Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft
File: U3h815RuENiGRqx53lfMbsWeQTI.mft (raw, json)
Hash identifier: I1885vMej5OckYGunenLH71jDgOZ95ndwN0Iaysb/o4=
Subject key identifier: D3:ED:21:A0:4E:68:7C:25:91:B8:27:C2:EE:63:40:71:9D:A2:22:26
Authority key identifier: 53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32
Certificate issuer: /CN=53787cd7946e10d88646ac79de57cc6ec59e4132
Certificate serial: 019D9B50E2C40ACE99FEAFB4CB7112F6C0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft
Manifest number: 1571
Signing time: Fri 17 Apr 2026 12:01:02 +0000
Manifest this update: Fri 17 Apr 2026 12:01:02 +0000
Manifest next update: Sat 18 Apr 2026 12:01:02 +0000
Files and hashes: 1: BTQqaN3zxchRx-EpD2H2MNJ-ft4.roa (hash: XV4ayQSd0b2rkVnEHjcvBGIgn52FBAArQFJOmYQB3pA=)
2: QtW4Z9V0VWOm_3B5SrSvvQ3anTE.roa (hash: DHlUdVZGbEoHW4Ps1BkaOOFImnLamhxBGEFyeIi9s+Q=)
3: U3h815RuENiGRqx53lfMbsWeQTI.crl (hash: qnXGLacXxcfbJrInmmzv3G97l7fumS4S64RafTKKSe0=)
4: xAgD6SynRwV_Yye8rFHO4JCRRio.roa (hash: l2HE8jagwao4Kb86kIkCwZOHjaiAFH+AljSJnuRLiF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:e2:c4:0a:ce:99:fe:af:b4:cb:71:12:f6:c0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53787cd7946e10d88646ac79de57cc6ec59e4132
Validity
Not Before: Apr 17 12:01:02 2026 GMT
Not After : Apr 18 12:01:02 2026 GMT
Subject: CN=d3ed21a04e687c2591b827c2ee6340719da22226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:71:d3:8b:4d:9c:72:9b:10:99:89:3b:87:99:
69:a9:58:ec:3a:7d:cf:67:81:2e:cc:8c:63:dd:48:
29:a3:c3:51:59:18:53:53:ab:2a:91:2b:0b:9e:0f:
06:f5:57:2a:1d:84:65:a9:a2:64:c5:10:7b:3c:f9:
6e:ee:38:cb:89:2b:70:4d:4c:f6:0a:43:76:5e:cd:
8b:8f:07:78:7f:cb:07:dc:74:e2:18:12:3e:c1:d9:
52:f4:ae:72:8f:85:da:f2:08:8e:10:b5:ab:73:a2:
c0:f4:fb:71:10:5d:a1:58:e8:bd:15:c8:6f:d6:94:
ac:c7:9c:20:55:97:1b:99:13:9a:ab:73:f3:65:cc:
24:ac:e2:52:9d:75:32:82:ee:c7:b5:b1:4e:bf:d6:
99:be:fd:f9:b3:83:fa:0c:0d:d7:99:45:73:f0:dd:
99:a2:80:c9:a5:a0:1b:fe:6a:9b:f8:3f:1b:4d:51:
6e:26:13:83:64:16:c1:c5:70:b3:e7:f7:72:02:52:
c2:b5:3c:c6:93:e2:87:7d:1f:2c:10:f8:0f:6c:fe:
2f:86:96:1e:59:0c:29:5c:fb:fc:0a:c0:ca:4a:fe:
ed:bd:34:06:91:e1:18:b8:e1:4b:08:7d:7d:69:07:
e1:34:2c:0d:10:a2:f9:cf:78:aa:e1:c1:0c:00:05:
22:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:ED:21:A0:4E:68:7C:25:91:B8:27:C2:EE:63:40:71:9D:A2:22:26
X509v3 Authority Key Identifier:
keyid:53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:68:4f:ea:83:2a:51:e7:7e:96:25:49:1b:b0:7b:20:3c:9b:
fa:81:be:b1:7c:70:03:fd:c2:b8:74:4d:c8:78:f5:0b:c2:0b:
8a:a2:70:73:c4:13:06:68:b0:d7:6c:65:63:0f:ba:5a:98:c7:
1c:63:d0:de:94:da:fb:dc:aa:5b:98:7b:dd:c0:09:b6:ba:87:
34:15:87:b5:d0:e4:9a:08:0c:97:67:ec:87:2b:7c:b4:96:b8:
c7:b8:57:2d:6b:f3:65:6c:8b:a7:22:13:cc:c9:a6:3c:ae:02:
6c:21:16:c3:9a:e3:6f:75:b8:17:f5:7a:61:a5:6b:2b:eb:79:
25:08:df:54:ff:cf:58:79:8e:06:af:ab:1c:9e:72:4c:b0:88:
5a:71:4a:74:4e:0e:76:7f:c7:35:4a:5b:23:ac:e3:d0:22:ba:
91:a4:6a:3a:fa:f9:97:f0:6d:39:a5:9b:7d:0c:ce:25:5b:22:
1f:34:b6:8c:11:d6:9b:65:f1:de:56:97:04:ce:8f:52:c0:73:
82:1e:aa:df:2b:05:d2:43:72:9e:b1:41:ef:58:81:58:5d:2e:
f9:8d:e6:23:ee:5d:ff:e8:b7:71:58:76:17:2f:ba:72:f7:52:
ea:59:2a:d6:08:8e:05:aa:02:0d:38:a3:56:76:53:c3:d2:b7:
60:a9:d9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:57:53 2026 by rpki-client