
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
File: U6hLUj3-Mriom5zdMKn4cRAH_bk.mft (raw, json)
Hash identifier: a22Nbm6rZmHGPEfW0zvyQ3vUt1zZm9ZuctqJChlYyt4=
Subject key identifier: 76:22:82:9E:F6:69:F5:C0:7C:E1:1D:68:DF:43:F0:CA:F7:67:37:75
Authority key identifier: 53:A8:4B:52:3D:FE:32:B8:A8:9B:9C:DD:30:A9:F8:71:10:07:FD:B9
Certificate issuer: /CN=53a84b523dfe32b8a89b9cdd30a9f8711007fdb9
Certificate serial: 019D99622E7657C16C6B1B1F4E9EB3C4B104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
Manifest number: 0F98
Signing time: Fri 17 Apr 2026 03:00:41 +0000
Manifest this update: Fri 17 Apr 2026 03:00:41 +0000
Manifest next update: Sat 18 Apr 2026 03:00:41 +0000
Files and hashes: 1: U6hLUj3-Mriom5zdMKn4cRAH_bk.crl (hash: z6RbjzuRA8bm627vBJsceY8mmx75VYulf2snYLyjLQc=)
2: e7AHTN6GMHGk_8dAcf_gVZnvxVI.roa (hash: IevTKfUQJkqwDYYU6PQJwFiwDh/wjsGFxyO8+JdLEM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:2e:76:57:c1:6c:6b:1b:1f:4e:9e:b3:c4:b1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a84b523dfe32b8a89b9cdd30a9f8711007fdb9
Validity
Not Before: Apr 17 03:00:41 2026 GMT
Not After : Apr 18 03:00:41 2026 GMT
Subject: CN=7622829ef669f5c07ce11d68df43f0caf7673775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:39:55:7e:f7:2a:52:82:0b:5c:0e:a2:d6:17:
bd:a3:04:1d:98:aa:5c:e5:9c:0c:c4:20:93:16:ee:
bd:72:52:42:ca:7e:62:35:e9:12:90:3f:1d:b7:4d:
fb:42:d0:fc:25:88:9e:8d:b5:03:06:a6:23:58:6c:
85:44:16:ab:45:d1:a1:b9:27:88:cf:f3:c2:f9:ec:
42:e8:20:85:94:19:4f:fe:49:c8:74:d7:83:df:77:
63:99:78:ee:d0:a5:63:2f:31:b0:97:20:1e:44:68:
f8:99:ec:bf:76:ce:cf:d0:af:65:19:8f:16:2c:65:
bd:7a:ee:62:e5:01:f3:cd:b9:78:3d:8e:5c:1f:36:
92:84:26:cb:f5:80:61:09:98:e6:53:e6:77:98:8d:
06:ca:98:aa:4c:92:f3:3f:6a:b4:7d:04:29:8f:30:
80:ee:d9:4b:e3:ce:45:1f:f7:74:78:9c:f3:8e:49:
33:cf:a1:21:83:cd:45:93:f6:ed:b1:82:11:6a:39:
21:a0:c6:52:6a:03:8b:19:39:e0:f2:b5:64:9e:c5:
62:95:5d:4e:d7:1c:bf:80:59:8e:d5:1e:92:9d:cb:
c8:b6:82:f2:b0:35:ac:b2:63:06:d4:ef:7b:f7:44:
c3:0a:fe:b4:85:dd:5d:b1:22:cf:b1:d1:d2:4f:20:
25:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:22:82:9E:F6:69:F5:C0:7C:E1:1D:68:DF:43:F0:CA:F7:67:37:75
X509v3 Authority Key Identifier:
keyid:53:A8:4B:52:3D:FE:32:B8:A8:9B:9C:DD:30:A9:F8:71:10:07:FD:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4e:0f:a5:65:42:e9:20:e9:b6:ae:6a:e8:4e:2e:98:2d:a5:
b3:38:d2:e1:a4:1d:34:7d:67:9f:0a:f1:0e:a8:9b:ad:02:2a:
ad:23:1a:a8:64:65:5d:54:cb:9e:26:29:b3:cd:4d:2f:de:52:
21:1d:01:05:90:76:68:91:f1:08:8e:3c:54:c7:8e:71:74:ca:
df:31:0e:64:03:d1:f6:4e:68:87:7f:8d:92:64:1d:1c:2b:09:
13:10:94:80:2e:f4:d6:2e:64:1e:ba:6f:71:72:0c:ee:9f:69:
78:a2:fe:36:25:56:e1:cc:db:87:e0:dc:fa:90:f7:25:75:02:
ce:56:b4:eb:cd:6d:5d:eb:20:9d:f3:cf:75:9f:ed:7c:6c:7b:
93:04:9d:4c:cb:6d:6e:d1:6a:91:40:17:82:2b:3a:f9:46:96:
76:57:69:c9:6e:f9:80:a3:89:6d:29:13:9b:28:60:d0:4c:be:
f3:a9:83:64:f1:4b:fe:42:7e:31:36:e9:9d:24:4f:8e:e3:fb:
ca:13:dd:62:4c:ca:fd:41:67:25:b0:de:4f:36:31:92:17:4c:
98:0b:86:27:ba:20:34:8c:e2:a7:cd:bc:41:46:d6:58:a1:98:
14:ac:e5:8d:15:39:96:33:e0:67:97:c3:05:c0:2a:20:ca:db:
7e:cb:3f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:18 2026 by rpki-client