Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
File: _u_5L8n-U1R7fjvh-DYIgJxFZsk.mft (raw, json)
Hash identifier: puE++RQAvps/1SVAQWKDnZ7VGo6udiiin61wfUI+0d4=
Subject key identifier: 21:E3:8E:6E:AC:27:D4:76:A4:49:05:AC:6E:7C:FC:59:9D:C4:C8:09
Authority key identifier: FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9
Certificate issuer: /CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
Certificate serial: 019E1FB5EEF1A200595BF336FDFFC5CF4E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
Manifest number: 09A1
Signing time: Wed 13 May 2026 05:01:17 +0000
Manifest this update: Wed 13 May 2026 05:01:17 +0000
Manifest next update: Thu 14 May 2026 05:01:17 +0000
Files and hashes: 1: Dr3OacsNKO2WTdv7Q8llg_soZvA.roa (hash: KbhoDJ9dQsBvDj3nKAtLQGpRyI1OX7thvD73xgl+H2g=)
2: _u_5L8n-U1R7fjvh-DYIgJxFZsk.crl (hash: g1KUegGd5aHvf/aWC2ahET2y/+XtrcZuObvJxM+4IB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:ee:f1:a2:00:59:5b:f3:36:fd:ff:c5:cf:4e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
Validity
Not Before: May 13 05:01:17 2026 GMT
Not After : May 14 05:01:17 2026 GMT
Subject: CN=21e38e6eac27d476a44905ac6e7cfc599dc4c809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fb:f9:b1:6d:04:0d:2d:25:65:94:37:cf:a0:
81:0a:be:63:13:43:4f:ac:a0:c5:64:fc:eb:34:6d:
d4:33:8e:9d:84:4e:6f:2a:91:e3:c6:00:57:4c:f0:
6b:d0:a6:10:89:b0:cc:5c:a5:33:f8:40:e7:96:9d:
7c:00:62:21:60:c0:e6:6f:ea:dd:10:c8:f1:36:8d:
0c:84:5d:d0:a1:58:9e:61:fc:63:e3:d8:a8:28:75:
d1:cb:03:39:ac:de:bf:7b:a2:36:26:f1:8e:e5:28:
4f:d8:99:0b:51:f9:be:f3:4c:a1:e8:14:36:87:fe:
3c:72:ea:77:11:ca:5f:35:4b:ef:92:34:f3:e4:b4:
b2:02:6e:86:b4:28:d1:ba:53:43:41:f9:dd:a7:42:
df:42:24:a5:16:d2:d7:65:f2:45:94:b8:ed:26:5f:
2e:9f:0e:db:71:39:81:bb:89:ee:4d:ac:0a:bc:08:
f1:19:75:3f:e1:65:61:7a:c1:a4:1e:82:73:96:f4:
2e:01:70:34:87:ff:e5:ab:41:45:e6:49:63:33:79:
45:a2:ad:1f:4f:56:ff:43:1b:65:d2:ab:d8:ca:be:
b6:04:51:29:6f:74:78:49:22:8d:91:71:b1:66:59:
ab:3d:e9:ac:d4:b6:70:87:a4:02:c0:7b:25:4a:3c:
89:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E3:8E:6E:AC:27:D4:76:A4:49:05:AC:6E:7C:FC:59:9D:C4:C8:09
X509v3 Authority Key Identifier:
keyid:FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e9:d0:62:b3:18:80:7f:9e:30:7d:b8:fa:79:c9:03:36:a4:
e3:0b:54:6a:03:a1:86:65:c1:97:e8:86:fa:42:e4:89:e5:41:
25:15:76:df:2f:1f:4a:63:65:f4:c0:05:20:0f:5d:21:91:96:
27:25:f5:57:c5:12:6e:19:99:15:8c:a1:d7:67:5c:fb:11:45:
b2:25:c5:20:2c:e8:06:a6:07:4c:b2:75:fc:b1:87:d1:58:34:
94:ac:07:f3:3a:98:34:63:7a:e9:43:d3:29:07:6f:48:c9:ed:
25:a4:3e:27:3d:04:eb:69:07:2e:f2:d1:44:b0:1c:c0:64:ce:
04:3a:bb:b3:2a:bc:fb:d5:21:1e:4d:2e:47:bc:9d:e3:91:29:
d7:aa:70:b7:cb:ae:d0:e3:f9:fc:c8:86:2b:a0:bd:e5:b9:54:
eb:d7:f1:a2:ac:08:18:5b:c3:56:a4:3f:55:2b:3b:9f:80:50:
ca:00:c7:ea:55:43:c8:5e:c6:5c:4e:3a:31:d8:28:8e:0b:53:
92:6d:44:b2:86:ec:d1:df:7c:b5:b8:22:19:c6:1a:90:1d:69:
12:81:c0:1f:91:7e:6e:1a:ea:69:91:0c:06:89:98:12:c2:00:
c9:54:47:c2:76:15:1b:64:de:8f:85:de:76:43:9c:a5:05:eb:
8d:d6:8d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:15:24 2026 by rpki-client