Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
File: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft (raw, json)
Hash identifier: YZ5iGbSfgaf4NlEFSCy/KGQYWJNAFzyab9I15UFdk0o=
Subject key identifier: B3:62:74:E0:DF:33:36:EC:17:EA:29:13:58:65:C9:D3:48:09:77:20
Authority key identifier: 53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA
Certificate issuer: /CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
Certificate serial: 019CAC7E355901C3DA463812E76D55104794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
Manifest number: 082A
Signing time: Mon 02 Mar 2026 03:01:18 +0000
Manifest this update: Mon 02 Mar 2026 03:01:18 +0000
Manifest next update: Tue 03 Mar 2026 03:01:18 +0000
Files and hashes: 1: Tv0ULnXhuU-LX5lHMmtC4uXh3f8.roa (hash: G7sOuhUNSdG8wE7mvWF+cLqHad92elbdv/9zhXuTLxo=)
2: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl (hash: cKfvHnriRJaqRWZj5aU4Gx83PL300z1OfRXFu36LoqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:35:59:01:c3:da:46:38:12:e7:6d:55:10:47:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
Validity
Not Before: Mar 2 03:01:18 2026 GMT
Not After : Mar 3 03:01:18 2026 GMT
Subject: CN=b36274e0df3336ec17ea29135865c9d348097720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4a:41:8d:85:65:8a:09:1d:e8:f8:cb:57:3c:
85:1a:ae:87:f1:a5:fe:93:c5:84:99:7e:7b:0e:fe:
16:8a:30:3d:35:82:e3:9f:10:29:00:c9:25:b9:80:
78:43:17:3b:a6:54:fd:a4:87:35:ff:b0:ef:82:15:
72:b4:5f:3b:a0:70:b4:80:58:bd:bc:4f:cc:b2:00:
e0:f6:e3:4e:4b:b6:c1:5f:a3:39:0e:c9:5f:b1:5c:
32:06:1c:86:9a:9b:fc:aa:00:49:5a:af:a5:30:97:
5d:64:cd:de:eb:bd:eb:e7:1e:56:7c:ed:68:bc:4a:
80:87:34:72:dc:23:de:92:fb:bb:5b:84:46:e5:fe:
e6:62:49:80:82:ff:67:1c:98:e8:2b:c6:37:9c:8b:
42:6a:c3:e2:53:bf:ae:f0:a8:cd:b1:c9:68:5d:24:
b8:ee:b0:ec:c4:fb:b3:5d:0e:2c:cb:e9:cc:f5:c1:
cb:70:86:fe:71:f5:c5:a8:31:75:4a:af:7c:d0:61:
10:7a:41:a8:04:28:6d:90:61:43:82:0a:75:04:9f:
bb:a0:84:23:10:ef:c5:fa:de:0e:d5:5a:49:cc:6f:
20:85:b9:95:5f:62:65:22:23:b3:fe:ed:e4:2e:27:
f6:84:c3:dc:bf:61:bf:91:11:ca:2d:93:5e:4f:cf:
3a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:62:74:E0:DF:33:36:EC:17:EA:29:13:58:65:C9:D3:48:09:77:20
X509v3 Authority Key Identifier:
keyid:53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:df:fa:1d:d1:6a:df:cd:e5:11:bd:06:d9:f8:5a:bc:2a:16:
3c:38:81:5a:0b:e3:62:b0:17:2e:78:e3:26:28:59:ae:ae:8d:
99:27:22:3a:25:ae:e2:83:c5:5c:62:04:f6:83:ab:56:a0:15:
67:70:95:6d:fb:31:5a:29:50:37:78:69:38:5f:7d:ca:42:83:
7e:9e:b5:59:ac:63:30:fb:9b:e6:e0:d2:7c:5e:2c:da:2c:ce:
6b:85:fb:62:ae:89:b8:7a:27:84:8c:61:f5:ee:9b:22:21:0e:
27:41:cd:66:f3:2f:f9:75:76:ae:d5:df:1d:df:b2:1e:a0:4c:
ed:c3:c6:0d:4a:df:15:27:f9:a2:62:44:0b:ad:6b:af:fa:13:
63:29:c2:4e:a9:9d:60:26:a1:a5:0a:5d:99:71:5c:9e:4e:61:
d9:3d:1b:2c:da:f4:9c:1e:93:1b:b7:6b:0c:f4:f9:19:bd:9c:
a0:75:1e:90:e0:35:e3:83:f4:34:25:91:7a:cc:fa:d4:c9:77:
d4:79:82:4b:af:3e:d1:26:a9:f2:91:d4:68:b4:a5:b6:df:3b:
b1:3b:1c:31:11:b6:1c:f6:31:15:e0:c2:1d:da:82:20:99:6e:
97:ac:61:f9:5f:da:86:c4:cd:59:27:e4:94:2d:3c:04:25:43:
01:74:08:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfjVZAcPaRjgS521VEEeUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZWFhMTljYTI3YTZmNTdmMmNiYjRlNDYzNzIwYjQzNmFm
MTdkZWEwHhcNMjYwMzAyMDMwMTE4WhcNMjYwMzAzMDMwMTE4WjAzMTEwLwYDVQQD
EyhiMzYyNzRlMGRmMzMzNmVjMTdlYTI5MTM1ODY1YzlkMzQ4MDk3NzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUpBjYVligkd6PjLVzyFGq6H8aX+
k8WEmX57Dv4WijA9NYLjnxApAMkluYB4Qxc7plT9pIc1/7DvghVytF87oHC0gFi9
vE/MsgDg9uNOS7bBX6M5DslfsVwyBhyGmpv8qgBJWq+lMJddZM3e673r5x5WfO1o
vEqAhzRy3CPekvu7W4RG5f7mYkmAgv9nHJjoK8Y3nItCasPiU7+u8KjNscloXSS4
7rDsxPuzXQ4sy+nM9cHLcIb+cfXFqDF1Sq980GEQekGoBChtkGFDggp1BJ+7oIQj
EO/F+t4O1VpJzG8ghbmVX2JlIiOz/u3kLif2hMPcv2G/kRHKLZNeT886nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNidODfMzbsF+opE1hlydNICXcgMB8GA1UdIwQY
MBaAFFPqoZyiem9X8su05GNyC0Nq8X3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVS1xaG5LSjZiMWZ5eTdUa1kzSUxRMnJ4ZmVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8wZDNiMmItZTMwNC00ZDYxLWI2ZDAt
MjdlOGY0ZjFjNjg0LzEvVS1xaG5LSjZiMWZ5eTdUa1kzSUxRMnJ4ZmVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8wZDNiMmItZTMwNC00ZDYxLWI2ZDAtMjdlOGY0ZjFjNjg0
LzEvVS1xaG5LSjZiMWZ5eTdUa1kzSUxRMnJ4ZmVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQN/6HdFq
383lEb0G2fhavCoWPDiBWgvjYrAXLnjjJihZrq6NmSciOiWu4oPFXGIE9oOrVqAV
Z3CVbfsxWilQN3hpOF99ykKDfp61WaxjMPub5uDSfF4s2izOa4X7Yq6JuHonhIxh
9e6bIiEOJ0HNZvMv+XV2rtXfHd+yHqBM7cPGDUrfFSf5omJEC61rr/oTYynCTqmd
YCahpQpdmXFcnk5h2T0bLNr0nB6TG7drDPT5Gb2coHUekOA144P0NCWResz61Ml3
1HmCS68+0Sap8pHUaLSltt87sTscMRG2HPYxFeDCHdqCIJlul6xh+V/ahsTNWSfk
lC08BCVDAXQIUA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:21 2026 by rpki-client