Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier: sc2rbxIlpgdnCK2jzB30/Zvj2XP27imKmixlq/lo/V4=
Subject key identifier: B3:2C:56:4B:A1:EF:EA:44:DF:F0:31:CA:B6:8E:AE:F1:66:96:04:51
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial: 019CAC477DB5D26193E6E84237BAA3DD39D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 02:01:32 +0000
Manifest this update: Mon 02 Mar 2026 02:01:32 +0000
Manifest next update: Tue 03 Mar 2026 02:01:32 +0000
Files and hashes: 1: IvGUn_2-YX3IhLfXSvYGkrdm6NU.roa (hash: tNs9qrcIboBy4IbyGsAG+6ZLzNLrX28RoLdHaH5fRLc=)
2: LJPLYMO5vOxs_MtRPfGWysA-2S4.roa (hash: RrDOCY1v4Pi574dcipWzNUzibj7ERd9ByP6OHQKcs1o=)
3: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: ynMKXZYoKjkqw6goKVIFjhYNGptWDQUdoHHRMMJgLjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:7d:b5:d2:61:93:e6:e8:42:37:ba:a3:dd:39:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Validity
Not Before: Mar 2 02:01:32 2026 GMT
Not After : Mar 3 02:01:32 2026 GMT
Subject: CN=b32c564ba1efea44dff031cab68eaef166960451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:75:94:57:c2:01:68:98:fe:83:6a:0d:03:
70:7b:f5:71:6a:95:62:f7:56:36:b6:fa:64:b7:5b:
0c:4d:80:d4:82:e8:01:1c:87:41:32:90:02:c0:76:
0b:04:fd:e8:6c:8c:71:33:78:be:d4:c0:1c:4f:81:
7c:d0:30:a5:69:22:e1:2e:76:06:91:8e:33:09:ed:
12:08:ae:f5:0f:b0:a4:62:db:a0:df:c4:cb:40:0e:
34:bd:72:8c:47:b9:82:f4:f6:42:0d:0d:a1:c4:03:
1a:d8:74:56:37:da:85:20:7f:2d:c0:23:19:ba:1e:
08:2f:73:8b:61:88:8b:ef:3a:1c:c5:fa:07:01:02:
a3:77:1f:13:65:e3:95:d3:6a:e7:87:79:a8:8f:99:
ff:a9:74:4a:46:35:ed:f2:52:fb:d5:de:52:57:fa:
b5:50:44:8d:d2:52:a6:47:2f:7e:7b:af:47:48:58:
b7:5b:31:00:12:a3:86:fa:c8:17:67:7b:61:d3:36:
ca:70:83:4c:08:4a:ce:3b:6b:23:c4:ab:4d:46:d6:
d5:dd:82:0e:a1:36:bb:b2:5f:a6:85:9b:2c:e4:89:
61:a2:4a:a7:29:a3:b4:43:f7:d4:94:07:72:1c:4d:
34:66:60:0d:ef:37:92:a1:83:56:e2:0f:f0:09:be:
97:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2C:56:4B:A1:EF:EA:44:DF:F0:31:CA:B6:8E:AE:F1:66:96:04:51
X509v3 Authority Key Identifier:
keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d4:c8:76:cf:ec:29:8b:38:39:c1:c1:b7:b2:eb:8f:f7:b4:
14:8b:5d:b0:eb:dd:9e:1a:7a:62:dd:d9:2e:e2:30:3c:f4:22:
91:7e:9e:79:5e:14:70:bb:d4:3a:dc:aa:62:c7:48:38:48:b3:
61:84:22:f2:4e:1d:fe:a9:c8:6a:be:02:4f:17:3c:07:ce:a2:
07:57:a0:ee:8e:01:e0:de:8c:be:18:4c:f3:ba:a6:4a:22:9a:
c2:3c:fa:e6:13:37:4a:91:ea:63:c2:7d:65:1c:a4:41:16:4b:
7f:a9:be:6d:8a:4a:ff:15:17:da:9e:43:db:44:21:2d:65:eb:
20:83:1d:45:fa:50:37:f4:07:21:fc:4a:7b:46:26:cb:57:cc:
e0:6c:d6:10:97:c9:7c:55:ee:16:5d:4a:b4:3b:1f:5e:dd:a1:
b9:77:1d:12:eb:79:7f:be:db:af:12:c9:c9:b5:64:51:58:8a:
34:85:a0:25:e9:6f:a8:6a:ff:98:86:f2:a4:d5:24:ce:9d:74:
11:8d:35:a6:20:e2:02:a9:f8:8c:8b:cb:2d:97:31:b7:86:3f:
0f:0b:1e:26:51:ad:43:9a:53:02:9a:05:4d:ba:75:6d:6d:62:
82:43:69:f2:1e:1f:e5:fb:32:a2:08:b7:ed:89:0a:5c:46:ef:
92:05:e8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:22:59 2026 by rpki-client