Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
File: U8dzEuDSzshFoEYThF-KG-Jjw5k.mft (raw, json)
Hash identifier: 0tA8FkZEyAU4grzNZuUEAUYOjBL0k1TTO05t4Id+vfs=
Subject key identifier: 72:BF:D8:0F:68:84:CB:8A:7D:D4:CB:56:C0:30:C4:64:CD:4B:2C:A3
Authority key identifier: 53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
Certificate issuer: /CN=53c77312e0d2cec845a04613845f8a1be263c399
Certificate serial: 019CAB6B2D0046988DAB9149D6E45C4D5D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 22:00:53 +0000
Manifest this update: Sun 01 Mar 2026 22:00:53 +0000
Manifest next update: Mon 02 Mar 2026 22:00:53 +0000
Files and hashes: 1: LMMdVEDfefO9DMTodcqsmRU-LHM.roa (hash: hRe5cV7EwZ0Fcxo17tUpXTTj4tA391QQdgKYjlbkJTk=)
2: U8dzEuDSzshFoEYThF-KG-Jjw5k.crl (hash: OfrSYcjmnsiaZVrSDXM1HjTouVEk7Czc1DLvULm4Flw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:2d:00:46:98:8d:ab:91:49:d6:e4:5c:4d:5d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c77312e0d2cec845a04613845f8a1be263c399
Validity
Not Before: Mar 1 22:00:53 2026 GMT
Not After : Mar 2 22:00:53 2026 GMT
Subject: CN=72bfd80f6884cb8a7dd4cb56c030c464cd4b2ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:58:e1:de:00:25:80:21:eb:5b:15:13:29:
37:66:ce:92:28:82:26:75:59:04:80:45:ce:9c:78:
8e:2c:ea:46:77:af:9c:82:46:ab:d1:54:65:cb:42:
c7:dc:2e:b0:f7:b4:dc:21:da:14:18:f4:5c:fc:15:
ec:29:4a:95:a8:c2:47:8f:a3:7a:51:97:a8:b7:06:
c3:20:6a:d2:99:ac:e4:bc:9a:01:9e:8a:a6:97:23:
e0:73:6c:e9:ce:25:ed:dc:90:78:07:b7:41:bb:40:
73:22:99:8c:ba:72:f4:1e:6c:04:10:39:43:c9:18:
c9:d2:43:6a:1c:2a:cf:7d:34:ba:c5:b5:db:49:69:
2f:a1:ed:9c:95:60:e7:ce:41:aa:28:c1:19:39:d6:
53:89:dd:2a:8d:7f:05:03:a9:04:97:d9:b3:a1:48:
9e:e4:78:ac:79:0e:1b:5b:d3:c3:36:89:6d:d6:11:
73:9d:fd:e5:8d:6d:41:95:5d:be:28:4e:32:c7:b4:
f4:98:53:04:bf:89:da:f0:92:82:2f:21:82:08:12:
d8:51:04:93:39:b4:7b:a8:7d:5f:5d:ed:a3:92:fc:
09:25:aa:c5:e0:e4:00:de:7b:3f:d8:88:8d:92:c6:
b1:22:c6:16:ea:35:eb:77:98:9e:44:61:ab:14:11:
1e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BF:D8:0F:68:84:CB:8A:7D:D4:CB:56:C0:30:C4:64:CD:4B:2C:A3
X509v3 Authority Key Identifier:
keyid:53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:5d:66:9c:0a:af:ae:8a:46:df:b2:db:54:3d:f4:1d:59:cc:
43:83:28:ad:b0:d3:bf:6a:6f:5f:51:6a:3a:b5:61:1e:71:be:
a2:27:ec:38:9b:61:36:4b:1d:26:c0:c7:34:4f:28:5d:ad:53:
09:3b:aa:43:4b:8b:05:12:c4:ad:7b:3e:43:b1:51:bd:36:b7:
9e:8b:7b:df:0a:4d:db:b1:e1:cb:d4:36:2e:fb:72:77:c5:6b:
ed:22:3a:23:20:65:5a:fc:1c:ec:40:3a:c8:d7:50:db:5a:42:
ba:d4:49:4e:a0:7d:d7:be:de:4a:7c:3b:9b:7f:a0:0b:20:24:
81:d8:fd:e0:d7:ea:d9:d8:c4:3b:df:84:52:6a:81:2d:52:4d:
58:ac:82:8b:a5:ca:97:16:19:62:6f:5b:5a:89:15:b3:21:88:
3d:94:95:35:1c:06:5e:e8:b6:7b:42:a6:c0:7b:82:44:28:1a:
a4:2c:ed:3f:b9:58:26:6a:38:7c:6b:d6:5f:dc:1a:74:a5:d7:
9d:f9:3f:90:fd:df:34:bc:44:ae:8b:63:d9:bf:a4:04:5e:cc:
f4:26:cf:ee:4a:44:59:81:5b:45:10:73:a5:65:b3:8e:40:83:
c6:b9:53:73:4c:b3:cb:6b:60:86:8b:ed:99:cc:5a:8e:c0:16:
67:2b:60:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:55 2026 by rpki-client