Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
File: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft (raw, json)
Hash identifier: 2dxlCfbywUvS1YPUy/Uc4GlKSzgYnFPh2+pGurm5nos=
Subject key identifier: 29:05:7F:37:00:FD:6F:1F:5B:70:F1:59:01:B7:65:72:52:99:BC:08
Authority key identifier: 53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
Certificate issuer: /CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Certificate serial: 019D97E17927D7551E5BBF08E54CD796854F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 20:00:29 +0000
Manifest this update: Thu 16 Apr 2026 20:00:29 +0000
Manifest next update: Fri 17 Apr 2026 20:00:29 +0000
Files and hashes: 1: IhNm1XAjTUBP_UYjIGIEELcWiWc.roa (hash: TcGN7ZBSR/KDo/mk7XwRToavEZ6usSTJYaYD26UCIPE=)
2: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl (hash: Vy0iUxzKDV6NDgXMf7xBKSA6FR0YbeVx/8P/OEnrSLs=)
3: mjm_jL6FnCZyLJAmMfTaUZL_DF4.roa (hash: 7TBTThhJXxwuqJMKV3smo+3dSUEAzVVTW36ntOu96Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:79:27:d7:55:1e:5b:bf:08:e5:4c:d7:96:85:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Validity
Not Before: Apr 16 20:00:29 2026 GMT
Not After : Apr 17 20:00:29 2026 GMT
Subject: CN=29057f3700fd6f1f5b70f15901b765725299bc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:25:c6:12:25:28:b9:2f:ec:80:6c:21:ee:65:
ec:62:44:27:10:72:2e:76:af:05:47:88:7c:46:d7:
99:fc:d9:d9:1e:33:6b:4e:3c:57:c8:94:4d:ed:bd:
43:f0:c9:2a:33:ef:57:b5:c5:48:bb:ed:64:b4:3a:
02:95:84:7b:04:0c:59:72:95:9f:93:ff:0d:6c:2b:
5d:c8:a6:f9:3c:2d:d5:83:eb:1f:d4:07:29:e8:e0:
96:5a:1f:f2:3a:82:42:b2:2d:3b:ed:d1:0a:6b:b2:
fb:9e:06:9b:a9:49:f0:36:30:cd:f2:c9:62:98:11:
78:07:47:1d:b7:15:6f:58:93:81:6a:4e:45:12:b4:
71:0b:2f:12:19:78:d3:90:ec:da:c8:c5:3e:b2:43:
8e:83:3f:4c:e3:3c:7d:c7:68:30:2b:88:f8:a9:d1:
aa:65:b8:03:3f:86:79:8e:20:95:a8:9a:db:f8:c3:
95:06:de:a1:c2:2b:6f:4c:66:28:6d:d5:f3:b5:39:
d3:82:57:41:18:27:db:c7:57:71:cd:2e:ec:94:31:
a3:37:81:c8:9f:18:8b:66:46:66:ec:c5:d0:0f:c2:
9f:60:06:4b:fe:86:51:82:44:1e:0d:45:3d:83:4e:
b7:de:65:04:2d:47:62:2d:40:39:1b:51:a1:1e:ba:
11:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:05:7F:37:00:FD:6F:1F:5B:70:F1:59:01:B7:65:72:52:99:BC:08
X509v3 Authority Key Identifier:
keyid:53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:3a:ea:51:46:0c:dd:2c:22:38:6f:83:93:f4:c2:da:8f:f0:
