Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
File: U4DNitL4ThTptbZCOJN7bUIH4iE.mft (raw, json)
Hash identifier: BbcM2lzI00GHFcyfUB2L23Za5KjQSO2iWxef0twUs0g=
Subject key identifier: 5F:CD:9F:A4:7D:FC:C8:1C:3C:AE:DD:F5:0D:B7:55:B6:A1:9B:B3:63
Authority key identifier: 53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
Certificate issuer: /CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Certificate serial: 01A0D7963FA967E23D98762F0BEA5BD08EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
Manifest number: 0C04
Signing time: Fri 25 Sep 2026 08:02:23 +0000
Manifest this update: Fri 25 Sep 2026 08:02:23 +0000
Manifest next update: Sat 26 Sep 2026 08:02:23 +0000
Files and hashes: 1: 3gqZ21ZiXWY8Si7snLEpMyMD74g.roa (hash: X/t/+w5YUcvfs+3nGPGjtJ/Fhg4+BcTTk+/zNwVCFHo=)
2: U4DNitL4ThTptbZCOJN7bUIH4iE.crl (hash: hWJ7+aZ7bftOCT8IJ+LroGvTV++PkRTvoVzyrqEukXY=)
3: wlQ0t9w-oLkcGuhWCMs9Bpc2jac.roa (hash: 3f94DHQ4ocfCNVkT9++XQcXx0yPrdObfv5lQ1Z9Etr8=)
4: x0JWlbPq7LDeu4Dm0_N7oeK38ow.roa (hash: tbOy3beQewSvz0vDOcHNb1UEiU3Vzot4Nk2R+I8UvvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:3f:a9:67:e2:3d:98:76:2f:0b:ea:5b:d0:8e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Validity
Not Before: Sep 25 08:02:23 2026 GMT
Not After : Sep 26 08:02:23 2026 GMT
Subject: CN=5fcd9fa47dfcc81c3caeddf50db755b6a19bb363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:cf:45:94:bc:0b:e6:05:fc:a2:3d:32:8c:
d0:19:57:d1:c7:47:cc:42:44:17:2b:71:98:13:31:
4e:0a:4e:4f:db:cd:00:79:da:bb:6d:2f:b3:03:09:
37:1d:45:de:49:00:e3:5d:2d:46:b1:0b:92:df:61:
62:26:17:a8:c8:23:85:67:dd:94:2f:46:d1:17:36:
7c:11:cd:65:9e:8e:3e:98:41:b2:ea:45:53:26:6c:
9e:53:85:b2:5b:11:40:59:d0:f3:8d:b2:c0:10:ef:
da:4e:4f:c6:1a:6b:dc:40:f4:6c:b2:9e:6d:5c:de:
38:64:ad:b4:da:8b:47:81:59:7a:d4:e1:90:5c:0d:
f2:56:82:b3:99:c8:29:94:c7:ea:b2:5e:e0:66:eb:
ff:3e:e1:e9:ab:b7:51:e4:06:40:52:56:97:99:34:
43:33:67:d8:08:11:6b:10:48:bd:25:75:bd:bc:42:
64:09:02:e5:7f:5e:24:46:5b:9e:6b:af:3d:5c:e5:
68:07:1e:64:23:c8:f6:7c:d2:da:26:1d:fc:c8:6d:
a1:af:2a:e9:6b:7a:d3:dc:69:8a:10:af:ec:93:cb:
f8:5a:f3:25:e3:66:7f:ba:5a:84:5f:72:23:89:26:
a7:60:cd:4a:84:13:16:a3:47:b3:d8:ed:88:c3:f3:
1e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CD:9F:A4:7D:FC:C8:1C:3C:AE:DD:F5:0D:B7:55:B6:A1:9B:B3:63
X509v3 Authority Key Identifier:
keyid:53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:97:f8:97:45:77:f0:cb:55:18:69:03:d6:0e:4e:f2:59:b3:
3e:83:1a:20:81:12:59:8f:77:82:dd:95:9a:97:ad:d9:b3:79:
c1:97:f5:35:ba:c7:bc:62:e5:06:6e:9c:1c:9f:a6:32:dd:73:
d1:b1:ef:53:6f:88:11:e5:67:47:2d:6c:10:41:6e:3a:33:70:
9b:98:70:d0:6c:6f:ce:b2:26:8c:ed:33:f1:1e:1f:ba:0e:b9:
73:f4:6f:2b:fd:61:00:58:13:6a:32:64:eb:66:7a:09:7e:49:
ed:ba:3f:39:bb:80:58:da:c0:e3:a2:9d:0c:08:b6:89:75:a6:
c6:1e:90:d5:31:fd:bf:4b:61:66:f7:6d:f8:e2:5b:69:7f:a0:
fd:47:35:97:de:61:64:f6:b5:f6:1a:2b:77:57:7d:b1:c0:03:
fa:47:87:a1:e8:23:11:35:2d:45:fc:28:87:02:17:d4:99:2f:
fb:60:d7:ae:fb:3d:2c:53:a6:ae:b9:1f:b2:d8:d7:7d:4d:44:
b3:59:2e:58:b7:c6:be:91:3f:9d:68:52:24:1a:63:ee:e4:a6:
6b:5d:1a:f4:3c:5f:a6:f5:bb:27:7a:63:e6:c5:66:34:0f:7e:
c0:03:5c:22:5a:bb:66:68:3c:b1:a5:60:ea:88:83:0e:8a:1e:
1f:4f:da:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:31:53 2026 by rpki-client