Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
File: U8kSoEEbsBdFBwktDKNaka15kFw.mft (raw, json)
Hash identifier: 6A4oDadlxmPSY/OPkxXahiT9S/gw9rLuNvgZX9Szzh4=
Subject key identifier: 3F:8C:85:71:5F:DC:38:2E:C4:23:55:65:33:CE:00:F7:74:61:E5:97
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Certificate issuer: /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial: 019F9135795CC1CDC65B4BF21BC1842C189A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
Manifest number: 19CF
Signing time: Thu 23 Jul 2026 23:00:28 +0000
Manifest this update: Thu 23 Jul 2026 23:00:28 +0000
Manifest next update: Fri 24 Jul 2026 23:00:28 +0000
Files and hashes: 1: 92JgNy2UniVvWNA6kvsz4sovFIA.roa (hash: lAqICp0tk9GujbZHx2/6RHqqJpx7oSWIDsAW5NqmUFs=)
2: CRXS8yJabkFe9zngcADmlt5Mjh8.roa (hash: V+gmBDqtYsm9sl2kIiueYpvE2PqUIfwWQ+IMlLrBBzI=)
3: Jgm412TDqz8eqc-jU7VKAy0ZDsw.roa (hash: z/uYXvq2xIRczyrsXkqCGG5d8yfec3+FGNIntpcNWWU=)
4: QbAALDYZ_RGHs07gYUQih_CDJyk.roa (hash: +Uv/ugRA2zDra5XT10jpvOYMi9ZmxhbMWKYPoPRN5bM=)
5: U8kSoEEbsBdFBwktDKNaka15kFw.crl (hash: efqt0ttLAMRwr7FHGqjgsHSpwS210/EtquO/9eINYDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:79:5c:c1:cd:c6:5b:4b:f2:1b:c1:84:2c:18:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
Validity
Not Before: Jul 23 23:00:28 2026 GMT
Not After : Jul 24 23:00:28 2026 GMT
Subject: CN=3f8c85715fdc382ec423556533ce00f77461e597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ee:5c:be:a4:a8:ca:73:ec:a7:87:14:8d:f9:
7e:ab:9b:ea:a0:cc:af:51:82:f3:6f:15:dc:9c:c3:
91:cb:e5:fd:2c:0b:5d:63:94:1e:89:cd:03:ab:66:
ec:bd:db:d1:d8:89:ef:23:37:c0:22:9b:b8:c4:31:
78:ed:de:ee:aa:6d:50:8c:b4:a9:9b:bf:93:d3:07:
ed:b4:44:0a:e5:69:59:46:3b:e5:65:31:75:06:de:
fa:82:0c:28:0d:10:52:93:b5:a1:c0:c2:82:60:da:
09:02:dd:cf:cc:09:7c:ac:5c:09:1c:7c:bc:fc:bc:
89:f4:81:29:47:0e:29:bf:02:a8:a2:f2:c0:19:fa:
d3:20:57:47:a6:5d:d6:d9:be:8b:da:9e:a6:26:28:
85:a9:93:4d:0e:b6:64:3e:84:db:46:cf:c8:c2:04:
55:56:12:56:cb:44:ad:9d:39:1e:b5:38:ca:9f:b2:
76:78:b4:25:85:53:9d:26:78:11:b7:02:a5:7d:df:
f6:68:21:a9:47:f6:48:fa:c7:4b:25:ed:f4:df:3a:
62:d1:8c:57:49:29:b8:b3:2e:4d:bb:43:b1:5c:4f:
d2:6d:ea:3b:f4:72:a2:01:fd:f0:54:e6:dd:5d:44:
87:54:aa:f1:c8:7f:ed:a5:31:f9:aa:72:ce:3a:58:
64:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8C:85:71:5F:DC:38:2E:C4:23:55:65:33:CE:00:F7:74:61:E5:97
X509v3 Authority Key Identifier:
keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ce:fc:b8:14:8a:a0:e3:97:e0:26:52:b1:e3:af:19:f5:88:
be:6f:05:cc:f0:0d:d6:b8:75:3c:a5:64:22:58:8f:a5:78:ae:
24:b0:12:e4:fa:ae:19:8b:c2:20:a2:06:7b:ea:a5:58:2c:f1:
ce:a3:bc:6b:ea:cd:e6:68:6f:30:cb:37:23:74:c7:bd:59:34:
2f:51:a7:89:83:aa:64:43:11:3d:3d:9f:34:d5:7e:2b:08:9c:
e3:3d:f8:31:98:a8:c2:be:15:91:6b:e4:4a:42:46:95:4b:2e:
c4:0f:0c:a4:75:4c:76:fb:ae:79:23:77:73:d4:1a:b0:f7:6b:
2a:26:e1:af:0d:12:f4:73:40:17:7b:d5:c8:78:c9:ee:56:47:
ec:4c:63:35:3f:f8:67:10:25:df:54:0d:b1:eb:a3:1e:4f:0e:
b0:76:dd:27:ba:39:88:ee:7d:50:24:06:f8:90:2a:ee:5e:08:
d5:bf:5e:b9:52:9b:0b:1e:be:62:72:2b:b1:6e:3d:89:6c:3c:
79:e4:96:8a:a4:17:e5:61:77:b8:84:c5:ab:2b:28:00:52:e3:
3b:dc:4b:2b:61:ac:a6:14:c3:69:2c:36:8d:38:e4:c6:12:aa:
d2:82:f3:36:a4:df:a8:e6:d0:c3:6e:1f:24:86:92:d7:23:92:
2a:47:47:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:31:38 2026 by rpki-client