Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
File: U0Z21mkyx3oldhE2rJnrm3TYAaY.mft (raw, json)
Hash identifier: 26YjSQVbQHs5C9xDtd7SYuLMJV8FbtaqKQqr9X221qQ=
Subject key identifier: B2:4F:50:DE:DB:05:7F:56:70:7C:D7:AF:4A:FA:FC:C9:C8:6E:43:CB
Authority key identifier: 53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6
Certificate issuer: /CN=534676d66932c77a25761136ac99eb9b74d801a6
Certificate serial: 019CAAFD3215E4587FF17D366B557A2ADEFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
Manifest number: 0517
Signing time: Sun 01 Mar 2026 20:00:46 +0000
Manifest this update: Sun 01 Mar 2026 20:00:46 +0000
Manifest next update: Mon 02 Mar 2026 20:00:46 +0000
Files and hashes: 1: U0Z21mkyx3oldhE2rJnrm3TYAaY.crl (hash: kX2hVoWY/BiH5ShLW++LfuT/6blWMTCcY5IseurCpJ4=)
2: aLUgnnQfJFpMYdLs4kwtonmb-hA.roa (hash: GymUmYXXa2s1YAQ4JdjPRXC1fKxQsyfynIWTDZIu0M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:32:15:e4:58:7f:f1:7d:36:6b:55:7a:2a:de:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534676d66932c77a25761136ac99eb9b74d801a6
Validity
Not Before: Mar 1 20:00:46 2026 GMT
Not After : Mar 2 20:00:46 2026 GMT
Subject: CN=b24f50dedb057f56707cd7af4afafcc9c86e43cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:6f:f9:5a:d1:07:f2:cf:20:4c:a6:67:1e:
35:7d:a3:e1:1e:a0:fe:85:54:90:ae:0d:44:1e:5a:
a9:d7:31:79:a9:28:6b:6e:97:bc:6c:f3:d5:24:44:
16:80:94:c6:45:e7:42:10:a1:4f:8f:6a:b2:01:7b:
65:57:85:85:0f:57:cf:16:6d:25:01:2c:12:95:30:
52:c1:5c:0b:95:6e:5b:4d:50:3c:18:c2:fb:ff:ba:
88:02:0d:60:be:6f:21:a4:67:94:d7:1a:d5:c6:06:
2f:9c:d1:79:14:1d:78:c5:ed:9d:d8:40:a2:91:cd:
bd:75:84:8a:6d:5c:0a:a5:2a:cf:f8:4d:35:f8:cb:
a2:59:10:47:d6:d6:62:98:0f:17:a4:0f:ec:63:03:
02:2c:4c:49:c6:67:b1:6f:d8:f8:72:2e:ad:e8:b9:
c4:81:10:62:f1:3e:ff:2c:98:e9:4a:2a:00:d2:84:
7f:65:14:01:24:11:ea:61:d0:a1:da:f1:6a:9d:54:
bc:aa:ed:48:9e:c2:3e:8f:63:de:99:f3:9d:ca:75:
74:8d:9a:2c:9b:81:ff:10:8a:41:b3:2f:3e:30:7b:
60:84:39:bd:e7:65:d6:5f:26:0c:f8:cd:aa:51:75:
38:90:af:13:0f:18:24:b5:ee:f4:1c:70:bd:63:b6:
e7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4F:50:DE:DB:05:7F:56:70:7C:D7:AF:4A:FA:FC:C9:C8:6E:43:CB
X509v3 Authority Key Identifier:
keyid:53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f0:4d:23:c2:ba:de:cc:28:b2:56:44:af:8a:23:a8:58:7f:
15:28:17:4f:3b:1f:57:90:92:6f:35:50:cb:84:03:27:b4:cf:
