Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
File: U7u7qj7iTHrZssYEMuFO2jhJteI.mft (raw, json)
Hash identifier: wN0DcGVBfn9AxqJvhqVatGJzVXBBthhUqLqy5tVRNzc=
Subject key identifier: DB:85:CD:9B:97:C8:1D:44:99:9E:D4:07:22:44:F9:A0:E6:DC:2D:40
Authority key identifier: 53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
Certificate issuer: /CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Certificate serial: 019CABD930300071E6ABDF49F4D2C95037F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
Manifest number: 0E3C
Signing time: Mon 02 Mar 2026 00:01:03 +0000
Manifest this update: Mon 02 Mar 2026 00:01:03 +0000
Manifest next update: Tue 03 Mar 2026 00:01:03 +0000
Files and hashes: 1: 8GRdJBxAs0_FXOI6LdkwTzPcfw8.roa (hash: /+kE4h00r/rNQF2qkF3Rbnzzg5WTJLtCWIFfPXld1Uc=)
2: U7u7qj7iTHrZssYEMuFO2jhJteI.crl (hash: vWPZld4eQG+/wmZJgEd8f98UDQxHgLPYwLlBzhXMM0Y=)
3: VtaKLbc1bmC0OT-Q3JTgdIZyayc.roa (hash: UBrKjUxBC5vtYfpevFvOXwmeammg36EmC9n/o1kbyUg=)
4: sOyLous1lcVglNsttXQzSfJQQoY.roa (hash: HK4au5F4Xcxrx2YlmpZX3D2cv+tRYiiQColDX6MpT7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:30:30:00:71:e6:ab:df:49:f4:d2:c9:50:37:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Validity
Not Before: Mar 2 00:01:03 2026 GMT
Not After : Mar 3 00:01:03 2026 GMT
Subject: CN=db85cd9b97c81d44999ed4072244f9a0e6dc2d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:4f:6c:a7:04:23:3f:6c:c0:ae:23:39:59:
f3:c5:c1:d8:87:bb:eb:06:87:13:67:cc:9f:61:ae:
e8:ec:5e:29:54:b6:7c:1b:48:1a:c1:7e:2a:46:d0:
aa:68:00:aa:37:e0:2b:17:59:47:e3:65:12:9c:27:
0d:71:0e:84:b5:cd:16:68:f1:e1:4c:21:61:9d:87:
c8:7c:b8:11:e3:cb:0f:a6:3c:26:4c:ce:2d:58:e3:
ba:0f:b6:b7:bf:0d:bc:91:f7:e8:d8:27:e8:bd:71:
b1:75:32:97:59:f2:30:89:9c:ed:ac:22:a4:d4:6d:
6a:af:39:7f:84:e1:65:4e:c3:81:3e:39:09:84:4e:
a0:41:61:20:1d:26:9d:ef:17:77:4f:81:ec:19:90:
19:71:f2:8b:b5:70:d7:88:bb:d9:c7:46:37:ce:be:
d8:55:45:c4:09:7b:e6:f8:f3:39:e9:6f:1c:62:05:
35:37:d7:0e:bb:61:5f:16:c2:6c:57:6a:21:32:a7:
67:c6:7e:53:db:65:10:3b:61:97:32:e4:09:60:00:
10:f2:54:62:49:82:c1:fd:e1:eb:f5:f7:4d:75:86:
32:ed:ff:9d:69:78:2a:9c:4b:82:c9:3f:3c:6e:63:
b0:42:7b:6f:e3:56:16:40:5e:5b:b8:c6:18:dc:74:
33:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:85:CD:9B:97:C8:1D:44:99:9E:D4:07:22:44:F9:A0:E6:DC:2D:40
X509v3 Authority Key Identifier:
keyid:53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:35:06:1b:25:de:4f:e1:c1:72:b8:ad:0a:9f:51:c2:0f:23:
0e:d8:f4:02:1e:1d:b0:92:fd:38:de:d7:0d:a3:22:f8:9b:1f:
b6:9b:02:46:17:c1:f6:8a:91:d7:43:f1:c9:7d:fd:48:ac:e1:
ab:65:f5:2b:a7:8c:c8:be:5e:8c:a6:7e:71:1c:76:26:c8:b7:
c0:90:15:40:31:6a:b8:a7:15:81:9b:f8:dc:9c:d6:33:73:13:
ee:42:64:d3:fb:be:02:e9:ff:f2:8e:93:cc:de:c2:6b:0f:ee:
72:08:7a:2a:91:bf:a0:d8:0b:28:3c:5c:6c:0d:2b:48:51:9d:
8e:a4:5a:4e:96:ba:73:23:f0:3b:ed:31:4c:7d:a2:f1:5b:d6:
76:0c:0d:0f:a4:70:89:6e:66:24:8b:88:54:7d:b8:43:e8:9b:
59:e0:73:21:7c:0c:5e:51:61:58:99:69:e6:c6:90:4d:5b:6c:
85:bc:3c:0b:52:a7:59:0a:ed:31:b0:a3:3a:c9:ab:bc:33:85:
04:49:e1:33:ea:0c:ed:31:5a:cb:22:d0:6e:95:b3:a4:b0:7f:
9a:30:b2:68:fd:b3:e9:78:25:25:78:ca:a2:67:dd:db:4e:7b:
58:d5:ea:08:0d:c7:c9:6b:a5:48:40:fd:8c:45:be:ab:ba:af:
ea:ad:67:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:56:29 2026 by rpki-client