Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
File: U8DiB45PPrpfh5UD_dgJw4O7dig.mft (raw, json)
Hash identifier: nSE1/QfBReFjRakCivLHDPF449q8yEOb7H0SE4LG1xM=
Subject key identifier: 90:F7:39:C4:6E:AA:2C:EE:2F:2D:DE:08:10:73:6F:88:1C:08:06:17
Authority key identifier: 53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
Certificate issuer: /CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Certificate serial: 019F9090AD6E11EB8D150E815FC69E841F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
Manifest number: 13C3
Signing time: Thu 23 Jul 2026 20:00:28 +0000
Manifest this update: Thu 23 Jul 2026 20:00:28 +0000
Manifest next update: Fri 24 Jul 2026 20:00:28 +0000
Files and hashes: 1: 1-GMVzwMDxSiYZaD7figfVQ0BMo8.roa (hash: 6cucZyQkv8Clqp8Dmj2mB2zHAVxhCmtUwPlqKFCqEpw=)
2: U8DiB45PPrpfh5UD_dgJw4O7dig.crl (hash: yQQZrl8GcqC5lGkDH6aThHHHTnnQp69kuZLcOXjzemA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:ad:6e:11:eb:8d:15:0e:81:5f:c6:9e:84:1f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Validity
Not Before: Jul 23 20:00:28 2026 GMT
Not After : Jul 24 20:00:28 2026 GMT
Subject: CN=90f739c46eaa2cee2f2dde0810736f881c080617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a9:dc:5c:af:3e:7a:df:56:47:a5:a5:75:f3:
a1:f7:46:60:1d:e3:3c:4e:71:f7:aa:ae:85:9b:7b:
a8:b6:3b:3b:fc:54:44:c9:9b:b6:02:b8:98:20:90:
4d:90:b2:f2:7f:da:7c:c8:fb:17:3c:e4:e4:6d:8e:
e9:6f:db:e1:79:8f:7d:88:1f:3f:6c:a7:c4:27:19:
1b:5d:7b:df:00:b7:5c:08:cf:fc:18:19:b6:cf:5f:
a9:2d:4d:fe:03:67:99:f9:7b:eb:d6:20:7c:92:ed:
50:16:2a:c6:22:38:e2:52:6c:49:88:25:28:4a:8f:
eb:7f:29:5a:f7:21:26:65:19:b5:23:9b:c2:3b:5c:
0d:05:2e:54:45:2b:f3:25:3b:0a:cb:7f:83:60:28:
1e:4b:4f:a0:5a:24:46:36:7f:0a:14:39:f2:33:b0:
f6:09:44:b0:56:ff:6d:38:3b:4c:af:e6:63:5e:0d:
c7:f8:d2:13:58:49:5b:bb:ca:d9:ff:78:7c:f9:e4:
25:e7:91:58:67:06:d0:60:67:77:05:41:c6:e1:6a:
c2:b9:6b:51:89:af:9b:18:2d:95:ec:76:2c:09:40:
a4:8d:3e:15:b9:44:19:ea:62:bd:ec:f4:11:ca:58:
6e:6c:77:6e:4f:07:98:46:a3:fd:db:05:41:5f:7f:
34:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F7:39:C4:6E:AA:2C:EE:2F:2D:DE:08:10:73:6F:88:1C:08:06:17
X509v3 Authority Key Identifier:
keyid:53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:76:34:91:f8:32:ab:00:27:18:bd:c0:b4:b9:3f:8d:72:de:
5f:db:bb:53:68:a0:f2:3d:8f:d4:94:07:2e:78:40:77:fb:b9:
23:5a:07:8e:48:32:b5:01:38:2a:01:8d:3d:d8:9a:0b:68:1f:
dc:48:69:df:13:1c:16:d6:1f:f4:c6:3f:ec:6d:4d:16:a0:f7:
66:35:5d:7f:3d:14:37:b4:aa:38:dd:df:4f:fc:50:08:32:d8:
5b:4a:46:55:3b:c9:5c:d6:d5:65:89:e1:9b:01:f8:e0:05:68:
69:3f:41:2f:ad:69:4f:f5:f9:fa:f9:78:5c:d4:b5:f0:5f:15:
bc:52:3d:30:18:79:23:94:db:67:6f:b3:a0:82:34:b5:6a:4c:
48:b4:dd:44:71:43:0c:f3:fa:d6:94:e2:c5:4d:3b:5b:12:6d:
78:47:51:56:f0:a5:5a:3c:1c:60:40:e4:4a:52:24:9d:51:6f:
0e:68:59:00:bf:4a:5b:bc:4f:93:0b:3e:30:61:fd:af:b7:b9:
43:65:da:12:78:f2:70:24:6a:91:09:4f:31:f6:6d:2b:e1:13:
60:78:db:60:25:76:67:2a:1d:2b:a4:3c:20:0b:90:bc:40:c5:
a2:a3:27:fc:42:55:e8:22:4c:5a:89:e5:20:1f:f1:b5:6a:02:
75:ad:62:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:47:04 2026 by rpki-client