Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
File: U9To6fSiMLDlaFh2X3EwrNNOni0.mft (raw, json)
Hash identifier: g907twp+dqpRDK4buc1LQEnFDxCRSbem9iRASrlQdmg=
Subject key identifier: 56:13:87:70:0C:37:1D:38:2B:78:9B:D8:B2:BE:44:25:99:8C:F8:4F
Authority key identifier: 53:D4:E8:E9:F4:A2:30:B0:E5:68:58:76:5F:71:30:AC:D3:4E:9E:2D
Certificate issuer: /CN=53d4e8e9f4a230b0e56858765f7130acd34e9e2d
Certificate serial: 019DA566B7F4DB49A2E91B7A12ADD099C654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
Manifest number: B3
Signing time: Sun 19 Apr 2026 11:01:05 +0000
Manifest this update: Sun 19 Apr 2026 11:01:05 +0000
Manifest next update: Mon 20 Apr 2026 11:01:05 +0000
Files and hashes: 1: EkTvlRcL5gr2sd6yVsi4cUhXAkc.asa (hash: jZzPjsomaR5uIyS92PagAAHydVGUAeZDGGUA6STCd1M=)
2: O860BZXE4oCrVhgqCDhjxlkYiZY.roa (hash: WAAeKTz5adCSs3a4JZFRxzoY1WO2G1GDA+qRkP/2UHM=)
3: U9To6fSiMLDlaFh2X3EwrNNOni0.crl (hash: RuPhcvcpOFCKCHG2bPyhPKOkJZuqbYSVOO4/YVlnn2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:66:b7:f4:db:49:a2:e9:1b:7a:12:ad:d0:99:c6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d4e8e9f4a230b0e56858765f7130acd34e9e2d
Validity
Not Before: Apr 19 11:01:05 2026 GMT
Not After : Apr 20 11:01:05 2026 GMT
Subject: CN=561387700c371d382b789bd8b2be4425998cf84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9d:ac:ca:e2:cc:2d:07:54:bd:f3:20:f3:2a:
ce:38:f6:6c:77:6c:e5:51:cb:5f:da:09:2d:89:85:
64:8d:30:e7:eb:75:82:e1:26:45:ff:44:41:8d:7b:
e4:aa:bf:7b:c4:ba:45:32:89:23:22:18:5b:44:e1:
d6:dc:37:56:c2:46:ef:10:2a:59:33:1a:c8:af:fd:
0e:95:34:6a:d7:a3:19:2d:3f:60:c1:b0:85:67:7f:
3f:25:98:56:ce:6f:85:2e:c8:18:0b:24:78:9d:77:
f0:82:a1:86:0e:05:db:df:1d:9a:3b:a7:d0:1f:52:
4d:f0:70:71:97:65:9e:0a:34:5a:88:10:65:10:bc:
f9:e8:f9:1c:75:e4:e6:2a:1d:83:d8:1a:1d:93:a5:
d9:16:8a:2d:92:49:08:27:41:07:62:8c:c2:53:b9:
b8:02:6e:53:50:65:1f:2b:f4:c4:54:75:99:af:57:
1b:80:c4:aa:55:8d:5e:a7:b1:42:50:d6:a1:f3:e1:
48:84:b1:af:0d:44:fa:db:1b:41:8a:57:83:49:f3:
33:94:ae:6d:40:1e:10:6f:55:69:fe:63:1f:ac:77:
02:a9:bd:13:57:f0:4e:24:2c:2a:3f:b1:2b:7a:44:
12:35:a2:8b:91:42:03:44:7e:99:70:ef:be:5c:ee:
fc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:13:87:70:0C:37:1D:38:2B:78:9B:D8:B2:BE:44:25:99:8C:F8:4F
X509v3 Authority Key Identifier:
keyid:53:D4:E8:E9:F4:A2:30:B0:E5:68:58:76:5F:71:30:AC:D3:4E:9E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:23:4a:ae:8e:aa:00:c7:0e:82:8b:13:8e:49:6d:d5:87:3b:
fd:9d:fc:9b:d6:47:1f:bc:94:52:7d:bd:b9:10:51:32:6e:6d:
2c:a9:d6:30:b3:f1:47:99:af:ba:4e:46:da:f6:a2:0c:40:c0:
e9:07:3d:27:e4:ee:f3:3a:89:bf:a1:9c:dd:1c:0e:6a:4d:7e:
b7:1d:4e:cb:9a:2d:0b:7b:01:bc:21:19:3c:32:88:9c:0f:ca:
c7:67:d3:4c:60:03:ce:b9:d9:2b:e1:2e:f2:80:1e:db:c7:04:
44:6b:d5:f1:11:6c:99:51:ce:7a:98:e4:11:66:55:b1:6c:c4:
97:b9:50:50:e9:9e:f3:72:e9:37:cf:ed:dc:4a:92:e5:36:76:
91:55:ba:f7:e1:cd:54:1d:a2:29:71:77:ee:c7:2c:6a:18:3f:
10:d6:77:f5:39:bf:83:99:58:e7:0c:19:8b:0c:ba:c6:cb:39:
49:f3:9f:79:6e:37:6d:75:71:0d:d1:96:fa:01:7d:fa:b1:0a:
bf:a3:fb:fc:90:c1:4a:77:fb:8f:60:62:96:15:61:7a:29:04:
df:b9:3a:cd:75:ea:8a:72:28:eb:b7:be:08:ce:c8:3c:bb:be:
aa:43:d9:c4:96:22:3e:37:00:bf:75:44:d0:7f:54:2a:98:b6:
50:da:d8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:25:52 2026 by rpki-client