9f:a8:5a:ab:cc:a3:43:e3:df:cd:65:19:39:b2:20:53:7a:62:
9a:57:63:0c:01:79:0b:a2:24:e0:05:89:93:50:9a:78:52:26:
f9:f1:b5:fb:35:7a:eb:ab:5c:f1:d9:42:46:7e:41:64:a4:ef:
05:d6:6a:31:51:4e:96:1d:6e:e5:cd:f7:8c:97:d3:86:18:24:
a6:d6:ea:74:b2:73:39:82:71:e1:0f:37:9a:2e:d1:c0:68:59:
55:5b:71:44:15:1c:40:e2:4e:b9:af:c6:9d:f6:2f:84:90:93:
b8:76:55:82:e6:41:58:d3:cb:9d:d1:78:a7:f6:d7:18:70:df:
13:e9:8f:6f:50:a1:8a:d9:6d:ba:d6:d4:07:62:48:ef:4a:ba:
29:12:42:78:08:47:99:90:af:6b:22:7b:90:84:9a:a4:1c:71:
01:90:7c:e0:a9:9d:f2:e1:be:37:0b:46:5a:64:32:b6:0c:38:
2d:97:e8:d8:27:1e:b0:cb:03:22:20:9c:5e:d5:27:bc:7d:5f:
86:62:cb:f7:53:2c:8d:c8:46:68:34:c3:5e:04:2e:70:62:2c:
a0:88:5e:f5:87:6b:82:f8:c4:1f:22:72:8c:36:a9:07:3c:b3:
ee:c6:48:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4Xkn11UeW78I5UzXloVPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYjFhOGViYzNlY2Y3ZjVkYjdmNmNhY2QwMGU5MjBhZjg1
YWU4YjQwHhcNMjYwNDE2MjAwMDI5WhcNMjYwNDE3MjAwMDI5WjAzMTEwLwYDVQQD
EygyOTA1N2YzNzAwZmQ2ZjFmNWI3MGYxNTkwMWI3NjU3MjUyOTliYzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSXGEiUouS/sgGwh7mXsYkQnEHIu
dq8FR4h8RteZ/NnZHjNrTjxXyJRN7b1D8MkqM+9XtcVIu+1ktDoClYR7BAxZcpWf
k/8NbCtdyKb5PC3Vg+sf1Acp6OCWWh/yOoJCsi077dEKa7L7ngabqUnwNjDN8sli
mBF4B0cdtxVvWJOBak5FErRxCy8SGXjTkOzayMU+skOOgz9M4zx9x2gwK4j4qdGq
ZbgDP4Z5jiCVqJrb+MOVBt6hwitvTGYobdXztTnTgldBGCfbx1dxzS7slDGjN4HI
nxiLZkZm7MXQD8KfYAZL/oZRgkQeDUU9g0633mUELUdiLUA5G1GhHroRMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkFfzcA/W8fW3DxWQG3ZXJSmbwIMB8GA1UdIwQY
MBaAFFOxqOvD7Pf1239srNAOkgr4Wui0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTdHbzY4UHM5X1hiZjJ5czBBNlNDdmhhNkxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wNzA2MzAtNTIzNC00OWM0LTg0ZmUt
MTViZGE2Yjg2N2NiLzEvVTdHbzY4UHM5X1hiZjJ5czBBNlNDdmhhNkxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wNzA2MzAtNTIzNC00OWM0LTg0ZmUtMTViZGE2Yjg2N2Ni
LzEvVTdHbzY4UHM5X1hiZjJ5czBBNlNDdmhhNkxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwTrqUUYM
3SwiOG+Dk/TC2o/wn6haq8yjQ+PfzWUZObIgU3pimldjDAF5C6Ik4AWJk1CaeFIm
+fG1+zV666tc8dlCRn5BZKTvBdZqMVFOlh1u5c33jJfThhgkptbqdLJzOYJx4Q83
mi7RwGhZVVtxRBUcQOJOua/GnfYvhJCTuHZVguZBWNPLndF4p/bXGHDfE+mPb1Ch
itltutbUB2JI70q6KRJCeAhHmZCvayJ7kISapBxxAZB84Kmd8uG+NwtGWmQytgw4
LZfo2CcesMsDIiCcXtUnvH1fhmLL91MsjchGaDTDXgQucGIsoIhe9YdrgvjEHyJy
jDapBzyz7sZI3A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:11 2026 by rpki-client