Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.mft
File: U9xdTpyQVzxt330Ay-iy7aQT_IY.mft (raw, json)
Hash identifier: eUNUUQUZxzCQmsHiIwyh7zUZVtd2pZZHtQEpHD2B40o=
Subject key identifier: A5:8A:51:06:92:37:64:2A:31:CA:C6:13:F7:7B:25:29:9D:4E:B8:03
Authority key identifier: 53:DC:5D:4E:9C:90:57:3C:6D:DF:7D:00:CB:E8:B2:ED:A4:13:FC:86
Certificate issuer: /CN=53dc5d4e9c90573c6ddf7d00cbe8b2eda413fc86
Certificate serial: 019D9B87CB859C12876C81721F41C3B5F24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9xdTpyQVzxt330Ay-iy7aQT_IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.mft
Manifest number: 7B
Signing time: Fri 17 Apr 2026 13:01:01 +0000
Manifest this update: Fri 17 Apr 2026 13:01:01 +0000
Manifest next update: Sat 18 Apr 2026 13:01:01 +0000
Files and hashes: 1: PsU7x_frD08SU2YYN4xYvGI8q1E.roa (hash: k6MudYJE0V8N7WpGxi22h24h9nGg9VIaakZ/jcGCILw=)
2: U9xdTpyQVzxt330Ay-iy7aQT_IY.crl (hash: UoHEEYIFRYJtKfp9295DUXj9cXDZ7QiJxCBRYgtMWnI=)
3: fOZ6kY7go8H3U7EGMazIlVOf4S8.asa (hash: ZG2DRjQ6yjHyZJgJZLq1YZ9mSn6uEwFWnifyu/zanYY=)
4: xOttd6TpxOr24A9NYb5gHM_31mk.roa (hash: acecs5fYnCii+jIlRbpWYRX+vj6OKx+EgPOK7cU5+y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9xdTpyQVzxt330Ay-iy7aQT_IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:cb:85:9c:12:87:6c:81:72:1f:41:c3:b5:f2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53dc5d4e9c90573c6ddf7d00cbe8b2eda413fc86
Validity
Not Before: Apr 17 13:01:01 2026 GMT
Not After : Apr 18 13:01:01 2026 GMT
Subject: CN=a58a51069237642a31cac613f77b25299d4eb803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:64:b7:e0:f2:e9:9a:02:0a:eb:76:ce:17:
52:83:06:f2:dc:19:46:62:ec:b5:4c:39:d8:db:83:
fa:1a:61:9e:e2:07:8f:c5:c4:32:be:85:bd:13:ed:
e6:cb:85:55:bf:cb:e1:a3:9e:50:7a:8e:a4:9c:79:
c2:bc:7e:8a:99:ee:ab:66:26:01:be:16:81:af:8f:
2c:c3:84:2c:ed:4c:75:8a:03:1a:df:8e:0c:5e:94:
cb:83:a5:50:53:da:cb:9b:cd:ad:3d:cd:48:c5:1a:
c3:fa:75:01:c6:f8:65:a6:f0:85:03:86:04:f3:fa:
7a:ed:03:34:2e:6d:0f:7a:58:6a:80:af:f1:bc:7a:
62:96:24:f4:72:90:f1:25:41:8f:f1:47:ab:bd:41:
8b:88:ba:9a:78:27:cc:df:88:19:71:e4:a7:1f:5f:
41:8e:6d:4a:ee:86:6b:4a:b7:57:81:54:22:83:66:
7f:a3:39:80:4e:51:f1:d3:3a:52:84:60:73:ed:da:
5f:12:d1:52:7b:2c:6b:38:8d:0d:87:4e:36:10:0e:
d7:69:d2:56:29:d3:41:51:77:06:ef:46:5e:bc:23:
3f:c3:3d:c4:45:f0:31:4e:7f:28:03:f3:65:dd:bb:
0b:4e:96:f9:ca:f5:99:35:ac:bb:6b:6c:62:e7:f0:
b0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8A:51:06:92:37:64:2A:31:CA:C6:13:F7:7B:25:29:9D:4E:B8:03
X509v3 Authority Key Identifier:
keyid:53:DC:5D:4E:9C:90:57:3C:6D:DF:7D:00:CB:E8:B2:ED:A4:13:FC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9xdTpyQVzxt330Ay-iy7aQT_IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a0:6d:fa:9d:dd:a7:00:74:30:c7:a0:54:2b:92:21:73:4f:
73:af:46:b6:cd:c4:7c:4a:d3:3e:f7:f7:c4:03:e9:56:de:89:
58:27:2c:87:43:ef:bc:52:0b:19:38:e9:29:09:10:dc:e6:9c:
9e:57:e1:2d:f5:7a:e5:5b:c2:9e:fe:09:6e:f0:90:fc:c6:e9:
a6:04:04:80:51:b9:6e:84:e8:b6:72:79:7a:be:3e:c3:17:0e:
90:5d:07:a6:31:cb:4e:f9:04:e4:04:fd:71:ff:a7:eb:21:c9:
bb:f3:9d:d2:07:e8:11:f5:e2:54:2a:a1:33:09:4a:91:ee:81:
0b:b0:36:a7:c0:bd:51:0a:43:7c:c0:af:7e:67:1c:ab:17:73:
40:e5:08:d9:63:26:71:b8:73:fd:25:57:96:e5:38:d2:2d:83:
e2:e0:5c:7c:45:a0:3c:3e:56:36:4f:59:78:be:f9:48:5b:29:
57:55:6d:e9:ce:0b:3e:90:ea:3d:ac:bb:a6:e9:f3:ea:a0:90:
54:f6:3e:fb:af:ae:17:55:fc:b9:ed:87:36:35:a8:ad:91:89:
6a:65:89:fd:e2:98:c6:c1:21:f8:fc:09:0c:4d:01:6e:0e:ba:
ae:33:25:b7:d8:2a:ee:c6:55:8c:89:26:b0:3d:32:ec:4e:b8:
33:b4:47:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:24:29 2026 by rpki-client