Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
File: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft (raw, json)
Hash identifier: HK7vzcJMq4ubNqMbZy65oEs81pfplSoIHNEATKONyjw=
Subject key identifier: F8:7A:A9:25:96:47:E6:52:21:9A:59:06:04:76:26:CA:DB:41:5D:E7
Authority key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
Certificate issuer: /CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Certificate serial: 019CAE354751457188EA758E721C5E35B51F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 11:00:53 +0000
Manifest this update: Mon 02 Mar 2026 11:00:53 +0000
Manifest next update: Tue 03 Mar 2026 11:00:53 +0000
Files and hashes: 1: 7pmNInk-dCH6WsuaRDxg2ILy8pg.roa (hash: 2m1FS9YMqm9NTE7E4KU6Pg9M6MzDGeacr6q3JFeGbKM=)
2: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl (hash: u8XPK4lGHgrjy20KuIXEoaIiiuSCxtbiyet9whmwCWg=)
3: t_7IHQAUEyaUbl5DxXVWHE2bbGE.roa (hash: a851GGpE/WvCnOovf5sLJTvqxcyYbrGtDw0UsU9RPPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:47:51:45:71:88:ea:75:8e:72:1c:5e:35:b5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Validity
Not Before: Mar 2 11:00:53 2026 GMT
Not After : Mar 3 11:00:53 2026 GMT
Subject: CN=f87aa9259647e652219a5906047626cadb415de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:1e:47:5a:ce:20:95:8b:da:36:2c:56:71:
8a:44:7f:3c:25:32:d6:1f:bf:fc:36:bb:cb:3b:bf:
c1:b5:5e:7a:ac:ac:66:01:59:c6:be:78:bf:39:bb:
bb:e8:7a:29:d6:78:c3:8b:3e:ab:9f:b0:9c:f9:c0:
9e:66:52:54:e3:1d:72:08:bb:ae:02:fd:bf:f0:0e:
fa:45:e6:ea:cb:8e:51:79:dc:8a:ba:23:49:ee:d3:
45:54:a5:4f:3a:4d:17:b6:e3:e0:d7:b5:71:25:fd:
d0:f4:d0:87:87:3c:e4:39:75:ca:4a:5f:79:9b:7d:
c3:e7:1b:c2:fc:57:30:67:7e:9d:48:50:49:ac:e5:
4d:f9:fc:fd:87:bc:af:f3:2c:fa:df:86:97:ba:57:
78:9a:bd:62:c2:87:bf:2e:15:c6:58:4f:01:2d:67:
57:dd:f6:32:eb:54:cd:8a:b5:3a:13:e2:4d:e7:81:
77:fd:b4:5f:b8:3e:e8:dd:2e:86:e0:2b:0d:0f:71:
a4:a2:c9:37:f5:02:c9:8f:69:c5:18:01:4c:4e:e4:
f9:aa:b8:94:87:79:a6:98:75:59:7d:86:4f:3d:e5:
94:69:8e:7d:2a:86:b1:b9:c8:0f:f1:57:26:f7:2c:
5b:64:93:ca:05:77:7a:2f:7a:00:9d:80:bb:fb:a0:
21:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7A:A9:25:96:47:E6:52:21:9A:59:06:04:76:26:CA:DB:41:5D:E7
X509v3 Authority Key Identifier:
keyid:53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:5a:fd:6b:7f:e7:a0:89:d7:25:ad:77:82:07:f8:55:93:95:
9d:ea:d8:69:07:c5:49:da:44:dc:89:17:7c:d2:39:4e:0a:a4:
f7:5a:a7:31:80:64:0c:ff:4f:c3:17:51:a9:70:a0:a4:5b:9f:
57:1c:ce:74:b0:86:6d:ce:98:e2:7c:7c:f6:38:f7:ff:a7:3f:
11:0d:1c:e6:a3:0f:d0:ed:d7:b7:21:6d:4f:37:df:f5:ef:d1:
cc:98:3b:21:e4:2a:5c:e3:6f:88:fc:69:9d:bc:b8:d5:13:97:
f3:5f:f4:3e:16:ad:80:49:f7:6a:c3:6c:e6:f4:0f:cc:af:4b:
f9:e6:c4:8b:41:20:10:55:27:24:87:94:06:67:20:14:6e:ee:
8e:67:de:f4:34:7e:3f:0d:2b:53:02:10:d4:60:64:2d:5e:ee:
ac:4c:17:45:5d:9f:8f:28:86:d2:89:c2:96:e2:dc:2b:4e:dc:
91:6e:06:33:cb:1d:26:54:94:f8:d3:36:ef:10:da:1b:64:bd:
81:f5:8b:19:09:bc:1d:34:36:bb:dd:ae:28:74:ac:51:ea:b1:
d6:28:37:f0:10:c2:0f:e3:1b:ed:bb:89:48:f1:09:62:95:ba:
97:93:d2:46:93:f8:71:d6:01:c1:97:84:ce:4c:ec:96:b2:75:
c9:30:b3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:43 2026 by rpki-client