Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
File: U4Vcjs6b1vjjlAICISzgmwX1-KA.mft (raw, json)
Hash identifier: Y606LSEtCceE7MhB01IMcmVsjX7uO/HBuhsJZm9b3sw=
Subject key identifier: 20:1F:EC:58:3D:94:9E:45:17:B2:E2:8A:5A:A9:D7:33:23:2A:63:84
Authority key identifier: 53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
Certificate issuer: /CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Certificate serial: 019CAD59ADDFB53B17DDE659731EFC02EE2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
Manifest number: 14DA
Signing time: Mon 02 Mar 2026 07:01:01 +0000
Manifest this update: Mon 02 Mar 2026 07:01:01 +0000
Manifest next update: Tue 03 Mar 2026 07:01:01 +0000
Files and hashes: 1: U4Vcjs6b1vjjlAICISzgmwX1-KA.crl (hash: thB250NvGKF/QWKEi4tPnw18pYBnFmTUDfSWGVlwU0Y=)
2: wOCmhg5ukUDjqYrrNe8HL0c6WHY.roa (hash: py0DTzjoQh1bUaOEwoDGjjlil3qVagDVLMDa9WBCMVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:ad:df:b5:3b:17:dd:e6:59:73:1e:fc:02:ee:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Validity
Not Before: Mar 2 07:01:01 2026 GMT
Not After : Mar 3 07:01:01 2026 GMT
Subject: CN=201fec583d949e4517b2e28a5aa9d733232a6384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:34:94:0f:29:1a:fc:b0:41:1f:5a:81:af:ff:
bc:7a:08:84:59:b8:67:72:5a:8e:cb:29:e1:4e:85:
d5:37:01:a6:3f:a7:92:c6:de:c6:a9:8d:e2:b0:b2:
f2:b4:99:8c:0d:d5:d4:55:8f:96:ed:f1:68:c9:91:
39:82:27:08:89:4e:25:b3:1f:2c:cc:42:a7:02:47:
17:38:8a:ae:35:14:bb:55:a9:21:f6:5d:64:4d:dd:
0d:92:9e:03:ce:05:f0:a1:96:37:71:79:bf:64:b7:
57:3e:eb:dd:08:28:b8:dd:cf:86:3b:6b:68:35:9c:
65:17:98:63:96:e4:db:4e:37:0a:92:44:b8:fa:b6:
d3:44:48:82:63:34:6a:77:bc:05:de:a4:80:4b:a4:
2a:e7:a7:1d:e4:d2:06:a9:4f:1c:01:e0:f7:72:22:
74:c9:6c:e2:eb:72:66:2c:8a:55:db:f8:5e:12:48:
32:86:db:ba:00:81:9b:38:d5:90:c5:37:5d:ec:13:
f5:7e:2c:f4:9c:be:f7:55:5e:68:77:16:46:54:59:
7c:8c:01:07:10:4c:8b:53:8f:0e:4d:6a:c0:ea:5b:
13:60:99:8a:c7:1c:8d:52:0d:05:ca:a3:73:c0:9e:
3c:1b:a9:96:fc:c9:87:3c:47:db:98:58:2a:7b:38:
f1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1F:EC:58:3D:94:9E:45:17:B2:E2:8A:5A:A9:D7:33:23:2A:63:84
X509v3 Authority Key Identifier:
keyid:53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:fd:4e:7b:27:f8:cc:e3:64:b1:4f:77:c3:db:4f:c3:fb:be:
f3:3c:8d:bc:1c:20:2d:37:3d:5a:56:55:25:13:a9:35:57:88:
d4:b9:43:39:33:df:60:61:f2:15:6a:f9:06:39:40:61:43:82:
d6:72:e1:90:ed:ce:54:f3:cd:39:44:20:3e:42:3c:43:29:60:
fe:b0:82:35:2f:de:85:02:f3:ee:62:10:c6:93:39:90:4a:1d:
b3:9f:2c:e7:ad:5e:f7:ae:6a:3d:d0:da:3f:e3:43:1a:fb:8f:
43:f9:9e:09:bb:46:71:71:27:e2:bf:47:c2:a5:42:bf:e9:b6:
62:21:5e:74:13:06:4a:2b:dc:66:b5:a6:f6:e8:9a:35:33:31:
54:50:93:b5:61:20:c9:bd:49:3b:9b:5b:43:0f:e5:b3:2e:51:
f5:75:85:b2:e1:29:c7:69:f7:f5:c2:57:57:d2:df:1e:c4:1e:
6d:28:1f:16:22:66:b7:99:83:c2:1d:0d:34:93:f7:cf:be:12:
39:a5:ff:89:06:c6:58:ac:d1:a4:ed:0b:d7:d4:16:06:39:81:
29:61:0f:b5:96:e4:5e:bb:81:1b:6f:53:37:1d:8b:92:ba:df:
1a:4e:28:02:d6:64:36:a5:e4:81:96:87:b1:8d:7a:e5:e0:80:
78:16:83:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:28 2026 by rpki-client