Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
File: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft (raw, json)
Hash identifier: zYkTNGucmPUggxfzAFRy0Gmi610obF24zUrJgDhW6tU=
Subject key identifier: A5:AB:D6:74:D5:D1:5B:FB:75:7F:1E:A1:CE:66:C5:E0:B6:A0:96:46
Authority key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
Certificate issuer: /CN=b68f940f1cc577f370f28428850dc7bf7418f121
Certificate serial: 019E1EA36656C0D16BCF6CA8D814D511DF13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
Manifest number: 108F
Signing time: Wed 13 May 2026 00:01:25 +0000
Manifest this update: Wed 13 May 2026 00:01:25 +0000
Manifest next update: Thu 14 May 2026 00:01:25 +0000
Files and hashes: 1: ILGhz3ePO9oxIjIbV8ykYhaN2H4.roa (hash: VOXzwbv4ZGeGv9kyp7nhD/yFTySLzaFzJgbxt6Ep0+U=)
2: eU85RU0taQL8h-5P8OgU9OyopXY.roa (hash: 9O8C8fNo7lE1aPgGPT+DIp3qar7x4bHGxqk5sLTXTcI=)
3: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl (hash: CZkX4KhEYKY3UDrcCndrb2FBuGLTKU4dF1yIIaHnI0A=)
4: w1gMt94WQ5eAPDOTWGJbst0F5fM.roa (hash: qfjHzZsPbhZdXrk21Rq3gvOAzicOO4wsSfCE26q4PYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:66:56:c0:d1:6b:cf:6c:a8:d8:14:d5:11:df:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f940f1cc577f370f28428850dc7bf7418f121
Validity
Not Before: May 13 00:01:25 2026 GMT
Not After : May 14 00:01:25 2026 GMT
Subject: CN=a5abd674d5d15bfb757f1ea1ce66c5e0b6a09646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e7:75:f1:07:f4:21:81:57:6a:00:0f:ad:9c:
21:1c:c1:f8:b1:2f:91:1d:c1:70:f6:45:4a:61:53:
a0:87:c3:f8:1a:fd:4e:b1:41:1c:5b:27:cd:c7:6a:
c2:07:84:29:8e:3a:f5:b8:f0:35:a0:bd:94:0b:3f:
4c:54:7c:51:0d:a9:d5:9c:49:53:49:76:92:b3:7c:
d0:43:6c:5c:03:c5:e4:7f:83:36:7e:ec:07:f1:6b:
30:a2:19:21:04:58:b7:1b:1a:07:01:ec:09:e3:8c:
69:9b:4a:fc:ac:8f:b1:d9:c4:b3:70:84:e4:28:ac:
7f:29:77:6b:7d:59:5b:6e:37:88:70:a2:d9:e4:50:
37:ef:85:47:0a:a3:05:0d:20:03:67:a7:6a:6b:97:
95:47:36:ec:27:03:77:11:ea:ea:78:18:bf:21:cc:
27:7b:fb:55:87:f8:f4:7a:a7:f7:2e:96:a4:9e:d0:
ab:25:26:60:f1:f8:24:71:2b:2a:b9:bb:94:63:89:
20:ed:33:17:0c:e3:f5:96:68:4a:b4:4c:b2:ce:70:
cd:46:5e:ea:91:2e:3a:d8:16:b8:77:6a:16:54:ee:
7e:10:f4:50:44:00:a5:e3:cf:61:89:20:2a:84:73:
e9:42:4f:7e:57:9c:07:f7:62:6b:49:d2:bf:4d:88:
f0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AB:D6:74:D5:D1:5B:FB:75:7F:1E:A1:CE:66:C5:E0:B6:A0:96:46
X509v3 Authority Key Identifier:
keyid:B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9f:cf:05:68:e7:d0:a5:44:e4:c1:ba:3e:67:cb:e5:08:45:
3a:9d:bf:6d:f1:b9:82:9b:9a:fc:06:a9:da:fb:28:74:07:24:
55:2e:a5:48:b2:f1:1e:1b:05:bd:22:bf:55:f1:01:30:91:7f:
3b:f2:a0:a1:69:4a:30:16:7e:a3:c3:25:35:3e:91:1a:5c:86:
36:9b:c5:f0:9e:8d:fc:d2:f3:91:fc:c3:3e:d9:36:93:4c:7f:
c8:cc:77:a9:ec:c0:10:52:42:4e:8d:fd:91:9d:ac:8c:94:d4:
83:aa:a7:20:f3:17:a2:66:b7:2f:58:6b:83:e3:e4:cf:36:82:
a3:e5:ca:f9:6f:e9:02:d5:0f:bc:1d:e2:9f:b9:b2:b6:af:83:
13:85:39:6a:88:0f:08:dc:50:fe:0f:90:75:c0:fe:d2:59:80:
67:f3:39:bc:2f:1b:73:66:20:8f:76:c4:e8:70:7c:fe:40:f8:
1e:6a:41:2c:80:5a:11:b0:15:bf:16:13:cb:ba:12:77:00:18:
60:4e:d1:84:74:75:b3:dc:04:c3:14:ab:2f:a9:3b:bb:a2:73:
08:7f:34:80:11:9e:b0:81:6f:0d:48:2a:ca:b6:e4:f7:73:38:
34:8f:20:f2:cc:82:67:d9:9c:9a:07:b8:b2:7c:bd:ce:9e:65:
ad:2c:86:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:47:57 2026 by rpki-client