Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
File: U0OOy3Xh1es-gP26waaw-vg_c-E.mft (raw, json)
Hash identifier: dqfb4meXQFs1b/rQUaHMOZUIyNyKZA+qrp7MF6VA/9Q=
Subject key identifier: 75:0D:28:DD:FA:17:D6:2A:FC:1D:90:6D:BB:95:0B:F6:1D:B5:1B:78
Authority key identifier: 53:43:8E:CB:75:E1:D5:EB:3E:80:FD:BA:C1:A6:B0:FA:F8:3F:73:E1
Certificate issuer: /CN=53438ecb75e1d5eb3e80fdbac1a6b0faf83f73e1
Certificate serial: 019CADFE482CAC70BB5C5B75900155A385BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
Manifest number: 4C
Signing time: Mon 02 Mar 2026 10:00:48 +0000
Manifest this update: Mon 02 Mar 2026 10:00:48 +0000
Manifest next update: Tue 03 Mar 2026 10:00:48 +0000
Files and hashes: 1: U0OOy3Xh1es-gP26waaw-vg_c-E.crl (hash: m/tXmUWj1Am8FmRUkKWPKLE5MDnlM3ggbLuZdFzPEH0=)
2: WosD3hO75NeEA5i1pYu4jjBvKZk.roa (hash: OY0wCbzw4br81Lxlh7tGimlRcQLzd5IIOnNVOlypPYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:48:2c:ac:70:bb:5c:5b:75:90:01:55:a3:85:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53438ecb75e1d5eb3e80fdbac1a6b0faf83f73e1
Validity
Not Before: Mar 2 10:00:48 2026 GMT
Not After : Mar 3 10:00:48 2026 GMT
Subject: CN=750d28ddfa17d62afc1d906dbb950bf61db51b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:52:92:8c:84:33:1a:ce:2d:70:39:63:da:0c:
13:2c:a2:03:5c:f2:80:df:fb:26:98:00:ab:16:d4:
0a:a7:41:ad:da:0f:38:29:7b:6e:01:1f:e2:3b:48:
91:04:45:e4:1b:38:09:69:d4:8c:f6:de:28:17:20:
55:1a:bc:58:94:ba:f2:dc:45:22:2a:f6:75:71:bd:
19:e5:10:80:44:5a:94:34:00:66:9e:2d:4b:c6:71:
93:a7:c0:b6:99:2b:9e:7b:09:f2:26:d4:86:86:2e:
b1:80:34:57:06:4d:d6:8e:09:ac:cb:e6:b3:49:86:
aa:2d:8e:c0:73:23:2f:ba:45:31:0f:9e:ef:55:c9:
fa:8e:64:e9:de:00:a6:49:b3:e5:a3:62:73:db:93:
96:19:c0:e7:41:c7:cc:d9:76:3a:22:f0:a8:2b:ee:
3f:b9:ad:a7:ea:18:90:58:fd:69:f9:c9:a5:13:76:
39:db:79:f0:67:f4:78:db:9f:ad:a5:b1:76:05:7a:
92:2b:87:25:d6:13:c0:9a:f4:22:ee:ec:58:75:8c:
e5:29:cb:b6:06:e9:ff:d8:a0:f4:dd:40:49:24:cf:
9f:30:c4:1c:f2:bd:1e:78:3d:fd:e5:d5:7d:df:c8:
05:20:89:52:0e:72:9f:5e:1b:df:b9:a8:b8:e5:26:
ac:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0D:28:DD:FA:17:D6:2A:FC:1D:90:6D:BB:95:0B:F6:1D:B5:1B:78
X509v3 Authority Key Identifier:
keyid:53:43:8E:CB:75:E1:D5:EB:3E:80:FD:BA:C1:A6:B0:FA:F8:3F:73:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:74:77:f3:4f:10:0a:23:5c:f4:31:f0:d0:b9:28:7a:02:2d:
e5:13:44:81:47:be:68:23:8f:89:88:d6:fc:04:8b:c8:01:ce:
9c:af:7f:f8:51:76:99:83:d3:2c:86:e3:62:f4:6a:b3:da:0a:
6b:41:84:29:10:01:e2:8a:43:52:4b:7d:71:5d:16:51:f1:ca:
3c:a3:32:d7:8f:2f:6f:f3:fc:32:78:35:b6:24:ee:16:69:da:
51:37:f3:45:41:6c:cb:44:0f:25:d9:2f:70:d0:22:24:69:f2:
92:a5:5c:60:95:af:8f:28:d9:5b:b1:5d:17:fc:83:f8:b0:0f:
7d:96:48:a2:de:fb:f3:c7:5c:23:ab:0f:f7:24:79:4d:33:e9:
35:52:7f:e1:1b:50:c2:b5:40:7d:c0:94:12:7d:83:e6:fb:61:
ad:be:3a:6f:f5:21:5d:e2:4b:e4:cd:5e:00:f0:3c:8e:bd:03:
0e:66:88:ef:63:ec:1b:90:50:fc:6f:bb:ba:3a:89:f3:f5:1d:
a5:88:5b:98:3d:4b:a0:90:9a:0b:e8:14:0b:36:01:9a:c3:56:
ae:61:01:2f:7b:c2:b4:fb:b2:53:3c:f3:5e:85:b8:b4:0f:7e:
4a:c9:ed:73:d8:cc:92:1a:d1:b8:b3:7c:fd:81:cf:e1:75:1f:
db:48:c7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:30:09 2026 by rpki-client