Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
File: U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft (raw, json)
Hash identifier: wz2t9qTihz2qC0IUBhiljS/U68Ux3dKuj67JhwUkxC8=
Subject key identifier: 31:B3:CA:34:ED:0C:EC:E5:EE:49:AC:C1:34:88:41:6E:AF:16:E1:2B
Authority key identifier: 53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
Certificate issuer: /CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Certificate serial: 019CADFE54ABA61667EE2DC99625386C6104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
Manifest number: 03A0
Signing time: Mon 02 Mar 2026 10:00:51 +0000
Manifest this update: Mon 02 Mar 2026 10:00:51 +0000
Manifest next update: Tue 03 Mar 2026 10:00:51 +0000
Files and hashes: 1: U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl (hash: AdInsaJE2APYTxItawAf7v9rXWm0SG8t8Ls8/I8SKIU=)
2: qAWpsleSdTKU2QK0ge-DYDJtKTg.roa (hash: hBYa6IMYEuL9W6YmuZd1vKmz/EkBj75T5fHCqH+FPYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:54:ab:a6:16:67:ee:2d:c9:96:25:38:6c:61:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Validity
Not Before: Mar 2 10:00:51 2026 GMT
Not After : Mar 3 10:00:51 2026 GMT
Subject: CN=31b3ca34ed0cece5ee49acc13488416eaf16e12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:0a:da:08:49:e2:31:2d:6f:7f:8b:4e:73:
55:e2:b4:b3:d9:71:a2:a7:db:8e:e4:61:dd:a4:b1:
ac:77:d3:84:5d:69:4e:ae:c1:9c:36:44:6c:0f:44:
dc:02:eb:05:9c:68:1a:98:2f:49:cc:4d:6f:f6:b9:
d5:d7:13:a4:47:26:cc:f8:1c:a9:27:74:3a:29:c3:
6e:10:22:eb:92:00:8e:51:29:2f:7b:4a:8a:c9:00:
fe:38:a5:3f:1f:d7:54:57:ba:21:7d:ad:7b:e7:26:
f2:0d:c0:8b:b4:73:3f:5d:56:17:79:60:60:ea:6d:
eb:85:81:e5:a6:a2:ac:a5:69:e2:89:2c:eb:3c:75:
3d:be:40:cb:e8:48:3c:a7:66:ef:20:0b:fb:00:7b:
ff:50:46:ea:63:f0:72:4c:f5:e5:a4:bc:fc:7c:9f:
bc:94:25:0e:91:5e:71:bf:ec:91:47:4b:30:ef:f5:
c3:89:dd:2f:bd:4f:fc:6e:cb:ce:27:f3:2a:29:da:
35:8a:43:e0:a8:e0:da:80:c0:17:ab:ac:91:38:e9:
ab:5e:64:3d:fa:6f:56:05:ff:8f:5b:cc:0c:c8:28:
a5:be:e1:df:06:a4:bd:32:b9:3a:b3:a5:ad:fd:62:
d1:fa:f0:83:ad:02:70:cc:02:f3:04:f0:1b:3a:87:
8d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B3:CA:34:ED:0C:EC:E5:EE:49:AC:C1:34:88:41:6E:AF:16:E1:2B
X509v3 Authority Key Identifier:
keyid:53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:5c:3c:a1:81:2b:04:10:ed:8e:60:53:d5:7e:84:58:16:d4:
5c:4b:2f:d9:da:22:8b:52:9b:51:ff:42:db:1d:49:37:90:6f:
6c:3b:28:87:0a:72:96:fe:38:ac:bb:ab:f8:63:e9:d5:13:16:
ca:2a:ba:8b:e1:3d:01:14:fe:5f:f4:56:9b:ea:15:28:e0:7b:
c7:72:01:59:a4:9e:2a:b2:aa:34:96:ff:3a:ac:ce:a2:74:58:
e9:e3:65:b5:f4:1d:7e:ef:22:c5:d2:1d:03:ef:c6:4e:13:6f:
8f:9e:97:5a:a1:c5:5b:a5:0c:49:17:47:07:99:4b:e1:fc:4b:
ab:60:ed:1e:8e:0e:50:97:46:7f:46:ee:a5:fd:89:75:73:44:
89:3d:14:9f:98:c6:e5:ae:93:d1:cf:d0:ee:d8:1e:f4:b9:7e:
61:1c:c3:cc:61:c5:cf:08:0e:80:5e:f3:3d:ad:2d:9d:ef:e6:
d9:ed:b5:98:b1:7c:bb:e3:20:40:c3:fa:7e:83:e1:64:93:99:
04:e6:bb:1a:c8:43:a2:26:98:59:56:33:97:e5:fa:54:43:2b:
35:07:a0:52:32:6c:82:78:ff:94:93:74:52:d0:89:55:a3:58:
32:07:61:4f:98:65:69:10:99:9b:eb:f2:af:e1:36:d6:95:8b:
20:c4:dd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:49 2026 by rpki-client