:7a:fb:80:
2b:80:b4:a3:bc:8e:5d:4c:12:7a:7b:b4:14:ce:a3:
e3:c5:c8:dd:0d:34:7c:78:7d:7a:60:20:b8:66:f0:
5d:62:bc:58:4a:71:a2:e6:a0:94:8a:f0:95:aa:8d:
09:53:c6:df:19:f5:a5:67:f2:30:7a:06:31:45:dc:
91:ac:12:28:6d:7b:5c:13:8a:9f:01:38:08:6a:3e:
eb:98:0d:a5:8e:b6:95:92:73:35:36:1b:25:da:03:
01:dd:e4:89:14:09:2f:5b:ce:0e:eb:04:a4:12:19:
34:8d:39:0b:cc:9d:79:23:e2:00:c1:81:1a:2b:ef:
94:9a:20:d5:5a:4c:99:4c:bb:1d:1b:3b:24:c8:85:
48:77:0f:24:4b:68:a4:0c:7b:32:fe:8d:f3:74:55:
77:b4:44:c4:ad:d4:41:47:8a:ca:2b:78:68:45:f9:
05:22:29:59:5a:20:c2:ca:53:92:e7:21:37:9e:76:
3e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6F:61:9D:8E:16:36:26:A0:0A:51:5F:1B:B6:61:F0:28:B8:03:81
X509v3 Authority Key Identifier:
keyid:53:76:09:E4:48:61:20:DB:9F:17:B6:D3:D7:4B:F8:55:F2:71:57:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:36:5e:13:e3:b8:ed:8f:10:a5:54:00:2b:ac:bb:58:78:18:
96:3d:75:9d:40:c1:15:d3:3e:89:69:55:7c:a2:bc:07:65:e5:
96:dc:c7:3f:cd:6c:60:85:7c:21:d7:84:ca:12:ec:95:54:8e:
1f:aa:a9:16:63:65:a8:7c:5f:66:54:73:a2:69:ae:ed:7c:0d:
fc:53:b3:ca:d0:11:b7:a5:ce:e3:11:1a:be:59:03:ee:64:80:
4c:e6:de:1e:18:d7:5c:52:a5:1c:d9:65:f8:74:5a:67:44:ef:
7d:f1:00:92:82:f8:5b:83:e9:fc:ec:9d:56:57:51:43:db:8a:
4e:4d:05:f4:70:de:62:e7:71:d2:85:7c:5d:fe:7d:7f:2a:65:
59:8a:1f:c8:16:4a:c3:b0:d6:85:99:3e:ce:55:a8:42:ec:fc:
0b:14:e8:49:d7:3f:7c:df:52:f0:ed:ae:75:f1:6c:10:78:46:
65:3f:46:b3:d8:1c:b0:e4:f6:17:91:8e:12:d2:4d:ce:15:01:
69:46:3c:76:ac:88:13:ce:d4:e9:f0:25:30:18:81:06:97:9c:
e9:e1:16:28:2b:64:20:d1:dd:92:a7:e8:cf:19:88:25:cf:42:
e3:aa:a8:f9:97:64:c0:89:83:0d:33:81:d6:8b:cb:20:d2:ee:
76:e7:ed:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:42 2026 by rpki-client