Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
File: U4DNitL4ThTptbZCOJN7bUIH4iE.mft (raw, json)
Hash identifier: 79VRIdmyGV56rKtFCv0x6YvtHcIOKJBTidAp75CB2Ek=
Subject key identifier: E1:67:BC:09:66:31:27:AA:3F:70:A4:9A:DA:B7:13:74:D7:1D:D1:E3
Authority key identifier: 53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
Certificate issuer: /CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Certificate serial: 01A1DE3982D355ED137A3562BCC6C001BB79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
Manifest number: 0C8C
Signing time: Sun 15 Nov 2026 08:01:13 +0000
Manifest this update: Sun 15 Nov 2026 08:01:13 +0000
Manifest next update: Mon 16 Nov 2026 08:01:13 +0000
Files and hashes: 1: 3gqZ21ZiXWY8Si7snLEpMyMD74g.roa (hash: X/t/+w5YUcvfs+3nGPGjtJ/Fhg4+BcTTk+/zNwVCFHo=)
2: U4DNitL4ThTptbZCOJN7bUIH4iE.crl (hash: xfYiOGAs91ptOfyOY8RvlcendIfRlus5BVMG9QjvPP4=)
3: wlQ0t9w-oLkcGuhWCMs9Bpc2jac.roa (hash: 3f94DHQ4ocfCNVkT9++XQcXx0yPrdObfv5lQ1Z9Etr8=)
4: x0JWlbPq7LDeu4Dm0_N7oeK38ow.roa (hash: tbOy3beQewSvz0vDOcHNb1UEiU3Vzot4Nk2R+I8UvvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:82:d3:55:ed:13:7a:35:62:bc:c6:c0:01:bb:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Validity
Not Before: Nov 15 08:01:13 2026 GMT
Not After : Nov 16 08:01:13 2026 GMT
Subject: CN=e167bc09663127aa3f70a49adab71374d71dd1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e5:27:f1:26:a8:ce:22:91:17:29:d2:b7:61:
2d:a5:43:2a:da:8f:13:96:66:10:0a:0d:ca:30:63:
ba:dc:65:bd:3f:70:66:32:d9:98:59:0f:5b:32:50:
62:6c:dc:18:c7:de:c0:13:9e:f8:0c:51:bc:38:e0:
8e:74:3d:35:61:5e:e9:b1:19:9f:e9:ae:63:d1:bf:
29:68:de:6e:c7:35:fb:0e:da:9a:ea:8f:30:17:6d:
91:61:49:73:0a:1a:60:0e:42:56:c3:71:d3:72:1f:
60:72:85:6a:7c:f6:84:cb:ec:71:d8:42:93:f0:81:
50:ac:1e:f6:1b:3d:7a:a2:ad:cc:8e:fc:f4:ce:02:
f7:35:89:d7:10:e3:5d:88:8f:70:e4:24:d8:3a:0d:
16:2e:bc:4e:de:92:75:fc:ab:fd:d6:85:0e:d9:16:
86:8b:27:da:64:e5:7d:a6:37:4f:d6:09:86:ef:a1:
23:e1:de:98:5b:a4:35:8b:9d:c9:04:f4:5a:1c:9f:
2d:09:80:6c:c4:dd:c4:ac:a4:ec:89:a7:64:66:c7:
fc:99:38:66:10:12:5c:cd:4d:02:dd:50:15:c3:d6:
3b:35:23:87:ab:6f:42:3f:97:07:9a:fd:97:b6:4f:
0f:26:6f:f1:83:d9:f8:2f:76:a0:fb:f7:d9:4c:81:
08:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:67:BC:09:66:31:27:AA:3F:70:A4:9A:DA:B7:13:74:D7:1D:D1:E3
X509v3 Authority Key Identifier:
keyid:53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ca:0b:df:12:ce:10:4c:5e:a0:90:70:bd:41:53:cf:18:97:
e8:b0:dc:d6:82:19:14:b4:95:ab:ba:e1:66:66:dd:9d:e4:61:
7e:30:c1:ff:0e:c9:94:41:ca:05:ff:a2:15:8b:cb:81:4d:91:
63:9f:57:ff:4e:d0:58:26:12:29:47:27:89:57:c2:e5:fc:ee:
05:a1:3f:23:21:f4:83:75:06:51:9f:7c:bc:ff:ac:20:f7:5b:
14:21:c3:66:5f:e8:35:56:bb:20:05:c2:c9:55:16:d8:e1:99:
2c:54:42:38:64:b9:69:80:c7:8f:4a:b4:fd:29:7b:e0:78:ae:
a0:a6:80:d8:41:45:22:19:ef:8d:d9:a4:fb:fd:39:5d:a1:a8:
49:c4:3a:fa:64:6e:ee:cf:1a:55:12:62:4e:3a:2a:8c:14:2d:
9f:c5:b4:47:07:93:18:3a:bc:e5:b0:39:32:07:fa:b7:58:fd:
86:2e:ea:d1:03:7c:87:61:bb:38:b7:99:ab:fc:b0:b3:81:4e:
2a:78:da:e4:8a:40:3f:71:f8:d9:05:78:03:73:e1:2b:67:e6:
9c:08:41:92:05:68:a8:82:38:17:d8:c9:6e:65:58:c4:35:3f:
eb:b2:5e:66:34:a9:ac:61:bd:89:63:a1:e9:09:34:c9:c6:52:
4a:4d:c3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:39:17 2026 by rpki-client