Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: qniN0alP2d8zVuhpu6fexcGqQSRZ766xKtDseJckXtw=
Subject key identifier: C5:68:AD:62:D4:36:93:0B:B1:47:58:9C:A0:50:64:C4:65:E2:0E:0A
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 019DA2D35382CEA0BED52ABBEAF42A5258CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 18C8
Signing time: Sat 18 Apr 2026 23:00:51 +0000
Manifest this update: Sat 18 Apr 2026 23:00:51 +0000
Manifest next update: Sun 19 Apr 2026 23:00:51 +0000
Files and hashes: 1: HiUqKu1CLOYfZbl3wCDGIXPaQ18.roa (hash: jutim/UTVgLR2CiOBLYd1qnaODFkPt/SBYjCIEf8wS8=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: KC+W7aqDtuumLvtfPBNrFkzF8FmOs0Tsyt7jrPHdv3M=)
3: aQCGqbkR7pZwAY5aB2nDuU5di8E.roa (hash: 6xFhZTjV0UNGd+XOChz+C1HRl/SOHjV9aweW1aP17pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:53:82:ce:a0:be:d5:2a:bb:ea:f4:2a:52:58:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: Apr 18 23:00:51 2026 GMT
Not After : Apr 19 23:00:51 2026 GMT
Subject: CN=c568ad62d436930bb147589ca05064c465e20e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c8:91:fd:ae:88:dc:68:0a:29:cb:4a:2c:b1:
21:b4:01:5e:e1:d9:d8:a5:c0:16:61:d7:4d:53:9f:
35:e0:d7:0b:e4:f0:ad:77:20:6b:e0:ce:d6:d3:0f:
94:74:11:d5:03:9d:31:f9:0e:07:44:44:91:50:c1:
a2:45:4c:20:9b:7d:cd:e3:4a:33:65:24:cb:f0:fc:
d9:a4:86:86:b9:8f:c2:6d:7f:d1:07:e6:d9:06:74:
9a:46:8a:ab:f1:bc:47:4e:fd:0e:22:f7:76:de:b6:
ad:a4:bd:17:7a:98:56:7f:be:c5:06:7a:c7:a6:a8:
e9:c1:f2:16:7b:52:9c:6d:6a:04:9d:90:df:e4:40:
ed:b1:79:07:65:a3:b8:1c:ca:f1:f0:3d:c7:50:33:
75:79:26:23:28:91:6f:a3:c1:5f:ab:b6:66:ba:e1:
70:8b:3d:09:be:0b:04:c5:4d:75:be:e3:e4:f8:8a:
36:33:68:fc:47:30:70:42:c0:38:8d:39:f2:a2:d9:
24:fe:8d:19:14:fb:63:5b:a5:e6:9d:73:34:d5:41:
e2:8e:a0:c5:95:70:a6:44:20:cd:b2:4a:66:60:a5:
07:7d:38:a1:24:0d:b2:c8:e8:a1:9b:92:ea:b7:ad:
77:58:df:81:5b:b9:14:d0:67:a6:86:4b:46:53:8e:
1a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:68:AD:62:D4:36:93:0B:B1:47:58:9C:A0:50:64:C4:65:E2:0E:0A
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a0:b0:f9:79:99:2f:fa:4b:a0:20:7f:e4:28:7a:a9:22:94:
d8:39:b7:93:8b:24:51:4b:73:ad:77:73:bd:97:c8:4d:60:ad:
25:61:28:61:2a:d7:69:66:54:b5:04:90:14:a0:f6:ac:ea:b6:
8f:63:ca:1f:6b:21:a8:08:08:b4:9c:0f:8f:c0:57:f5:ff:fb:
ab:a6:c8:7b:d6:a4:f0:89:db:a2:8f:86:4c:0c:8a:d8:e3:c3:
75:17:ca:f9:20:a3:fd:d1:b9:bb:27:00:e9:69:cd:83:b5:66:
a6:4a:9f:ad:27:7f:88:61:3b:f7:3e:23:46:6b:87:a0:ab:04:
25:2b:7c:8b:6b:12:bb:40:78:05:83:4a:69:33:06:95:15:90:
99:db:79:a9:57:86:90:99:91:8e:0b:53:4c:7a:05:52:53:99:
54:73:33:2f:c7:b8:c1:5f:23:39:6b:c2:2d:1d:35:8d:d2:06:
4f:61:35:c2:19:44:d1:d1:1d:fc:06:89:1c:30:9d:cd:91:02:
3c:d5:c4:0f:9e:63:13:a9:ec:e5:3d:20:90:d3:fc:f0:78:82:
0d:0f:d8:cf:65:37:56:ee:5e:49:b0:47:a9:d1:a8:38:f0:b4:
dc:d0:41:20:d5:4c:5f:c4:14:21:ba:1b:e6:1d:62:03:4e:1d:
27:c3:7b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:55 2026 by rpki-client