Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
File: U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft (raw, json)
Hash identifier: i6Xqcspa1sFuvFHeZA514H48jJjZfzHuwmCk0BZNWXo=
Subject key identifier: DA:C4:CB:FF:ED:A5:92:06:81:4E:E9:ED:EE:C7:B5:A9:AA:CA:E3:45
Authority key identifier: 53:BF:98:D5:35:22:AA:95:70:81:FD:EC:28:B1:72:08:43:94:F1:12
Certificate issuer: /CN=53bf98d53522aa957081fdec28b172084394f112
Certificate serial: 01A0EAAED14263BEAC5A8FA81583225699A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
Manifest number: 128F
Signing time: Tue 29 Sep 2026 01:02:00 +0000
Manifest this update: Tue 29 Sep 2026 01:02:00 +0000
Manifest next update: Wed 30 Sep 2026 01:02:00 +0000
Files and hashes: 1: U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl (hash: JZNk/R9Y3Csl9tPNuwtpKGaNXedJAL+3uKLxpwhYZ7Q=)
2: mK9jBg2iFuywF6JUAww3mxKLxCU.roa (hash: lk8hbAdLVuILHrw42c6HMnMUPa/ZOyLXrol4InQSdq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:ae:d1:42:63:be:ac:5a:8f:a8:15:83:22:56:99:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bf98d53522aa957081fdec28b172084394f112
Validity
Not Before: Sep 29 01:02:00 2026 GMT
Not After : Sep 30 01:02:00 2026 GMT
Subject: CN=dac4cbffeda59206814ee9edeec7b5a9aacae345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:1b:26:fa:e2:c8:77:26:9a:27:32:51:55:
eb:2e:1a:3e:f3:90:2c:a8:c4:d0:a1:2a:28:e7:d8:
06:c8:0f:5e:0e:7b:19:43:09:99:75:0e:25:84:a4:
4f:44:c0:e3:d2:dd:7b:61:6b:f3:e7:b7:ee:99:94:
9a:da:e9:2f:12:94:c9:06:06:ee:d0:18:c6:1c:22:
de:71:cd:d3:1d:9e:2e:f4:dd:cf:1c:ae:99:bf:48:
01:49:a8:ba:41:f5:d4:eb:db:e9:fb:4e:7b:3d:5a:
b8:a8:22:97:c3:6b:8b:a6:39:3b:93:23:de:80:b6:
8d:74:8f:da:5a:04:b7:38:61:04:da:dc:d8:26:0b:
15:38:2b:74:b3:37:14:38:d1:c0:c5:73:26:72:da:
b9:e3:99:1a:8c:76:81:4f:e6:4d:66:10:d9:be:6b:
9a:94:b7:d2:73:e9:34:cc:e0:6b:c0:54:a0:8f:18:
2c:a0:13:ed:1b:93:46:37:44:91:6c:33:80:77:fd:
a8:a6:7c:b4:1a:8a:35:a4:e8:81:b0:bf:b0:0e:2d:
d9:c5:6a:49:d6:3e:b3:28:a9:01:44:f2:7b:df:02:
b7:29:8f:4c:ec:a3:e5:0f:e0:37:9d:fc:48:4a:f0:
eb:69:d2:1e:a6:12:4a:6f:89:6c:a0:b3:47:d3:08:
6c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C4:CB:FF:ED:A5:92:06:81:4E:E9:ED:EE:C7:B5:A9:AA:CA:E3:45
X509v3 Authority Key Identifier:
keyid:53:BF:98:D5:35:22:AA:95:70:81:FD:EC:28:B1:72:08:43:94:F1:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:9d:22:93:eb:f4:0c:6e:7f:03:30:74:34:bb:35:f1:40:19:
c3:51:b2:76:3f:c2:c4:51:b6:e0:7e:ff:a0:b5:4c:2d:a9:a4:
f3:76:fb:d5:77:3d:32:5b:71:94:b6:6b:a1:2a:ea:45:86:87:
09:fb:e8:5a:22:ab:0d:38:d4:1f:bf:8d:55:e8:d7:47:bc:c6:
58:a2:85:54:14:d8:62:fb:c6:b4:06:2e:91:71:0a:54:46:18:
bd:35:ea:fc:03:69:ca:55:1f:95:e3:4f:00:6e:c0:5b:7a:4e:
e6:de:37:e2:c4:6f:44:dc:82:64:8e:e2:c0:df:a7:3f:40:60:
95:11:09:10:da:ab:36:26:98:52:9c:47:3f:f5:fb:df:65:6a:
a7:ea:d1:de:cd:16:be:52:b2:e7:49:71:a8:b6:96:3b:ec:b4:
49:53:b3:b0:cd:cc:78:2c:fb:41:0f:64:53:a0:60:56:c6:17:
06:b1:bf:1d:c4:32:a7:3d:52:f2:42:b2:1b:d6:17:f7:2c:5f:
3b:8b:fc:8b:44:18:c7:26:94:de:21:b4:50:c1:da:f0:0b:6a:
65:fa:61:8c:7a:5f:3b:43:75:8d:0a:52:3d:9e:4e:4b:75:af:
ce:70:e1:9b:f6:68:7c:11:e8:f1:b9:b7:86:c5:af:30:00:bb:
13:a7:61:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 09:34:44 2026 by rpki-client