Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
File: U6EliQpK8JJFWrx7tav-SM2FLAY.mft (raw, json)
Hash identifier: 03oSgvd+5duQv52VIt9I9FycuQ0EsWM6ieyE9jLcSy4=
Subject key identifier: FD:1A:53:2F:60:8E:59:80:C3:0B:03:FE:7D:B4:D1:85:9F:F6:4F:76
Authority key identifier: 53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
Certificate issuer: /CN=53a125890a4af092455abc7bb5abfe48cd852c06
Certificate serial: 019CAD2246F604CBA4679E75E329D0CB722D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
Manifest number: 0884
Signing time: Mon 02 Mar 2026 06:00:30 +0000
Manifest this update: Mon 02 Mar 2026 06:00:30 +0000
Manifest next update: Tue 03 Mar 2026 06:00:30 +0000
Files and hashes: 1: 8otHkib5_3i41JyAw70LeXUh0QU.roa (hash: 0qAK41CxT/RWAwJIryforayLl8dembnwnfhhCABuNu8=)
2: U6EliQpK8JJFWrx7tav-SM2FLAY.crl (hash: UDgp6V5OKrQgQL3xjnA+IwAD15ZDDXMGhLWMusEcSqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:46:f6:04:cb:a4:67:9e:75:e3:29:d0:cb:72:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a125890a4af092455abc7bb5abfe48cd852c06
Validity
Not Before: Mar 2 06:00:30 2026 GMT
Not After : Mar 3 06:00:30 2026 GMT
Subject: CN=fd1a532f608e5980c30b03fe7db4d1859ff64f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:2a:80:31:0d:a2:c0:58:60:e2:5c:1f:f2:
19:c7:8d:46:86:99:9f:92:a6:4f:4d:21:32:6e:57:
48:04:79:91:b4:5e:d0:f6:bc:dd:aa:1c:98:ac:71:
11:8d:6e:17:1d:ab:c0:b8:c5:5f:7d:ab:16:33:6b:
13:48:d0:45:57:30:54:5f:c8:6d:a2:63:d8:33:f7:
57:1e:11:50:93:5b:59:5e:77:1c:11:27:86:c9:cb:
16:e3:a7:d5:03:ae:11:54:21:6b:95:32:dd:49:7d:
07:a5:65:15:6e:82:be:27:87:c2:ff:ed:e8:23:bb:
6d:d6:a1:64:d3:29:8b:51:1e:0a:b1:91:aa:93:d2:
3b:7e:b7:78:c3:35:60:9b:71:ff:ba:0a:c9:ee:59:
84:0f:61:d6:e6:c2:f7:1b:4d:00:4e:c3:42:38:86:
60:00:47:fd:48:4d:ee:f1:a0:54:fb:d1:53:79:2c:
2d:ab:03:db:43:7d:32:14:a2:c5:29:98:f2:c2:09:
b4:98:2d:09:14:6c:0b:9c:2d:56:19:f2:6a:48:d5:
19:30:d9:1a:74:bc:c3:ed:70:b8:6b:cc:39:ce:70:
13:c0:f2:8a:a2:64:d7:d7:a9:9a:23:90:74:9c:03:
36:30:f8:94:1a:80:2b:51:97:ca:b4:71:68:4e:ed:
12:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1A:53:2F:60:8E:59:80:C3:0B:03:FE:7D:B4:D1:85:9F:F6:4F:76
X509v3 Authority Key Identifier:
keyid:53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a9:02:b9:1b:18:f8:da:35:c2:8f:2c:19:52:be:34:e8:ea:
88:2f:28:0f:25:22:da:0d:5a:cf:1c:7d:13:2f:c0:d7:00:c8:
42:fc:96:6c:b8:27:c9:8e:01:8d:3b:db:ee:1c:ef:57:48:9e:
05:ee:fc:8a:35:e3:3b:62:e6:5f:17:43:3c:46:ae:38:f6:ff:
ee:19:f7:8c:0b:22:3f:43:66:5d:b2:1a:c9:00:b1:eb:7a:9f:
93:00:90:52:82:91:35:87:17:64:b4:91:ba:95:50:a5:2b:f5:
a1:b7:a6:22:30:dc:a1:e3:40:72:b3:ca:21:75:42:74:17:fb:
4a:e3:82:9d:ce:a6:2c:0d:c9:65:19:19:a7:1a:67:25:43:b6:
79:b6:ff:30:72:1a:b8:46:4b:0e:26:57:ea:54:f2:d6:e6:ae:
50:a6:a7:ef:02:76:49:d5:b5:a0:46:46:fa:fc:b2:ae:16:d1:
3b:66:99:d0:28:37:7f:81:92:33:16:32:72:e7:db:72:5a:b6:
ab:4f:43:e1:64:86:e3:3b:2f:3f:ad:b4:db:43:58:94:0d:da:
d3:f5:96:40:9c:07:7f:72:d5:86:9b:06:6d:95:7f:24:bf:86:
eb:17:c4:60:d6:e3:b8:2f:4d:64:cc:bb:81:6d:bd:8c:44:4a:
93:3e:48:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:57 2026 by rpki-client