c8:9c:6e:ab:0c:52:51:62:76:64:f7:1b:df:4f:68:bf:0c:9f:
2d:58:a5:7c:ed:92:b8:c9:97:6d:4b:a7:17:ae:0c:34:10:d9:
d6:05:62:87:8c:bc:c3:ba:d2:eb:08:d1:a8:da:9b:46:9a:3d:
67:b3:91:71:fb:3c:59:9c:60:03:33:25:9c:f1:54:48:09:de:
20:4e:df:92:c3:a1:e2:e8:be:c0:ed:f0:56:78:c7:f5:92:ef:
aa:64:a0:f0:e5:ef:ba:a9:3f:62:c5:1f:f9:d6:e5:85:a0:c5:
0c:5b:a7:38:d5:d5:5e:25:3a:8a:79:09:85:13:0f:ef:43:45:
95:59:4b:a4:ac:a8:e9:b2:9c:ec:2c:0c:c7:3c:5d:4c:8d:98:
74:ce:e4:6b:dd:7c:40:81:d4:f9:da:73:99:04:7a:1f:38:63:
63:10:3e:5d:5d:2d:06:8f:e9:20:1e:72:d4:20:61:4e:d8:97:
52:30:8e:10:22:70:92:5f:0d:f7:20:4c:93:cd:49:c7:e3:4f:
7d:c2:82:0c:73:0d:57:d7:76:03:a0:fc:91:b1:91:99:2b:49:
9d:25:f4:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/TIV5Fh/8X02a1V6Kt76MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNDY3NmQ2NjkzMmM3N2EyNTc2MTEzNmFjOTllYjliNzRk
ODAxYTYwHhcNMjYwMzAxMjAwMDQ2WhcNMjYwMzAyMjAwMDQ2WjAzMTEwLwYDVQQD
EyhiMjRmNTBkZWRiMDU3ZjU2NzA3Y2Q3YWY0YWZhZmNjOWM4NmU0M2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4xv+VrRB/LPIEymZx41faPhHqD+
hVSQrg1EHlqp1zF5qShrbpe8bPPVJEQWgJTGRedCEKFPj2qyAXtlV4WFD1fPFm0l
ASwSlTBSwVwLlW5bTVA8GML7/7qIAg1gvm8hpGeU1xrVxgYvnNF5FB14xe2d2ECi
kc29dYSKbVwKpSrP+E01+MuiWRBH1tZimA8XpA/sYwMCLExJxmexb9j4ci6t6LnE
gRBi8T7/LJjpSioA0oR/ZRQBJBHqYdCh2vFqnVS8qu1InsI+j2PemfOdynV0jZos
m4H/EIpBsy8+MHtghDm952XWXyYM+M2qUXU4kK8TDxgkte70HHC9Y7bnfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJPUN7bBX9WcHzXr0r6/MnIbkPLMB8GA1UdIwQY
MBaAFFNGdtZpMsd6JXYRNqyZ65t02AGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTBaMjFta3l4M29sZGhFMnJKbnJtM1RZQWFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8wNGU2NGItOTI0Yy00OGEwLTg5YTQt
YTAwOTQ0ZmQ3ZDlkLzEvVTBaMjFta3l4M29sZGhFMnJKbnJtM1RZQWFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8wNGU2NGItOTI0Yy00OGEwLTg5YTQtYTAwOTQ0ZmQ3ZDlk
LzEvVTBaMjFta3l4M29sZGhFMnJKbnJtM1RZQWFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfBNI8K6
3swoslZEr4ojqFh/FSgXTzsfV5CSbzVQy4QDJ7TPyJxuqwxSUWJ2ZPcb309ovwyf
LVilfO2SuMmXbUunF64MNBDZ1gVih4y8w7rS6wjRqNqbRpo9Z7ORcfs8WZxgAzMl
nPFUSAneIE7fksOh4ui+wO3wVnjH9ZLvqmSg8OXvuqk/YsUf+dblhaDFDFunONXV
XiU6inkJhRMP70NFlVlLpKyo6bKc7CwMxzxdTI2YdM7ka918QIHU+dpzmQR6Hzhj
YxA+XV0tBo/pIB5y1CBhTtiXUjCOECJwkl8N9yBMk81Jx+NPfcKCDHMNV9d2A6D8
kbGRmStJnSX04A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:07 2026 by rpki-client