Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
File: U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft (raw, json)
Hash identifier: x9jNlWycgiZ0W2gfZwKdgureVlZRhAyQiX6/k9+L47U=
Subject key identifier: BB:EB:F8:57:B3:86:8D:75:85:23:89:66:FA:A0:D3:04:81:A2:CA:25
Authority key identifier: 53:E3:AE:DD:91:BE:82:45:13:42:DC:D1:C9:82:83:45:DB:66:1A:5F
Certificate issuer: /CN=53e3aedd91be82451342dcd1c9828345db661a5f
Certificate serial: 019F91DAE4FB132BD5DAA607E6AE5D889834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
Manifest number: 0C52
Signing time: Fri 24 Jul 2026 02:01:09 +0000
Manifest this update: Fri 24 Jul 2026 02:01:09 +0000
Manifest next update: Sat 25 Jul 2026 02:01:09 +0000
Files and hashes: 1: U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl (hash: JgOX2jDm1NDVVsU82ybjy75JVs8GcMLragXvS0UD3WM=)
2: d4Z8dyEwWVlK-z1Mt82VdRZaIcY.roa (hash: pNguw2qBCLAYUuPZ0wVkI6YbP099kM2Xh8UMvqT4t9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:e4:fb:13:2b:d5:da:a6:07:e6:ae:5d:88:98:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53e3aedd91be82451342dcd1c9828345db661a5f
Validity
Not Before: Jul 24 02:01:09 2026 GMT
Not After : Jul 25 02:01:09 2026 GMT
Subject: CN=bbebf857b3868d7585238966faa0d30481a2ca25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:38:e9:97:85:44:62:77:14:69:dc:69:f7:19:
ca:bb:5c:9c:44:cf:be:b1:11:e2:74:5b:3c:53:41:
de:b2:fd:f2:d3:03:43:96:cf:bd:01:ee:61:a0:7e:
8d:1c:50:5c:c7:8a:80:87:9b:95:83:39:de:f6:50:
1b:c6:fd:3f:7a:b9:aa:e4:a6:e4:4a:d7:0b:99:f2:
8c:3b:e5:64:de:5c:b1:fe:55:ca:1a:35:ba:95:a2:
60:d1:f3:71:43:3d:d7:00:49:18:0a:65:af:50:9f:
a5:e2:c5:54:e9:64:9b:4e:6d:12:2e:0c:77:f6:ba:
4f:97:55:6c:88:0e:55:0f:ed:86:fe:2c:83:e2:de:
d9:2a:be:2e:cb:42:01:5c:d3:bc:5b:7f:eb:fc:54:
4e:8b:71:d2:96:8b:0e:be:67:33:5c:6e:52:96:3b:
04:1f:88:ba:f5:59:65:ac:d9:dc:44:85:7d:9e:70:
78:fc:01:60:b3:b8:ed:c4:e9:0f:30:d7:75:be:3c:
71:f2:c1:d2:e9:12:b2:54:84:95:c7:21:31:1a:21:
d5:30:11:7a:1f:0f:8b:85:21:8f:75:4b:37:f9:57:
b2:9f:97:13:d4:34:d1:fb:a6:98:12:ae:f1:8b:ce:
6a:fc:a1:f8:02:54:48:16:2b:19:1e:19:1c:95:64:
ff:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EB:F8:57:B3:86:8D:75:85:23:89:66:FA:A0:D3:04:81:A2:CA:25
X509v3 Authority Key Identifier:
keyid:53:E3:AE:DD:91:BE:82:45:13:42:DC:D1:C9:82:83:45:DB:66:1A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:48:b8:10:44:47:e2:8c:86:7c:e8:ea:ee:a5:ed:e4:79:39:
16:f6:7c:5b:c3:e3:68:55:a3:b7:d1:fc:c8:a2:2e:f3:f1:22:
47:45:19:26:11:f4:8c:43:5a:1e:64:e8:05:48:02:1f:3e:33:
8c:d0:f1:f1:53:fc:72:6d:89:2e:83:39:f8:22:f5:f1:81:8e:
12:2c:72:44:60:0d:d1:a0:62:1c:32:5d:b6:78:71:f4:87:c0:
07:22:36:8a:3f:52:f3:25:9f:c9:d4:0c:ab:26:43:51:1c:49:
f5:79:d1:ac:b1:bc:35:98:84:5d:8e:16:5c:a2:68:93:3f:98:
e3:bd:3b:b8:82:96:30:99:a0:96:43:47:39:73:58:56:6c:f6:
60:ff:e6:02:00:e8:b1:dd:a4:79:c4:d2:c7:27:df:6a:27:41:
36:c5:92:ff:e3:85:9c:d6:7d:b2:f9:7b:c5:53:ca:00:93:6b:
cc:6f:26:0f:4d:1f:28:e0:75:31:b1:7b:de:42:7e:8d:82:18:
0c:e5:71:90:4a:5e:d8:9e:83:e7:d0:3a:69:2c:4b:d7:2e:67:
e4:95:0f:65:fa:9c:02:ba:0b:0e:65:ad:80:75:12:ed:85:91:
30:cf:3d:71:68:26:a8:6b:b1:99:f4:b3:47:f4:3d:db:6f:2c:
7b:eb:2d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:33:12 2026 by rpki-client