Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
File: U4DNitL4ThTptbZCOJN7bUIH4iE.mft (raw, json)
Hash identifier: 98Z/mB3rb5hKCoW5QZxIuISfp32GL8dd4U5p00fgAm4=
Subject key identifier: 00:B1:C1:F7:F9:45:E0:AD:44:3B:A0:22:2A:F7:67:8F:F2:00:C3:78
Authority key identifier: 53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
Certificate issuer: /CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Certificate serial: 019CABA1FC8C0123472E0DD6C2EEF4777FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
Manifest number: 09DB
Signing time: Sun 01 Mar 2026 23:00:45 +0000
Manifest this update: Sun 01 Mar 2026 23:00:45 +0000
Manifest next update: Mon 02 Mar 2026 23:00:45 +0000
Files and hashes: 1: 3gqZ21ZiXWY8Si7snLEpMyMD74g.roa (hash: X/t/+w5YUcvfs+3nGPGjtJ/Fhg4+BcTTk+/zNwVCFHo=)
2: U4DNitL4ThTptbZCOJN7bUIH4iE.crl (hash: O3/9mjKYFjwp53xFme1uTxE6ioWO54yWTXotRUykx7k=)
3: wlQ0t9w-oLkcGuhWCMs9Bpc2jac.roa (hash: 3f94DHQ4ocfCNVkT9++XQcXx0yPrdObfv5lQ1Z9Etr8=)
4: x0JWlbPq7LDeu4Dm0_N7oeK38ow.roa (hash: tbOy3beQewSvz0vDOcHNb1UEiU3Vzot4Nk2R+I8UvvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:fc:8c:01:23:47:2e:0d:d6:c2:ee:f4:77:7f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Validity
Not Before: Mar 1 23:00:45 2026 GMT
Not After : Mar 2 23:00:45 2026 GMT
Subject: CN=00b1c1f7f945e0ad443ba0222af7678ff200c378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:1a:9f:0a:e5:89:c9:bc:b0:a0:94:23:d3:
f2:55:25:cf:7c:49:70:eb:34:80:26:81:90:e6:42:
73:4b:0d:56:36:8c:cc:f5:71:1a:50:b3:c1:54:66:
d4:f1:9f:4a:bb:0d:66:3d:d0:40:60:5b:06:01:e4:
4c:9a:63:aa:60:19:1c:cd:4b:45:7a:58:74:dd:f1:
03:e8:ff:9d:cf:67:a7:15:f6:af:ef:bd:66:d3:1d:
bb:79:4b:3c:5a:8c:af:c7:15:31:f2:1b:49:c2:d8:
a3:8e:fe:8c:df:ec:d7:e1:e9:fd:a7:96:ea:57:a7:
24:c2:82:cc:98:db:6e:b2:25:5c:77:a4:18:90:c4:
f4:e1:f2:f7:c8:c1:7b:fd:cb:c8:9a:53:57:37:ca:
bd:6f:79:1f:31:f7:34:2f:08:9d:58:cb:4a:e3:e4:
02:8d:f7:2b:e7:e3:79:e0:fe:12:8a:66:72:d6:2c:
73:3e:ff:09:2e:1c:01:e0:41:b5:ff:42:56:15:42:
6b:12:55:f7:ec:ba:6d:e1:76:d3:e0:52:a4:1d:5b:
48:9a:7f:fc:3e:c8:c0:5b:89:5a:1d:77:5e:1c:65:
74:af:c0:26:2c:04:bb:73:80:6f:49:51:46:9c:e1:
29:21:43:18:d5:e5:e8:1f:f8:1d:24:ae:df:a1:72:
f6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B1:C1:F7:F9:45:E0:AD:44:3B:A0:22:2A:F7:67:8F:F2:00:C3:78
X509v3 Authority Key Identifier:
keyid:53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:90:c4:e8:76:2c:d1:57:d8:9c:e7:70:e6:19:0f:e4:ce:a0:
2b:1b:39:0b:55:15:d6:69:5d:26:8b:26:5f:ae:f2:e3:8e:17:
ba:20:5e:63:73:b1:26:d8:c2:07:9e:86:8c:7b:43:12:68:ea:
fe:db:3d:42:e8:98:81:fa:0b:82:68:4a:db:da:b0:77:83:7f:
ee:a4:e2:b4:8c:85:85:ad:81:ac:ad:bc:0e:d6:64:fd:7c:ce:
cc:fd:e6:a9:83:89:1c:e1:9c:f5:d6:1e:37:79:f8:f0:ac:0d:
b7:2d:b0:c9:23:3e:5e:58:80:ee:b5:ab:e6:d6:ea:8d:5b:9b:
b0:e4:ea:1b:b6:65:e3:85:cf:9e:04:6e:1f:0e:28:cc:d4:50:
ed:16:2e:6f:94:c3:47:ef:2b:40:34:84:dc:38:4b:97:be:06:
7f:84:c2:87:c3:ea:29:72:71:89:bd:89:99:15:e4:65:19:29:
2b:c9:e2:fb:16:17:51:72:ed:a9:99:8b:2d:c5:9b:a3:57:4d:
df:11:80:ee:47:91:7a:34:14:f3:7b:59:02:0e:bd:4a:c1:8d:
00:e9:39:f8:e9:9f:ed:a9:bb:74:af:3c:24:e8:c7:96:e7:49:
eb:64:09:7a:25:15:fa:4b:66:35:31:aa:4e:aa:f1:da:7c:59:
12:d3:77:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:16 2026 by rpki-client