Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
File: U9To6fSiMLDlaFh2X3EwrNNOni0.mft (raw, json)
Hash identifier: 4spRADsjEaYG2SNB0oesAZqI181vkHjgW9lHsO6XMtU=
Subject key identifier: 1C:FD:E7:0C:74:1C:89:76:62:1A:CC:54:26:97:AB:8E:B8:8B:2C:D7
Authority key identifier: 53:D4:E8:E9:F4:A2:30:B0:E5:68:58:76:5F:71:30:AC:D3:4E:9E:2D
Certificate issuer: /CN=53d4e8e9f4a230b0e56858765f7130acd34e9e2d
Certificate serial: 019EBFC8FBBEE72A27FCED6327164D7A45F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
Manifest number: 0146
Signing time: Sat 13 Jun 2026 07:01:20 +0000
Manifest this update: Sat 13 Jun 2026 07:01:20 +0000
Manifest next update: Sun 14 Jun 2026 07:01:20 +0000
Files and hashes: 1: 3b2s3p4oMea8LJB4yErrpoSUMas.asa (hash: m3bshBr8tj8Wwq1Ja324OOM0o37SNVG1XxrRZZqFdC4=)
2: O860BZXE4oCrVhgqCDhjxlkYiZY.roa (hash: WAAeKTz5adCSs3a4JZFRxzoY1WO2G1GDA+qRkP/2UHM=)
3: U9To6fSiMLDlaFh2X3EwrNNOni0.crl (hash: X06GpWYtKbdGfmlVE8ZYPcdfLbtZEqHn0exc6eLcdzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:fb:be:e7:2a:27:fc:ed:63:27:16:4d:7a:45:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d4e8e9f4a230b0e56858765f7130acd34e9e2d
Validity
Not Before: Jun 13 07:01:20 2026 GMT
Not After : Jun 14 07:01:20 2026 GMT
Subject: CN=1cfde70c741c8976621acc542697ab8eb88b2cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:33:7c:a8:26:83:b7:87:9a:20:5f:c8:4c:0b:
48:b2:01:d0:ee:b4:cf:d1:fc:44:34:ca:e8:b1:18:
9e:bc:b1:c3:67:a5:2e:df:cb:12:e7:f2:cc:d7:b5:
65:6f:24:a7:46:58:0b:9a:de:ad:3c:bb:5f:6a:23:
58:cc:a0:3d:1b:9a:22:dc:6a:ab:14:75:e2:f1:f0:
7f:44:61:a0:e6:d8:30:a9:1f:4d:82:da:a0:ac:5a:
0a:62:70:13:8e:8c:d6:c0:ed:bf:16:62:5c:c7:ad:
a9:a4:77:06:b6:9a:58:8f:8e:25:a1:2d:69:ab:3a:
69:67:68:a7:4c:4c:f0:d1:ee:b4:4f:ed:97:49:d4:
f0:e9:ad:0c:28:f7:27:78:62:cb:fa:6b:ee:ca:40:
ff:52:ea:39:84:7d:68:55:cc:f4:5b:88:d5:a7:29:
8b:1e:f7:0c:e7:0c:d0:8f:9b:fa:28:5b:a5:18:41:
d0:27:5d:72:68:a1:01:9f:85:05:52:46:5b:d9:3e:
ae:c5:c4:8e:23:20:03:b7:d3:f7:aa:c4:a1:6b:9c:
9f:bf:85:8c:9d:b7:ed:e6:1f:55:0e:35:e9:5a:aa:
e0:56:ea:2e:cf:54:16:83:b4:b1:fb:7b:47:a0:6c:
9b:67:7a:17:09:5d:95:48:65:92:e0:44:91:c9:f8:
4d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FD:E7:0C:74:1C:89:76:62:1A:CC:54:26:97:AB:8E:B8:8B:2C:D7
X509v3 Authority Key Identifier:
keyid:53:D4:E8:E9:F4:A2:30:B0:E5:68:58:76:5F:71:30:AC:D3:4E:9E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e8:fd:5e:09:8f:6b:e6:95:16:0d:f8:90:06:79:8f:ea:ba:
d2:e2:5e:bb:b3:45:99:b1:5f:70:f8:19:f0:ed:21:26:cf:67:
d2:51:bc:10:63:bf:34:29:fd:99:67:31:94:f5:50:f2:78:f5:
27:38:18:78:76:38:99:a0:06:79:03:34:99:e6:2b:5b:3e:87:
b9:b1:18:ab:6c:85:21:49:76:cb:9f:3a:79:a4:8a:ae:a2:c1:
72:d7:26:28:42:a4:45:7d:13:52:4f:1e:3e:7b:2f:4b:95:c3:
d6:fb:dc:63:cc:f2:59:7c:82:c7:fa:ff:98:2e:5c:15:e6:49:
0e:c1:8a:fe:47:3a:1d:20:cb:61:38:c9:14:49:14:6f:23:30:
d5:3c:7f:ba:66:cc:ba:e4:88:70:9a:8a:ef:74:d2:5d:af:2b:
54:a9:54:5f:e5:68:eb:66:39:bf:2f:39:08:8d:f6:df:8f:cf:
c3:fd:3f:8c:df:43:f5:c9:54:74:37:08:d3:03:fa:af:89:25:
56:d6:b2:8b:ae:b8:4f:01:1c:36:9c:38:23:bf:c0:aa:06:fa:
a7:65:40:98:23:30:14:e0:7b:8f:e6:f3:a2:87:d6:35:c6:43:
20:18:80:5c:01:a4:f9:53:3b:6d:d1:71:55:0a:92:00:4a:18:
56:36:15:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:18:16 2026 by rpki-client