Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
File: U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft (raw, json)
Hash identifier: TTkUK/czuoNbNmJSL4/cOkSc9erm+1lfr/7yVMDZ9hU=
Subject key identifier: 19:57:B2:0B:5C:94:85:5E:0A:77:BF:05:95:00:BF:C4:77:AF:18:F4
Authority key identifier: 53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
Certificate issuer: /CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Certificate serial: 019D9850A45EB64382A8C488F201CF490B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
Manifest number: 10F5
Signing time: Thu 16 Apr 2026 22:01:54 +0000
Manifest this update: Thu 16 Apr 2026 22:01:54 +0000
Manifest next update: Fri 17 Apr 2026 22:01:54 +0000
Files and hashes: 1: 9f-8muSj0lPpqv2C-uJT8RSg4Wk.roa (hash: SrfNBs8fLNs8CyzsQB76S5MYdUrN0e+cR0WQ3SPKGe4=)
2: MB6VGwOGXL__4GDkn2ifKfMOL5o.roa (hash: tgzruOGhqB7Wz++Uyka8T5HxSlsKFcquj+FXoKwEcRM=)
3: ORixJag7nGsUVhn_7z-jWKPNs6c.roa (hash: 5T3+aTdZe3zV/H6LETA51CJXrWU4B9XcKgVJJWWibzo=)
4: U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl (hash: KwJSRv5zZ4aFkqe+hriWDYh8gKp6/CgGg9B6fkB9D/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:45:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:a4:5e:b6:43:82:a8:c4:88:f2:01:cf:49:0b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Validity
Not Before: Apr 16 22:01:54 2026 GMT
Not After : Apr 17 22:01:54 2026 GMT
Subject: CN=1957b20b5c94855e0a77bf059500bfc477af18f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9a:46:05:53:88:47:c3:a3:c5:6a:d2:f1:82:
33:55:18:9e:d0:46:4a:33:ff:da:e9:55:e6:d3:30:
76:d4:5f:20:3d:c9:48:8d:c3:48:b4:44:e8:c9:48:
6c:e0:29:04:c0:bd:31:23:63:2f:0c:1b:79:8c:f7:
74:1d:25:1c:0d:90:c8:ce:66:a5:54:7b:57:00:cf:
12:95:cd:a7:2f:e3:7a:d0:01:68:94:7c:fb:68:cd:
7d:26:4c:1d:15:65:cb:18:e6:55:d5:f5:c7:8d:27:
2d:eb:2a:1c:7b:a9:21:03:5a:4f:c9:f7:4c:7f:00:
a6:ff:9c:e2:79:38:2b:c7:94:28:b0:8e:d4:e8:de:
cd:d0:f6:4e:6c:8a:a8:46:5d:20:c9:4b:a3:d2:38:
6f:d6:39:ed:e4:f7:bb:dd:a4:fe:f7:43:0c:23:9a:
21:db:b5:f5:70:1a:1d:86:33:8b:2e:36:07:da:c3:
ff:c9:db:63:e9:ff:54:93:6a:2c:54:c0:f7:fd:ea:
b6:da:bc:90:dd:54:df:02:87:ef:6d:70:d4:a9:d8:
dc:9e:17:fd:80:86:7d:c1:0b:3d:c1:bf:32:01:8c:
be:b6:7c:ab:db:f5:22:0f:87:5c:04:1a:fb:12:4d:
1c:e2:97:43:c2:03:a5:a6:d0:fd:7e:48:a8:74:42:
73:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:57:B2:0B:5C:94:85:5E:0A:77:BF:05:95:00:BF:C4:77:AF:18:F4
X509v3 Authority Key Identifier:
keyid:53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:99:18:07:ba:33:61:52:df:74:4e:53:9d:03:4d:e7:a4:8e:
b7:46:b6:6f:30:36:2d:33:d8:53:7b:a0:60:e7:af:80:df:ee:
fe:72:40:f0:bd:d5:87:5b:e4:6e:25:68:b7:47:a1:db:00:8f:
ab:55:0a:6e:88:b1:43:84:6f:96:5b:5b:37:6a:19:dd:a2:ba:
20:d4:d5:96:f3:9a:e9:d6:f7:22:a9:d9:7d:61:af:4a:91:99:
55:c6:51:7b:05:75:49:b0:a1:e9:2c:bc:68:aa:20:0e:4f:c1:
ce:82:fe:29:c0:24:75:5a:74:2c:d5:39:5e:7f:a7:4d:66:92:
a4:92:1f:27:30:b9:ca:6e:b8:16:b4:8d:88:0a:7a:b5:c3:3c:
47:1d:ab:a8:92:ad:94:ad:e5:2b:a0:90:a1:f7:af:a8:be:4a:
07:ef:52:8a:85:95:04:37:3b:21:f7:20:e2:f3:f8:75:0b:67:
f5:dd:fd:42:8d:82:19:f3:db:e4:6d:f6:12:e6:7e:6e:ee:c3:
b1:f4:a2:25:71:74:39:de:e2:f9:e2:de:47:a2:87:b7:95:01:
c3:1e:f8:9c:b4:08:ba:62:30:99:5d:ce:d6:ed:d2:86:e8:10:
f6:ca:06:7f:1b:6d:38:7b:5f:6a:f3:bd:bb:ac:fc:ea:f7:16:
a3:d1:08:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 00:04:26 2026 by rpki-client