Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
File: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft (raw, json)
Hash identifier: U8GTUYABtmhbA+91q+IR+r9ge3vab4rNmF7DGCB6Xmo=
Subject key identifier: 30:71:F2:12:20:30:C1:AE:F1:BF:AE:4F:04:86:12:88:9D:46:48:D6
Authority key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
Certificate issuer: /CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Certificate serial: 019D3940BF8993094147022E2D390C2C6F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:00:37 +0000
Manifest this update: Sun 29 Mar 2026 11:00:37 +0000
Manifest next update: Mon 30 Mar 2026 11:00:37 +0000
Files and hashes: 1: 7pmNInk-dCH6WsuaRDxg2ILy8pg.roa (hash: 2m1FS9YMqm9NTE7E4KU6Pg9M6MzDGeacr6q3JFeGbKM=)
2: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl (hash: VIO80zJ13tCBSYtUYlVTWgYF13W0BngV9aeXUxoncUw=)
3: t_7IHQAUEyaUbl5DxXVWHE2bbGE.roa (hash: a851GGpE/WvCnOovf5sLJTvqxcyYbrGtDw0UsU9RPPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:bf:89:93:09:41:47:02:2e:2d:39:0c:2c:6f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Validity
Not Before: Mar 29 11:00:37 2026 GMT
Not After : Mar 30 11:00:37 2026 GMT
Subject: CN=3071f2122030c1aef1bfae4f048612889d4648d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1e:fe:9d:0d:50:33:a4:eb:11:3a:b7:c0:07:
7c:6e:d7:b1:2c:5e:59:af:7f:bf:1d:30:c8:c4:16:
e9:0f:91:ba:fe:0b:38:98:04:34:ee:8b:38:1e:a0:
e5:5c:41:d9:19:c5:ae:65:9f:f1:e0:8b:23:37:79:
58:75:cd:43:85:a2:09:f4:d0:35:c1:dd:91:47:70:
ef:d5:28:72:18:bc:06:09:7a:69:44:0d:8f:b4:65:
dc:90:40:90:b5:04:e2:df:4f:d7:69:db:1a:8b:02:
75:0d:04:4a:fe:af:cc:25:28:7b:f5:d4:12:5a:ba:
29:7d:6b:1c:1e:27:d3:d8:40:4b:da:1e:4c:f9:66:
41:94:10:ae:0f:6b:d1:58:15:8e:f9:a2:65:6d:65:
28:96:0c:fe:58:0e:48:d2:46:30:be:30:ed:b4:66:
fd:b1:44:42:8a:4b:f1:9d:28:17:a8:76:dd:ea:39:
ac:2b:5a:10:32:f9:52:75:03:1e:d5:8e:c8:0f:c9:
ab:6d:30:96:bd:38:d8:9c:f6:31:e2:ef:0e:aa:c2:
7b:15:0d:0c:97:79:5a:56:33:a2:54:33:cd:7a:5c:
c8:47:37:9b:d7:4a:ad:fc:95:4e:a0:0c:ac:25:04:
e7:6c:90:86:b6:ce:57:47:1a:6d:3d:c1:c9:a7:5a:
a0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:71:F2:12:20:30:C1:AE:F1:BF:AE:4F:04:86:12:88:9D:46:48:D6
X509v3 Authority Key Identifier:
keyid:53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:43:2e:45:5a:f6:2d:2a:61:11:24:e3:81:93:ab:ae:f9:2d:
a6:fc:5d:d6:ab:30:9e:ae:f9:06:c3:b2:5b:79:cb:1a:8e:8b:
ec:e1:81:bd:41:7d:3f:b5:ee:28:8e:cc:0b:74:25:02:d0:03:
31:31:57:b6:36:34:7a:73:74:16:ec:4b:7b:94:56:d6:60:f5:
59:53:e8:8c:eb:2c:87:87:b3:90:74:d0:03:bd:1c:84:11:dd:
c3:af:59:78:12:82:f4:32:e6:47:6f:d7:0d:61:07:fc:30:86:
60:7c:e1:c1:5f:c4:db:84:22:f0:04:70:b0:4e:47:2a:c8:67:
03:6a:2a:1b:40:2a:3a:8b:69:4b:d1:ed:5a:87:50:d9:a9:9e:
9a:97:04:7b:21:c6:62:61:d5:93:fd:42:88:87:0d:57:7a:d7:
74:76:97:9f:c1:49:c2:f9:c4:aa:49:e8:57:98:f4:13:e8:6e:
16:32:0e:89:2e:80:ae:c7:8b:5e:91:fa:2c:aa:e0:af:41:86:
bc:9f:6b:25:e7:fa:e6:ef:e3:1c:e0:6d:5c:c7:be:b5:7e:98:
2d:c3:2b:f9:fd:dd:7f:a3:42:e9:78:4a:43:5d:96:f5:5a:df:
4e:b6:c1:35:99:c3:c0:d5:4a:a6:65:b8:1b:a3:64:01:b4:26:
88:57:d3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:13 2026 by rpki-client