Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
File: U8kSoEEbsBdFBwktDKNaka15kFw.mft (raw, json)
Hash identifier: 36z2vkx3kTDlF+UUqrazh42Jl+n54GOyRWO/pAqKuDw=
Subject key identifier: EF:91:A8:92:92:47:E2:F4:7D:9F:36:A4:79:AA:1D:7D:43:EF:1E:91
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Certificate issuer: /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial: 019E1E35832763ED39E01359AC3EBEAF43E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
Manifest number: 190D
Signing time: Tue 12 May 2026 22:01:23 +0000
Manifest this update: Tue 12 May 2026 22:01:23 +0000
Manifest next update: Wed 13 May 2026 22:01:23 +0000
Files and hashes: 1: 92JgNy2UniVvWNA6kvsz4sovFIA.roa (hash: lAqICp0tk9GujbZHx2/6RHqqJpx7oSWIDsAW5NqmUFs=)
2: Jgm412TDqz8eqc-jU7VKAy0ZDsw.roa (hash: z/uYXvq2xIRczyrsXkqCGG5d8yfec3+FGNIntpcNWWU=)
3: U8kSoEEbsBdFBwktDKNaka15kFw.crl (hash: aIwb6dkf8yGvHDG1WtG6pkvzkOZhicx5u3VuJZtu4Ns=)
4: ot9zGZ8lqbZQsxEaVPvTfXs9gBQ.roa (hash: Kks4PvcwFRu/9gLcNOW/VSN4jNFuv/TAckUM8Z6fniM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:83:27:63:ed:39:e0:13:59:ac:3e:be:af:43:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
Validity
Not Before: May 12 22:01:23 2026 GMT
Not After : May 13 22:01:23 2026 GMT
Subject: CN=ef91a8929247e2f47d9f36a479aa1d7d43ef1e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:43:2d:99:e9:9f:e2:07:c6:8b:80:0b:50:d2:
7b:dd:90:69:da:fb:3d:24:c1:19:ef:a3:45:75:51:
fc:7b:c7:8a:9d:55:5a:50:ca:25:d7:2a:c1:31:5d:
44:ef:fa:93:e6:4f:04:c8:fc:5e:81:1c:ee:8b:21:
ec:14:eb:5d:ef:9c:01:48:39:54:08:3a:98:d0:5f:
62:38:08:3c:9d:8b:bb:37:d0:d1:d1:21:87:c4:e4:
cd:99:5f:cd:52:fe:2a:f9:e1:1b:d0:35:2e:73:1b:
4b:81:7a:6d:ff:92:76:8d:77:76:d5:43:ba:68:eb:
fb:bc:a3:c8:88:97:8f:d8:a0:8b:84:17:b6:1d:b1:
99:7f:a2:70:f6:1f:a6:cd:c6:40:6e:71:42:00:cb:
be:45:c4:99:b9:1a:4c:aa:bd:f6:0b:c5:3c:db:64:
06:9d:bc:0e:0c:87:d5:b0:7e:bb:37:60:bb:0f:02:
c1:4d:57:1b:60:cd:78:9c:5a:15:a7:c9:63:75:b9:
17:d7:75:34:d1:be:c1:c1:9f:0c:26:aa:c0:ab:51:
df:74:f5:43:0d:d2:63:07:ad:f7:fe:83:5c:4e:d3:
64:53:08:01:55:c7:e4:8b:b9:40:e3:1c:b8:5c:df:
0f:95:f0:bf:fb:17:a2:d5:06:23:7b:d0:90:0b:fb:
65:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:91:A8:92:92:47:E2:F4:7D:9F:36:A4:79:AA:1D:7D:43:EF:1E:91
X509v3 Authority Key Identifier:
keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:20:94:f2:fd:5d:9d:e8:20:c2:bb:db:fb:7d:19:2d:3c:b6:
c4:51:1e:e3:dd:d6:0a:4a:8e:46:12:fa:f2:95:2b:c6:dc:f1:
92:fc:87:03:d3:d1:63:d5:fb:2e:e9:77:8a:d5:e5:54:c6:e6:
5d:65:c8:47:bb:73:a0:f6:03:ff:99:85:8f:39:d9:a4:aa:06:
dc:48:3a:32:f7:db:63:c2:38:1d:fb:08:f9:dd:5c:f3:7b:50:
cc:29:16:f5:cb:ed:63:6d:24:42:52:56:21:15:f2:95:b2:62:
18:f3:bf:57:3d:f6:53:73:60:b7:d9:34:e7:15:46:73:83:25:
7a:92:f0:e6:0f:8c:16:7e:ca:f5:70:c8:0a:83:59:f1:cf:0f:
51:43:3e:58:6a:9f:3b:6c:08:f4:91:a7:dc:25:1a:9a:f5:95:
e8:88:fe:7f:f1:54:d1:75:25:d1:ea:f0:99:fb:73:1e:4f:47:
36:4e:96:59:0a:88:6a:b3:22:73:cb:98:ee:dd:ed:0f:19:5b:
cb:d1:7b:66:03:1d:4b:a7:b2:df:d2:80:9d:50:b0:28:4a:37:
08:c8:3d:96:95:d8:96:3d:28:9a:bc:a8:c2:4a:0d:8f:98:38:
06:7b:c9:67:e4:fc:9e:39:94:e5:62:f2:e0:1c:9a:0f:4b:3f:
10:10:3e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:06 2026 by rpki-client