Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
File: U_rXyaSF_rKReT654tuY9BjlxLg.mft (raw, json)
Hash identifier: U74ZvSIzhDaZ/cz+wa0sJSBJTZbTH4V+i8LmpyQsf24=
Subject key identifier: E4:98:AB:D0:A8:3C:24:B6:98:16:DF:5C:55:9C:58:48:0C:1C:9F:4C
Authority key identifier: 53:FA:D7:C9:A4:85:FE:B2:91:79:3E:B9:E2:DB:98:F4:18:E5:C4:B8
Certificate issuer: /CN=53fad7c9a485feb291793eb9e2db98f418e5c4b8
Certificate serial: 019D3865A94DB7B0D506E16A525A0642F1F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
Manifest number: 0194
Signing time: Sun 29 Mar 2026 07:01:19 +0000
Manifest this update: Sun 29 Mar 2026 07:01:19 +0000
Manifest next update: Mon 30 Mar 2026 07:01:19 +0000
Files and hashes: 1: U_rXyaSF_rKReT654tuY9BjlxLg.crl (hash: jCyW/B9nCoMQjX0hbKd35yosxnFFKKjqEuAg3bIsUyQ=)
2: Yg4X9H4DWGGKD8H5YRPUUkoYlHw.roa (hash: 9JB+Ut5rRiBxCY40cvzaauAZdMWzFKX4dxG7GlKOoZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:a9:4d:b7:b0:d5:06:e1:6a:52:5a:06:42:f1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53fad7c9a485feb291793eb9e2db98f418e5c4b8
Validity
Not Before: Mar 29 07:01:19 2026 GMT
Not After : Mar 30 07:01:19 2026 GMT
Subject: CN=e498abd0a83c24b69816df5c559c58480c1c9f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:66:c1:4b:f7:cb:fd:8b:79:46:f2:67:f1:7c:
a1:d3:75:9d:ad:9f:99:ef:40:bb:2c:d0:80:1b:4d:
e0:8c:7a:53:86:84:2e:c5:f8:8f:dd:87:d2:68:6f:
d8:30:e3:84:fc:75:7f:2b:ac:48:05:6d:da:31:c0:
47:7d:0a:93:6c:48:1b:c0:93:75:ec:1c:5e:12:4f:
c1:02:96:4f:0a:cc:c0:6a:ad:0f:4d:4e:a4:45:c5:
2f:72:a0:b0:c7:14:9c:ee:35:43:21:9d:9a:fc:98:
8e:76:88:25:a1:70:4b:88:85:8b:9a:58:0a:a6:ee:
4f:f4:bc:f4:75:e9:ee:53:96:d0:c9:9d:ad:95:21:
bc:a2:83:ba:d3:c3:38:ac:b5:2b:82:39:8f:ca:4b:
74:8d:0a:7d:7b:98:13:22:b0:34:37:0f:59:c6:6e:
e4:0d:6e:a5:5b:d7:de:e3:8d:92:ad:66:1d:e2:cd:
95:5d:cb:e9:5f:22:88:1f:4d:33:31:37:68:da:38:
c6:8a:ac:1b:85:46:58:dd:ae:c4:fa:45:71:50:00:
5c:42:2f:8a:a2:1e:9a:42:f6:92:e7:32:52:6b:c3:
55:87:85:50:7e:29:e1:44:15:35:ea:d2:6b:35:e2:
52:b7:b5:9a:22:cc:ce:97:49:8a:83:d0:f8:50:f8:
85:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:98:AB:D0:A8:3C:24:B6:98:16:DF:5C:55:9C:58:48:0C:1C:9F:4C
X509v3 Authority Key Identifier:
keyid:53:FA:D7:C9:A4:85:FE:B2:91:79:3E:B9:E2:DB:98:F4:18:E5:C4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:0f:48:88:53:be:a1:c0:6c:4a:35:a8:f3:84:e7:c2:db:ff:
6c:7b:82:e3:1e:5f:ee:28:9f:16:a6:25:93:c7:17:4f:61:ab:
bf:03:d8:c5:d6:8b:31:8c:8a:a3:38:01:46:0e:63:de:f5:6a:
12:a6:12:5f:b0:fc:ae:ba:09:0e:c3:9f:2d:51:95:e3:24:60:
f4:f4:e3:cb:da:d8:77:15:f7:50:40:df:0d:a4:6b:59:f1:18:
9c:3b:6b:0d:04:bb:dc:ff:67:73:c9:a5:11:01:94:34:5b:e9:
26:9a:a4:10:a8:1b:7e:72:09:f4:fe:d4:33:cf:9b:88:21:80:
e1:2f:7f:26:a8:92:2f:4b:4c:c1:c2:2d:20:b0:cd:d5:09:c7:
e3:b4:55:63:fd:31:fd:9e:d0:7b:00:67:65:ba:86:d8:ae:82:
b8:4a:8f:01:a9:b1:b3:b7:d2:28:0b:91:c9:f7:34:c4:f3:4f:
fc:52:a1:08:f4:a1:47:e0:4b:fa:f8:72:7e:83:cb:47:56:b6:
eb:80:3a:64:17:76:a0:89:5b:9f:6b:d9:fe:98:5e:68:6e:cd:
63:a3:f1:19:b1:92:96:ae:27:e9:31:c9:ab:5d:0b:b7:c6:3d:
57:94:df:29:f6:55:de:ff:aa:63:ef:01:b5:66:26:33:36:9e:
87:67:07:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:04 2026 by rpki-client