Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
File: U43RixaS2KPncS0-a5KLCaoK5mw.mft (raw, json)
Hash identifier: Z8ePSSMc0jIJmzKtiABBv7d/ewfcMlXudCo3Xiq1g4o=
Subject key identifier: 8A:D5:5D:68:E9:B5:74:3E:0F:AB:3E:E8:A2:90:70:C2:A8:B9:79:F2
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 019F93C958700F54E19541EDE99FC1D70299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
Manifest number: 04AA
Signing time: Fri 24 Jul 2026 11:01:13 +0000
Manifest this update: Fri 24 Jul 2026 11:01:13 +0000
Manifest next update: Sat 25 Jul 2026 11:01:13 +0000
Files and hashes: 1: 49wISrZvaWfJmuYUokxBAxCFFnA.roa (hash: fVyYSxQVcSLUIxvGvzkQ4MbdrWMkDcckbPhROtPlP1s=)
2: U43RixaS2KPncS0-a5KLCaoK5mw.crl (hash: QWZJOBmxXgrPB2HqgT/7SONOC/xurz/fRIWrCge8t9Y=)
3: n5blPzAxj6urB6U69h-1_6oKGxM.roa (hash: wVHabnnbMu4awX0MmEHsebkGh6JiyzOhJKMjTxirSzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:58:70:0f:54:e1:95:41:ed:e9:9f:c1:d7:02:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: Jul 24 11:01:13 2026 GMT
Not After : Jul 25 11:01:13 2026 GMT
Subject: CN=8ad55d68e9b5743e0fab3ee8a29070c2a8b979f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e5:2b:32:a2:18:87:6a:76:75:ad:6e:f5:d1:
45:d7:a1:72:bf:15:cf:79:b4:89:52:50:43:14:41:
a2:06:de:aa:0d:9a:80:70:14:c9:60:64:74:44:30:
86:55:82:60:f5:a9:37:a6:c7:39:2d:d7:4e:76:a5:
02:8b:d5:89:81:b8:80:db:cb:89:10:5c:f9:33:d2:
b6:69:78:fe:df:37:5f:86:61:b2:71:0e:df:59:7a:
f3:92:53:64:a3:e4:d9:56:32:cf:28:c8:c9:4e:50:
c8:f5:1b:75:97:4e:0d:60:16:bf:34:dc:4b:42:0e:
ef:3b:52:08:cf:2f:25:b7:2f:96:84:b9:60:ba:95:
24:a6:01:f4:91:dc:f2:0d:10:1b:e6:c2:f2:74:70:
18:28:99:fd:2f:80:36:64:b0:da:1a:4b:b9:79:9c:
99:99:a5:99:3f:d4:26:6e:3c:b0:5b:1b:83:37:3b:
59:f9:ab:af:0c:41:5e:ad:ed:d0:a4:9f:8c:81:03:
c0:bf:5b:9b:82:42:9e:35:25:11:b0:6b:85:95:9c:
dd:fb:c9:95:9d:4d:91:e0:60:4e:e2:64:46:ae:4b:
94:14:4e:8c:23:33:c5:eb:51:0d:71:24:2d:56:98:
28:5b:d2:69:fa:a7:d7:87:34:ca:f1:c4:f1:70:ee:
b2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D5:5D:68:E9:B5:74:3E:0F:AB:3E:E8:A2:90:70:C2:A8:B9:79:F2
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f5:2a:24:4e:d9:45:04:cb:32:8d:8c:30:38:8d:47:a5:95:
38:ce:dd:bd:02:d0:49:71:37:2b:d3:14:ef:d2:39:6e:ea:f9:
77:66:78:2c:61:66:7c:6b:15:a3:a1:f6:ad:41:54:c3:4e:14:
00:cd:de:39:1f:90:0a:75:11:3b:a2:2f:97:50:dc:0c:f8:9f:
03:a7:11:6b:32:49:76:4f:52:00:15:c1:07:90:af:b0:cc:43:
df:37:46:6f:57:ae:09:29:f2:45:5e:72:2c:60:2d:15:4b:d2:
0c:82:1f:10:5f:bd:94:ed:d4:ca:2a:a4:54:23:18:cd:87:d3:
23:28:d2:c9:4a:db:de:4f:12:e2:22:d2:ae:58:fe:b0:c7:0e:
b1:40:d6:b8:f3:36:b3:5c:29:1b:9a:70:16:30:dd:7b:51:d1:
d5:b8:30:ae:f5:91:84:c8:fb:f4:62:93:cd:b9:6b:30:70:9c:
23:79:39:58:58:0b:6f:65:ad:69:b3:1c:a5:4f:99:8c:3e:66:
29:11:8c:93:6d:ca:12:91:69:bb:3e:a2:5a:3c:6b:e9:c5:51:
5e:96:9c:3e:0e:b4:16:8f:fb:b4:5b:b6:27:fb:19:10:c6:2e:
ac:fd:87:6c:ab:a8:11:2d:52:02:52:3f:c7:66:f0:ad:42:30:
68:0d:b6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:28:08 2026 by rpki-client