Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
File: U-8ohOShM1XbZJo0k1J8RCKJc7g.mft (raw, json)
Hash identifier: Km8tnxcIYCftwf5j5DRB1Fk2N7XGzsMO/7CTS3uTjJQ=
Subject key identifier: 6A:19:B5:C5:E1:40:8C:C2:27:48:CE:D9:77:E0:A2:83:CF:F0:2C:41
Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8
Certificate serial: 01A1046E2756A89031453809045DDABF4B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
Manifest number: 1585
Signing time: Sun 04 Oct 2026 01:01:30 +0000
Manifest this update: Sun 04 Oct 2026 01:01:30 +0000
Manifest next update: Mon 05 Oct 2026 01:01:30 +0000
Files and hashes: 1: E-486E0-raIhh0cU7uEvlJrtVq8.roa (hash: vna5ocXCF4M8ZuD7JNv3pkr7ZzkpCUbGfeYWFBWtRTs=)
2: U-8ohOShM1XbZJo0k1J8RCKJc7g.crl (hash: gkSIbh+K+UsltMNSDRXPM+kuDztX45lF0Yym6qxBn1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:6e:27:56:a8:90:31:45:38:09:04:5d:da:bf:4b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8
Validity
Not Before: Oct 4 01:01:30 2026 GMT
Not After : Oct 5 01:01:30 2026 GMT
Subject: CN=6a19b5c5e1408cc22748ced977e0a283cff02c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:79:8e:f7:72:6e:a0:c0:af:3b:07:4e:f6:a3:
1e:29:e7:22:cd:56:b0:f4:51:d1:0c:37:ec:82:cc:
45:47:c3:12:01:db:1a:1c:da:f3:c7:2a:1f:4d:eb:
f1:f3:9e:4e:32:e7:ba:78:ee:f1:17:cd:9d:b8:65:
64:a7:9a:a7:26:a6:c0:94:48:07:ae:47:7d:c6:8d:
97:2d:d2:51:ff:e1:be:4a:37:6c:ec:e2:65:78:9a:
94:d3:1a:68:67:ec:84:ed:16:25:7b:8a:c8:8e:87:
b1:45:62:9d:b1:cc:3b:33:0b:56:34:95:25:7f:0d:
33:18:ec:39:2e:4f:92:9e:19:ee:87:d1:6c:85:6d:
f1:88:a2:7d:ec:54:29:c4:b0:06:97:79:0f:90:eb:
fa:f5:c1:9e:14:de:42:c7:ca:e9:4a:c6:d3:21:1b:
92:82:5d:c9:0b:bc:80:a3:a7:cb:7c:bd:c9:76:21:
4d:0d:4e:9e:a2:e2:33:53:fd:42:3d:f1:ad:5b:a9:
79:e4:e9:d7:f6:07:47:1e:01:bd:5f:b9:f5:71:b7:
ba:a5:21:16:bd:f2:75:b5:41:0f:96:6c:45:93:2b:
a0:58:97:45:f1:af:7b:eb:eb:7a:3e:f3:2d:d5:79:
77:f4:a5:7a:fd:39:90:d7:6f:f1:33:7e:7d:b3:87:
3e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:19:B5:C5:E1:40:8C:C2:27:48:CE:D9:77:E0:A2:83:CF:F0:2C:41
X509v3 Authority Key Identifier:
keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3f:72:ab:06:68:9b:76:1f:28:fb:8c:a7:22:61:69:b3:67:
85:90:cf:2b:8b:a2:80:b9:2a:11:57:86:e2:07:18:0a:64:c4:
42:ae:40:51:da:f6:13:89:af:2a:43:8d:3d:d1:4f:60:f8:73:
2c:88:51:fd:23:dd:af:6b:e0:1b:3d:a1:b2:c2:cf:f3:7c:ee:
0a:9a:89:81:6a:a5:9d:c3:c8:c7:f7:d1:7c:3f:70:82:71:3f:
60:d8:06:bd:4b:a4:1a:0a:84:e4:62:c7:e1:cd:89:c0:81:1d:
a2:c4:00:9b:31:04:c2:61:16:72:17:ea:df:e6:0d:fe:55:99:
d7:94:23:55:61:54:88:c4:ed:2a:12:34:07:64:a5:ee:13:2b:
42:6e:7c:38:6a:ec:04:ce:c5:cb:68:f2:e1:03:f6:96:ef:bf:
48:d6:4c:a9:3d:3c:e6:7f:01:ac:1f:ee:2f:4a:bc:10:d8:aa:
2e:75:55:ab:00:0e:e3:ef:d8:a4:80:ef:65:d7:aa:a5:e7:85:
a1:ce:33:41:e8:10:77:28:82:68:c6:5f:e8:30:9f:ef:07:e9:
27:8a:c0:fa:23:78:ef:0c:b4:15:31:1d:ba:bc:70:e7:fd:1e:
c4:88:92:4e:43:f8:23:a2:3a:38:7e:79:e6:4d:31:0f:dd:3b:
74:c0:37:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:46:40 2026 by rpki-client