Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
File: U8DiB45PPrpfh5UD_dgJw4O7dig.mft (raw, json)
Hash identifier: ESOkCn8Narue80MTP71/feH7nHNo5848zEwNBNx5k3Y=
Subject key identifier: 4A:C8:7B:16:45:C8:C0:16:DB:C6:F6:CD:F1:0E:9A:3B:D1:C7:BA:30
Authority key identifier: 53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
Certificate issuer: /CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Certificate serial: 019E1FB5BE0B350C8D609C43B4D367FE34CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
Manifest number: 1304
Signing time: Wed 13 May 2026 05:01:04 +0000
Manifest this update: Wed 13 May 2026 05:01:04 +0000
Manifest next update: Thu 14 May 2026 05:01:04 +0000
Files and hashes: 1: 1-GMVzwMDxSiYZaD7figfVQ0BMo8.roa (hash: 6cucZyQkv8Clqp8Dmj2mB2zHAVxhCmtUwPlqKFCqEpw=)
2: U8DiB45PPrpfh5UD_dgJw4O7dig.crl (hash: F03ZItNsl2BwrHP4YGR+ZKPNAK5LcAVJf/GdmOgrVzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:be:0b:35:0c:8d:60:9c:43:b4:d3:67:fe:34:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Validity
Not Before: May 13 05:01:04 2026 GMT
Not After : May 14 05:01:04 2026 GMT
Subject: CN=4ac87b1645c8c016dbc6f6cdf10e9a3bd1c7ba30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:09:1d:5d:6d:80:68:e6:cb:02:79:3f:20:75:
e2:4e:12:33:9c:46:b2:a0:4b:7b:6e:10:88:51:6a:
32:35:c1:a7:87:d3:57:cb:98:97:cc:21:09:d4:1a:
0a:90:8c:4d:b0:e9:03:b6:4a:64:d4:66:ae:2e:32:
30:14:5c:82:c2:95:7e:db:27:db:7b:dd:35:f3:8e:
c6:dd:da:b9:15:36:4b:1f:75:80:af:37:5d:82:47:
19:25:c2:f6:75:12:5c:1a:57:7b:95:3d:42:48:da:
da:e5:ca:32:0c:bc:1d:87:1d:06:45:0a:39:11:78:
5b:54:e5:a4:d0:cd:a1:6b:f8:ac:2f:b4:c6:0f:70:
f0:c8:54:50:44:7c:5a:79:be:1c:22:db:5f:94:a7:
3d:ff:08:98:c6:91:e6:fb:f4:82:75:03:75:89:ec:
81:33:b8:41:76:65:c5:9f:bd:37:1d:34:08:ed:95:
d3:3f:e5:1e:c6:29:b5:8b:fb:98:ca:b4:62:9f:94:
80:6b:47:b7:39:23:db:24:f6:65:bf:ba:fe:12:0c:
c4:ce:2a:f1:4d:36:18:64:cc:0a:48:5e:bf:a5:1a:
c0:31:b8:c6:a3:bb:a2:8e:91:1a:05:c9:9c:e4:84:
76:39:93:0e:7e:33:cf:3a:12:a5:76:2a:bb:1f:5d:
ec:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C8:7B:16:45:C8:C0:16:DB:C6:F6:CD:F1:0E:9A:3B:D1:C7:BA:30
X509v3 Authority Key Identifier:
keyid:53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:df:25:b4:11:d8:d1:d2:bd:7a:a1:b5:ad:01:b5:1e:15:a5:
3b:b2:0c:cd:3b:4a:2a:af:ce:93:e4:d2:1b:8e:7d:75:7e:36:
b5:11:d8:46:40:e5:b1:61:72:db:b1:45:8f:0e:35:cd:47:60:
0e:1a:cb:25:39:f3:e0:94:44:8f:b1:bd:5b:2e:f1:3c:1d:21:
bc:69:fa:ee:1b:68:82:54:18:b7:31:84:c4:a7:4c:de:25:50:
04:94:6c:34:9b:14:ef:e1:b7:c1:d1:7d:38:8d:26:70:7e:41:
22:7d:64:3b:ac:ab:1e:fc:00:f3:26:f3:f1:71:88:55:62:ff:
a7:3f:c1:29:3b:ce:68:78:b5:58:29:ce:ec:86:81:35:8c:9f:
4d:27:03:c6:2d:0b:ca:9f:f7:aa:7f:4c:d5:a6:9b:6d:f1:ec:
8c:93:57:7e:5b:33:dc:d5:78:f9:ee:ce:ef:65:d7:39:28:22:
b4:b8:27:a9:75:79:c3:9e:8f:6d:b8:71:30:95:c4:3b:ea:ea:
7b:19:25:e1:fa:10:d4:7f:e6:2d:54:ac:98:71:7a:6a:19:80:
8a:2a:40:cf:cf:15:26:78:6e:e8:f0:e9:a6:58:31:0c:b7:a1:
a6:7b:ba:a9:58:03:fc:64:a8:63:57:34:e6:6d:8a:f4:56:51:
0b:c8:6f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:46:25 2026 by rpki-client