Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
File: U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft (raw, json)
Hash identifier: srxTEvNaQbHH+EviPA+4dBgs5oOTqZckkaxwNNBPa1I=
Subject key identifier: 86:17:85:DD:75:B4:09:C1:29:AD:A6:FA:EB:FD:EA:81:AB:60:85:F3
Authority key identifier: 53:E3:AE:DD:91:BE:82:45:13:42:DC:D1:C9:82:83:45:DB:66:1A:5F
Certificate issuer: /CN=53e3aedd91be82451342dcd1c9828345db661a5f
Certificate serial: 01A0DA2881F2014A10540FE01BE040E4F366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
Manifest number: 0CFC
Signing time: Fri 25 Sep 2026 20:01:22 +0000
Manifest this update: Fri 25 Sep 2026 20:01:22 +0000
Manifest next update: Sat 26 Sep 2026 20:01:22 +0000
Files and hashes: 1: U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl (hash: t4cviHsZyMH1MeehoqwcxvRYGpDQYT47SgxwLxmTz8M=)
2: d4Z8dyEwWVlK-z1Mt82VdRZaIcY.roa (hash: pNguw2qBCLAYUuPZ0wVkI6YbP099kM2Xh8UMvqT4t9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:81:f2:01:4a:10:54:0f:e0:1b:e0:40:e4:f3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53e3aedd91be82451342dcd1c9828345db661a5f
Validity
Not Before: Sep 25 20:01:22 2026 GMT
Not After : Sep 26 20:01:22 2026 GMT
Subject: CN=861785dd75b409c129ada6faebfdea81ab6085f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0d:bb:d0:bb:35:9a:ce:4d:f8:bb:93:c2:df:
ac:56:4a:56:ea:b9:b1:a1:4e:eb:16:2c:c2:f8:04:
92:c9:c2:03:3a:bf:60:ef:7c:05:57:92:4a:8b:ed:
1b:7a:0e:f4:17:c4:e5:8a:3c:2c:c0:aa:1c:8e:cf:
1d:ab:d0:fb:e6:24:c1:de:6b:f0:e9:3d:6b:b4:f7:
de:b7:bf:ee:55:da:b0:70:3d:b5:f3:90:b5:6b:96:
48:b4:9b:06:78:ad:84:ed:86:e4:da:d0:de:61:3b:
5f:39:ca:a7:f9:73:ea:49:b8:76:da:85:88:67:6c:
81:3f:d7:6c:84:ee:65:c1:24:39:5c:bc:bb:52:19:
3f:f9:d3:d2:1e:0c:63:54:eb:c9:53:e4:5f:82:b3:
32:da:78:59:52:de:b7:7d:f2:0e:b5:63:e4:ae:89:
14:f7:18:3c:eb:1f:e5:23:75:e8:af:e4:e3:f3:96:
2e:87:1b:55:5b:8c:23:1a:dc:c4:21:ea:ca:16:1c:
79:51:b2:37:ca:af:90:1d:92:44:d4:28:43:50:33:
a0:de:fc:d0:15:36:cb:a2:b4:48:23:25:bf:14:3c:
82:f7:3b:6c:08:9e:99:e9:ba:8f:b6:66:46:81:77:
63:82:ae:f5:27:4d:bb:4d:fd:8b:b1:c6:bb:a2:cf:
28:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:17:85:DD:75:B4:09:C1:29:AD:A6:FA:EB:FD:EA:81:AB:60:85:F3
X509v3 Authority Key Identifier:
keyid:53:E3:AE:DD:91:BE:82:45:13:42:DC:D1:C9:82:83:45:DB:66:1A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b0:bd:d7:63:d2:31:58:93:f4:85:9b:45:04:f8:1e:f9:87:
df:ef:73:bf:61:4f:d5:9e:8b:f7:74:eb:a2:d4:40:66:8e:77:
c2:c3:ef:19:91:2d:15:69:48:dd:3c:a2:4b:73:53:a9:c9:64:
c6:5f:80:0d:53:a4:20:d5:4f:dc:69:39:c5:ef:58:e6:39:5b:
25:e5:38:c6:fe:3b:2f:f4:9e:d0:aa:be:a9:dd:c6:df:13:ba:
a2:2c:84:e0:77:9e:85:7c:e3:89:7d:50:f6:b7:52:8a:f1:ab:
11:68:94:0e:62:97:42:8f:32:3f:70:ae:07:74:81:96:7b:4a:
dd:93:28:d3:6a:b7:b2:18:7d:06:c5:7f:30:f4:36:98:7b:97:
88:c8:04:00:e4:22:fc:b3:f5:e7:0f:b1:b2:fe:ce:e4:fd:3e:
e8:db:4d:2a:6e:3f:31:41:47:73:f5:50:a0:09:f3:74:8d:09:
61:51:63:a5:47:8c:1c:71:a2:bd:f7:81:48:de:53:57:d5:3d:
88:0c:cd:6c:e7:2c:c3:29:6d:04:c5:0e:16:73:f9:42:24:42:
70:77:c7:67:e4:b6:45:cb:b1:cc:b6:f9:4e:e5:45:34:23:e8:
9e:61:af:44:3c:13:9a:9e:86:b2:6e:e0:67:87:0d:0d:99:ba:
99:e7:68:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:00:37 2026 by rpki-client