Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.mft
File: U9xdTpyQVzxt330Ay-iy7aQT_IY.mft (raw, json)
Hash identifier: XxZ3e3IQbkjcdespcV2VjjIrF7d9gnP/IWCTUV6zpcM=
Subject key identifier: 54:D0:62:D3:C8:7F:32:68:9C:E3:B6:E6:C9:82:5E:09:BC:1D:42:DB
Authority key identifier: 53:DC:5D:4E:9C:90:57:3C:6D:DF:7D:00:CB:E8:B2:ED:A4:13:FC:86
Certificate issuer: /CN=53dc5d4e9c90573c6ddf7d00cbe8b2eda413fc86
Certificate serial: 019DDD30FE1632179C20F7357CED328FF2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9xdTpyQVzxt330Ay-iy7aQT_IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.mft
Manifest number: 9D
Signing time: Thu 30 Apr 2026 07:01:08 +0000
Manifest this update: Thu 30 Apr 2026 07:01:08 +0000
Manifest next update: Fri 01 May 2026 07:01:08 +0000
Files and hashes: 1: PsU7x_frD08SU2YYN4xYvGI8q1E.roa (hash: k6MudYJE0V8N7WpGxi22h24h9nGg9VIaakZ/jcGCILw=)
2: U9xdTpyQVzxt330Ay-iy7aQT_IY.crl (hash: WGyDbw/EcWtI9enIkJEhSBEgTV9EefgO4Uy3SaDdj/o=)
3: fOZ6kY7go8H3U7EGMazIlVOf4S8.asa (hash: ZG2DRjQ6yjHyZJgJZLq1YZ9mSn6uEwFWnifyu/zanYY=)
4: xOttd6TpxOr24A9NYb5gHM_31mk.roa (hash: acecs5fYnCii+jIlRbpWYRX+vj6OKx+EgPOK7cU5+y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9xdTpyQVzxt330Ay-iy7aQT_IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:30:fe:16:32:17:9c:20:f7:35:7c:ed:32:8f:f2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53dc5d4e9c90573c6ddf7d00cbe8b2eda413fc86
Validity
Not Before: Apr 30 07:01:08 2026 GMT
Not After : May 1 07:01:08 2026 GMT
Subject: CN=54d062d3c87f32689ce3b6e6c9825e09bc1d42db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:06:47:8d:f8:03:26:27:da:aa:7a:da:92:44:
df:3d:2e:4c:54:60:5c:94:ed:9f:41:6d:b9:bb:13:
6c:67:fa:15:e3:50:49:13:63:8b:7c:3e:6b:2d:1a:
55:c7:f0:e5:6d:e2:7d:77:c8:8a:2f:53:9b:0b:5f:
98:08:c0:0f:fa:2c:72:08:24:07:1d:e1:de:34:49:
00:0b:48:79:c0:5c:58:2d:f7:09:a4:71:df:87:7c:
0f:f8:d9:ca:97:3e:9c:85:d9:24:61:eb:fa:ff:a4:
b6:59:13:59:a5:d0:70:66:dd:de:f6:eb:8a:fd:2e:
90:53:47:a6:0d:98:91:e8:f9:75:16:f9:45:1e:4a:
bb:bc:5a:1b:8a:05:44:de:cd:6e:2a:4a:34:12:cc:
27:e6:06:f6:a9:48:03:91:a9:d2:9e:5f:57:c0:9f:
70:c7:fe:b3:90:b1:7a:a8:db:20:0c:db:be:7c:d1:
dc:0d:22:7e:f1:30:4f:ac:96:6b:c7:e8:18:95:f7:
0b:97:01:c7:48:08:1e:08:54:f9:67:3b:3a:83:22:
99:b3:13:8f:7f:c5:50:99:0f:dc:0a:3c:10:7d:01:
c6:8f:80:b2:36:1d:c2:15:ba:67:3b:ca:6d:6d:c1:
e5:bb:86:db:d3:18:3c:9d:b2:4b:dc:c0:b0:0e:30:
d6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D0:62:D3:C8:7F:32:68:9C:E3:B6:E6:C9:82:5E:09:BC:1D:42:DB
X509v3 Authority Key Identifier:
keyid:53:DC:5D:4E:9C:90:57:3C:6D:DF:7D:00:CB:E8:B2:ED:A4:13:FC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9xdTpyQVzxt330Ay-iy7aQT_IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d4:43:e0:f8:cf:68:76:cb:f5:23:56:c0:db:fe:4f:59:d9:
3e:de:79:38:c8:65:a1:c6:ab:04:59:fc:5d:fd:2f:7c:2a:b9:
fe:f6:7a:7a:81:ec:74:1c:af:ab:a8:e9:c3:ad:3c:6c:e5:e3:
10:e1:e3:60:29:28:8d:68:c3:15:b8:f9:95:c6:7b:e3:13:25:
f1:76:e8:4d:87:8c:15:a3:1b:e3:3f:61:2c:11:a2:ac:3c:fb:
9e:ea:5c:c0:8e:f0:9d:c3:84:21:9f:81:b3:58:16:75:05:be:
df:53:5e:d5:1c:8f:0e:af:05:5b:5d:99:da:1c:0b:0c:4f:a4:
9b:65:a2:cd:30:f4:05:4a:0b:8b:2c:d4:fe:6e:ac:c1:c0:e7:
f0:26:e6:91:2c:bb:8c:85:50:a1:19:53:2f:e1:26:d8:58:19:
4a:1d:73:3e:7a:f9:5b:76:9e:bd:3f:71:86:22:c1:0f:02:81:
45:5e:e0:2e:6d:f6:37:7b:fa:98:6c:28:82:66:dd:3e:39:e8:
b4:73:e2:7b:d0:5a:a6:72:7f:85:0d:bc:05:e8:d3:52:83:a2:
f4:00:7b:80:05:e3:d1:4f:b6:62:05:7b:a7:cc:e2:ec:cb:fa:
60:f8:85:af:0e:87:a6:f9:41:53:bb:91:14:0f:5e:b9:6b:79:
35:10:be:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:52:04 2026 by rpki-client