Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
File: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft (raw, json)
Hash identifier: x5LWzYM9ERYwFIMT3sdcpTa9LzULX4hgi8qgw2oEAqA=
Subject key identifier: 26:7D:26:06:17:EB:FF:BD:1E:33:6B:9B:C8:B2:2B:0C:22:9C:08:11
Authority key identifier: 53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
Certificate issuer: /CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Certificate serial: 019D99991C03012CC5BCAF5D860A717E4D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
Manifest number: 18AA
Signing time: Fri 17 Apr 2026 04:00:41 +0000
Manifest this update: Fri 17 Apr 2026 04:00:41 +0000
Manifest next update: Sat 18 Apr 2026 04:00:41 +0000
Files and hashes: 1: NnLh8TC21_I7aIxYqBVOxMDsYn8.roa (hash: abZc4byKeRvjtv7jM3QRQhlxOH/1CVxvgCdUA7yEv1Y=)
2: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl (hash: p4fC+wgyuahmxUo7YdckW5Tpt76cVaW9EEn4Sms1EyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:1c:03:01:2c:c5:bc:af:5d:86:0a:71:7e:4d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Validity
Not Before: Apr 17 04:00:41 2026 GMT
Not After : Apr 18 04:00:41 2026 GMT
Subject: CN=267d260617ebffbd1e336b9bc8b22b0c229c0811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:51:bf:fd:b8:38:3a:73:14:9e:e3:9a:73:
a3:af:be:24:04:02:55:09:72:d9:25:bc:23:89:68:
99:88:3b:eb:28:f6:dd:81:41:ff:c9:43:71:97:c5:
ab:2e:99:79:c8:8e:f0:49:4a:9c:55:e9:41:5c:57:
df:9f:13:95:aa:70:b2:75:ea:d2:ea:a9:a3:0d:e9:
c9:1d:a0:27:09:96:fc:5c:de:a5:87:6d:f3:36:20:
8c:e6:33:ab:8d:d8:ab:ab:ba:74:0e:04:52:05:0a:
2c:8f:fc:02:0f:60:f9:f1:25:46:e3:44:49:b1:e8:
f5:b1:b9:7e:19:51:47:6f:a6:fe:79:69:ad:09:ba:
7f:9e:f8:82:e8:4c:2e:32:a3:92:86:cf:3b:15:9d:
fe:cf:69:08:5a:94:e9:a8:ab:e0:b9:55:38:47:91:
5c:2e:cc:4e:6b:de:a9:d1:58:2c:e4:a5:83:c7:9e:
79:4f:6c:4a:d3:f0:de:7e:16:96:25:10:a2:b2:fd:
95:aa:8d:66:0c:31:35:ed:99:3a:f9:c5:f0:70:7f:
05:f2:1f:f7:31:de:6b:10:db:a7:ec:bc:3c:35:89:
cb:42:ca:95:bf:db:cd:0b:9f:12:8b:39:d3:ea:e2:
a5:c0:67:d3:ab:4a:f2:88:94:80:47:02:42:20:3a:
23:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7D:26:06:17:EB:FF:BD:1E:33:6B:9B:C8:B2:2B:0C:22:9C:08:11
X509v3 Authority Key Identifier:
keyid:53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ed:82:8d:b0:89:5d:a3:08:d4:07:d6:15:9b:5f:a3:d5:b7:
70:26:7f:09:1c:de:cc:b6:02:be:df:1c:48:0b:c6:15:52:c8:
e5:38:cc:6a:1a:81:e6:d2:ab:05:87:d9:94:5e:7b:78:70:1c:
82:80:19:f6:72:28:3f:be:73:19:5b:1c:2d:44:6a:6e:d4:c6:
ae:f4:7e:c4:0d:df:8b:97:d0:51:5e:9f:ac:a1:67:77:4d:fe:
5e:f9:84:1e:c9:5c:70:ba:14:92:4a:71:ca:6a:61:81:d0:82:
fe:4d:1b:2b:f2:7c:07:39:d6:d9:7f:fc:8e:64:a1:7b:3e:3e:
35:35:be:65:87:33:1e:f9:9a:e3:ad:7f:9a:8f:a8:8c:6a:3f:
42:29:8a:6d:2f:31:40:c2:cc:5d:21:c9:f7:49:83:71:bc:eb:
47:f3:35:a1:79:35:5e:a3:78:63:e8:83:0a:d8:7f:7d:3c:b0:
3e:aa:a5:1a:9f:8b:03:2c:b9:3a:c1:f1:56:d5:8c:76:32:e7:
53:aa:d5:bb:fb:97:61:9d:f5:34:02:67:0c:0b:64:db:2c:37:
7d:15:da:8f:47:d8:c1:0e:c0:80:01:71:07:70:b8:85:c5:11:
d2:be:7f:03:19:78:aa:88:69:0d:c2:96:25:a1:b2:01:9f:99:
e6:83:49:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:21:26 2026 by rpki-client