Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
File: U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft (raw, json)
Hash identifier: gQdSPD7UdT3tBgMTbVpOYRdnF+D0koqWZRbHIHr1RGk=
Subject key identifier: 68:0A:75:A7:7B:C1:80:BF:C0:0D:A3:5C:5C:9F:A5:B7:39:A4:B6:7F
Authority key identifier: 53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
Certificate issuer: /CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Certificate serial: 01A0D804BD105E90A2B4306EF18AD64FD79C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
Manifest number: 05C8
Signing time: Fri 25 Sep 2026 10:03:04 +0000
Manifest this update: Fri 25 Sep 2026 10:03:04 +0000
Manifest next update: Sat 26 Sep 2026 10:03:04 +0000
Files and hashes: 1: U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl (hash: lG7UdYYeMFc0gFwrFLy09o/BtFtiI/ry0tPPYZRHQe0=)
2: qAWpsleSdTKU2QK0ge-DYDJtKTg.roa (hash: hBYa6IMYEuL9W6YmuZd1vKmz/EkBj75T5fHCqH+FPYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 10:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:bd:10:5e:90:a2:b4:30:6e:f1:8a:d6:4f:d7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Validity
Not Before: Sep 25 10:03:04 2026 GMT
Not After : Sep 26 10:03:04 2026 GMT
Subject: CN=680a75a77bc180bfc00da35c5c9fa5b739a4b67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9c:e0:08:dd:9f:4d:ac:bb:bd:fe:3e:0b:71:
0f:f0:6d:ed:9a:f0:35:4b:1d:66:90:d8:a3:d8:cb:
61:b7:0b:e0:b1:1a:ad:b7:7c:05:2c:37:fc:42:bf:
e4:17:96:b7:8b:37:49:b9:56:25:f6:7e:44:ba:ac:
03:4d:a5:9a:6a:3c:15:80:d5:5a:a2:d4:71:83:b3:
a7:65:5c:ac:c5:a1:04:7b:0b:8e:63:a3:55:d0:3f:
af:c5:4e:33:cb:db:bf:87:6e:7f:04:2d:57:da:cb:
9e:b0:47:24:9d:3f:3c:15:03:6e:2a:aa:0d:97:03:
7d:c0:37:32:51:3e:1c:38:a3:09:06:71:13:20:2c:
76:2b:64:ec:6b:7d:ed:81:91:b2:eb:42:8b:ef:d4:
2d:52:85:9a:03:4d:2d:85:25:48:f7:9e:ff:74:a9:
e9:54:2a:eb:4e:29:f7:cb:10:52:51:ed:20:68:c6:
92:1d:10:91:c5:45:f7:37:27:8e:97:f2:6e:18:76:
93:f7:d5:87:50:eb:1d:b1:ce:27:72:3f:ac:56:68:
73:e7:99:4c:8d:ac:01:43:be:7e:08:9f:5f:52:c2:
22:d1:58:7f:b3:71:be:98:ad:ca:c3:e6:d8:fa:60:
aa:d8:5c:d2:0d:2b:4e:d9:d7:56:02:4d:cb:b3:12:
f6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0A:75:A7:7B:C1:80:BF:C0:0D:A3:5C:5C:9F:A5:B7:39:A4:B6:7F
X509v3 Authority Key Identifier:
keyid:53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:89:40:d2:3f:ea:88:87:a5:21:6d:54:a8:9f:e1:2d:fc:98:
5c:0c:ff:02:8c:11:c5:3d:63:53:1d:e2:29:dd:43:8c:f7:49:
82:01:b9:29:2a:41:89:bb:c4:76:8b:03:4a:5b:d4:ae:8d:73:
88:07:38:33:bf:86:67:68:84:6c:93:16:fd:f6:bd:14:15:51:
48:39:06:5e:8c:27:b1:c2:0c:26:de:90:3d:6b:91:48:a9:59:
58:57:ce:e6:91:63:32:14:db:a3:1d:75:5d:44:4b:5a:94:83:
e0:4f:4c:fb:51:19:a9:b9:cb:30:74:f7:48:51:4b:bc:4d:dd:
0e:db:79:2b:8d:bf:29:63:95:86:f4:71:fc:4b:bc:45:5e:91:
44:50:aa:c8:3a:d3:ab:8c:dc:eb:83:16:af:55:ac:55:ac:35:
53:2e:3f:aa:5d:58:fd:de:1c:f0:df:a0:b7:d8:6b:12:81:04:
27:68:a7:99:e3:a6:7a:da:8c:d5:c1:81:d0:bd:c3:58:90:43:
71:91:51:4a:b2:15:72:13:70:fb:0f:74:65:e4:83:ae:33:0b:
65:80:7a:11:24:03:95:98:a8:d4:43:ca:8f:09:d7:14:13:f7:
37:b2:3a:1a:78:55:89:71:e7:a0:b9:3d:e8:61:16:ad:75:63:
6f:c4:3e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:03:22 2026 by rpki-client