Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier: BF/IdKuxzPhMlpY5szUGI9SDsP2pclhEtRbJ8Ps0Ecw=
Subject key identifier: 57:97:BC:02:31:DF:70:DA:33:97:7A:4E:F4:E4:C9:DE:1C:DF:CE:0F
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial: 01A1C3D4E21A6372E9E9A4FA00B55F50DF16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number: 1AEC
Signing time: Tue 10 Nov 2026 05:01:10 +0000
Manifest this update: Tue 10 Nov 2026 05:01:10 +0000
Manifest next update: Wed 11 Nov 2026 05:01:10 +0000
Files and hashes: 1: IvGUn_2-YX3IhLfXSvYGkrdm6NU.roa (hash: tNs9qrcIboBy4IbyGsAG+6ZLzNLrX28RoLdHaH5fRLc=)
2: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: 72TNWsbKrByrEh2AB5sG14KbdCuMT63tPbld8c11HIc=)
3: ykl9L1ieIhGIofGi7fpGhZ_4q9o.roa (hash: SVH2fs99Ob8T2U4b3+XfOBMnnh8VK7bnsIv441zI1CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c3:d4:e2:1a:63:72:e9:e9:a4:fa:00:b5:5f:50:df:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Validity
Not Before: Nov 10 05:01:10 2026 GMT
Not After : Nov 11 05:01:10 2026 GMT
Subject: CN=5797bc0231df70da33977a4ef4e4c9de1cdfce0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:59:cb:8e:98:c0:90:7d:23:71:89:ec:ff:ea:
e2:96:f1:8b:b1:57:e1:70:d2:ad:14:79:a3:0d:5b:
a9:82:0b:34:46:5c:f4:24:42:3d:40:1e:af:b2:3b:
90:b0:c9:e2:e8:62:af:4d:88:01:b4:07:e9:87:54:
3e:ea:1d:de:ad:97:05:a3:16:d7:5d:2d:22:c7:f7:
8c:18:0c:42:58:5d:4e:05:43:d4:39:d5:ef:c2:d0:
8b:61:20:cc:03:1f:d0:c9:87:a8:11:d9:4f:d9:e1:
20:7d:31:94:f4:e2:14:ce:d4:f3:eb:46:18:4c:a7:
1c:a9:38:e4:98:e4:cc:46:b5:ab:8e:00:37:e2:49:
17:36:af:41:5f:d1:de:f7:a3:e5:f0:69:7a:aa:f6:
ea:0d:ec:c0:d3:1d:31:95:2d:0e:ff:5c:ec:96:91:
9e:00:ca:03:b3:4a:ad:15:90:2a:66:b7:d4:b1:e8:
be:bc:96:89:43:89:35:54:df:9a:95:6c:08:14:c2:
ed:d8:ea:1e:2f:8c:fc:21:67:7a:aa:9f:0b:09:9d:
c5:25:73:95:9b:ce:f6:52:38:c1:16:66:2d:8c:30:
3e:ec:5f:97:b2:11:e0:c4:ca:bf:0d:8c:92:e1:d1:
b4:cb:42:53:2b:9c:aa:4f:4c:90:f2:9e:42:38:75:
d5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:97:BC:02:31:DF:70:DA:33:97:7A:4E:F4:E4:C9:DE:1C:DF:CE:0F
X509v3 Authority Key Identifier:
keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:45:69:e5:40:29:e0:cc:65:e3:a7:15:ad:9b:e4:67:63:96:
36:00:23:bd:7c:8b:65:20:cf:66:da:6c:06:d5:4e:3c:8e:0f:
4c:27:3c:bc:36:79:2a:a8:72:23:fd:d9:13:b9:05:1e:ca:6b:
cc:c0:42:83:bf:82:ca:8d:f3:3d:c9:2d:bc:fc:c4:5e:8b:bc:
af:39:de:29:db:2e:d2:90:fd:97:b4:38:ec:35:09:e7:de:ad:
f9:fb:9a:e4:f4:e6:bb:76:e2:64:68:2a:1c:9b:70:7b:5b:c3:
df:9a:56:05:ab:e2:0e:b7:34:90:5a:9b:59:55:27:62:69:4a:
79:48:cf:e2:e7:1a:b3:05:69:78:bf:db:e4:fc:05:f5:56:a1:
25:f5:26:de:c6:30:e7:33:e8:44:b4:4e:65:11:41:de:77:49:
f3:11:f1:27:49:80:ff:04:36:30:f4:e0:97:d2:af:a8:b4:7e:
99:02:38:ca:a8:3a:83:b6:ff:0d:ef:f4:50:45:0d:0e:38:95:
6b:26:f0:5e:38:c0:a1:e6:1e:e5:2e:a0:d2:7f:35:ed:55:59:
40:f1:86:17:23:5e:4e:d4:66:ff:71:54:b1:ae:3b:14:33:4e:
d3:3e:a6:94:54:1c:af:fe:0d:8b:cf:af:76:3d:60:9d:14:0b:
0b:56:36:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 16:47:49 2026 by rpki-client