Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: b8RkeXgriPIRvpsPrNvdmnwqNCVACHHwChLrRsoabHM=
Subject key identifier: 85:19:6E:E0:E1:0D:0F:A3:77:66:96:07:2F:60:8B:67:A0:57:F8:53
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 019CABA219266AA5FFD03A852BBF82207AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 23:00:53 +0000
Manifest this update: Sun 01 Mar 2026 23:00:53 +0000
Manifest next update: Mon 02 Mar 2026 23:00:53 +0000
Files and hashes: 1: HiUqKu1CLOYfZbl3wCDGIXPaQ18.roa (hash: jutim/UTVgLR2CiOBLYd1qnaODFkPt/SBYjCIEf8wS8=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: Ok8eluhAsabX4dNDRZu/HIYENnEPPvR+ahnMLBkY+r4=)
3: aQCGqbkR7pZwAY5aB2nDuU5di8E.roa (hash: 6xFhZTjV0UNGd+XOChz+C1HRl/SOHjV9aweW1aP17pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:19:26:6a:a5:ff:d0:3a:85:2b:bf:82:20:7a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: Mar 1 23:00:53 2026 GMT
Not After : Mar 2 23:00:53 2026 GMT
Subject: CN=85196ee0e10d0fa3776696072f608b67a057f853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:43:9f:95:2f:97:33:49:fb:56:3e:22:cd:
2e:dc:a5:fc:fa:c8:01:06:a0:9a:62:c5:f4:f6:0e:
59:90:02:6e:c5:a2:93:9c:c4:d3:f0:dc:85:0b:5d:
49:a6:52:04:f3:73:0b:0c:42:6e:21:c5:1e:6c:18:
ab:e3:29:ba:1a:cb:27:f9:67:2b:fe:1a:46:22:27:
d2:3b:6c:47:21:b6:e3:23:eb:22:4f:6e:eb:25:49:
94:9b:ac:6c:b9:9e:fd:eb:00:7c:fc:be:1d:72:bf:
c9:8f:81:b4:98:ff:dd:62:fb:9b:68:ea:8d:b2:46:
94:27:a8:01:85:af:1c:e1:35:9a:51:73:7f:06:b3:
2c:f3:ca:d2:34:c7:9b:94:dc:3f:27:c7:d6:14:02:
e2:d4:32:d2:eb:4a:af:4f:3e:f5:5b:d9:56:05:66:
f6:12:82:55:c8:32:57:77:33:84:75:24:d8:42:c2:
05:28:03:db:7b:e0:5d:bf:57:bd:e1:e0:07:00:2c:
c5:9d:4e:4e:2e:30:00:70:2f:27:3b:39:82:6e:f8:
15:33:80:08:ce:0f:24:9f:02:97:80:a3:03:78:23:
20:19:7f:d6:c7:e5:1b:9f:88:9d:24:cf:2f:6d:eb:
72:09:f3:29:d0:c9:c3:81:c6:fc:98:9d:76:54:f8:
56:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:19:6E:E0:E1:0D:0F:A3:77:66:96:07:2F:60:8B:67:A0:57:F8:53
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c9:64:41:39:21:2d:9f:d7:20:87:a1:72:58:a3:20:25:03:
56:11:89:32:7f:e5:fa:77:c3:ce:e3:e6:77:df:4f:a0:d1:8f:
d4:cf:bd:64:0b:64:f0:03:25:7a:bd:1f:52:a7:42:75:22:9e:
c8:79:ee:23:e6:d7:46:dd:4c:97:8b:24:48:12:26:1a:5e:62:
d3:11:15:7f:fe:d4:68:18:8c:24:d1:92:27:67:f5:44:00:cd:
6e:28:fa:aa:5c:a8:6c:cd:75:e9:49:83:d4:24:09:82:0e:de:
6d:5d:55:ff:2f:71:a4:3a:93:62:27:c7:19:0a:03:60:56:17:
9e:04:40:2c:a7:61:b8:d7:45:54:9f:0e:d6:8f:af:4a:49:a5:
1d:e3:b8:71:c5:de:d9:20:76:a6:d6:93:f9:0e:49:30:a4:30:
f1:a2:ce:d0:f8:34:52:58:73:ca:cd:2d:44:b1:ef:a5:02:d4:
95:8e:ca:e3:dc:b6:9f:37:b0:7c:22:a6:23:77:67:75:70:f8:
02:49:02:62:2e:d2:4d:ad:cd:ac:d5:e1:57:1f:56:9d:8b:c6:
f0:6b:d4:23:08:fb:27:d2:3c:08:00:ec:91:2b:af:a2:75:66:
b9:b3:d6:af:0b:2d:f2:25:66:c0:44:7f:ec:04:dc:06:b3:d7:
88:3d:3c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:14:25 2026 by rpki-client