Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
File: U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft (raw, json)
Hash identifier: 76lctZnUxRUpe+poiXI+2L5Q7PgB9tyELbeBRr0og5M=
Subject key identifier: BF:44:11:74:3B:AE:B0:9C:D1:9A:79:6D:0A:95:A1:C3:50:8E:B4:5D
Authority key identifier: 53:E3:AE:DD:91:BE:82:45:13:42:DC:D1:C9:82:83:45:DB:66:1A:5F
Certificate issuer: /CN=53e3aedd91be82451342dcd1c9828345db661a5f
Certificate serial: 01A0DC16DF59723BDAB150758609C3D67CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
Manifest number: 0CFD
Signing time: Sat 26 Sep 2026 05:01:21 +0000
Manifest this update: Sat 26 Sep 2026 05:01:21 +0000
Manifest next update: Sun 27 Sep 2026 05:01:21 +0000
Files and hashes: 1: U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl (hash: q5XfVOyR5mMc/vI2zm09BfKzEkWIdxtiNETcMuS8SMk=)
2: d4Z8dyEwWVlK-z1Mt82VdRZaIcY.roa (hash: pNguw2qBCLAYUuPZ0wVkI6YbP099kM2Xh8UMvqT4t9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:16:df:59:72:3b:da:b1:50:75:86:09:c3:d6:7c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53e3aedd91be82451342dcd1c9828345db661a5f
Validity
Not Before: Sep 26 05:01:21 2026 GMT
Not After : Sep 27 05:01:21 2026 GMT
Subject: CN=bf4411743baeb09cd19a796d0a95a1c3508eb45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:ed:a9:e7:09:2d:ac:79:20:6e:5b:e8:4d:
61:49:cb:c4:06:57:4f:14:b8:69:9b:af:88:7a:a0:
a8:e6:9a:b1:be:62:69:8f:0a:18:f8:01:e3:26:b5:
1b:b8:c2:6d:cb:42:76:dc:a2:51:23:49:4c:14:57:
c7:a7:9f:97:72:26:84:31:84:f9:97:e1:23:22:67:
a1:a8:a6:f9:c2:e2:ec:16:9f:a3:7e:05:ed:22:49:
3d:64:65:8d:e5:c6:1b:fd:bf:23:cc:29:38:4d:fd:
6c:b9:be:63:4f:3f:2a:10:4f:28:a7:60:75:9a:b8:
54:a4:4a:79:cc:c1:93:f5:e9:a7:f2:bc:b7:af:d6:
49:f8:d3:ac:36:4c:ba:13:31:33:63:8d:21:91:a4:
b0:b4:73:86:56:2e:e5:39:fa:80:73:13:18:9c:e8:
e9:76:30:5f:90:3d:6e:00:a4:7b:8b:04:99:ed:10:
aa:ff:36:b7:45:04:34:92:6c:5c:78:de:92:ee:33:
33:83:81:93:4d:9f:41:76:2e:af:58:5c:a4:87:7d:
5a:e9:44:d8:47:1b:0d:4f:20:95:76:44:aa:f9:05:
a0:31:b8:29:38:a2:e8:0c:90:cf:34:76:08:47:63:
af:91:6d:6e:7d:45:cf:e1:da:52:78:b8:c7:c2:f4:
91:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:44:11:74:3B:AE:B0:9C:D1:9A:79:6D:0A:95:A1:C3:50:8E:B4:5D
X509v3 Authority Key Identifier:
keyid:53:E3:AE:DD:91:BE:82:45:13:42:DC:D1:C9:82:83:45:DB:66:1A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e6:70:76:8a:08:c5:04:1b:30:ef:c9:33:1b:c2:98:0a:c9:
a4:ab:d7:6b:3b:12:6d:22:04:8d:01:cd:07:63:fc:bc:93:a0:
f3:46:c7:c4:ac:f7:db:fe:96:63:e7:e3:fe:81:c4:08:5c:5e:
8d:04:26:ee:d8:e7:e8:ce:2e:54:1f:af:9d:ff:cd:a7:7e:58:
45:7a:2a:cd:b4:e7:73:be:43:4a:f1:18:2f:93:43:c6:56:d4:
aa:a6:5b:94:6e:4c:08:da:68:bb:01:63:4d:82:88:7b:43:0c:
e2:4d:c7:58:35:a4:8e:97:30:d7:62:66:f0:b2:e5:33:b6:21:
0a:31:3d:5e:4d:17:2d:fe:06:24:de:fa:6f:bf:30:b6:f8:08:
54:03:c2:f0:af:de:b3:fe:a1:87:0f:f2:52:b5:8c:a1:e4:d6:
62:36:59:cd:ae:9d:45:86:56:d8:23:f9:36:2f:a7:35:fe:da:
2b:06:c4:c3:b4:2e:c9:6d:ff:42:6b:39:8b:e6:d9:cb:cf:96:
dd:6f:f4:c8:58:87:c2:3f:bb:d6:cd:96:05:6f:5d:28:aa:2a:
e1:63:5a:5d:41:e5:78:72:49:39:ee:ac:2a:e3:68:4d:20:10:
f7:e6:06:e5:39:4d:f5:36:03:8e:da:08:3e:f0:93:84:ed:af:
cb:9d:2b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:32:33 2026 by rpki-client