Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
File: U-8ohOShM1XbZJo0k1J8RCKJc7g.mft (raw, json)
Hash identifier: jLJBJ+B2J12lV/nRGO7nvOJOfGf1e0n2CuRFBFtWy3I=
Subject key identifier: 7D:9A:92:57:7B:CC:5D:6F:82:B2:59:8C:1F:A8:31:C4:5E:7F:9C:A0
Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8
Certificate serial: 019D299739D25D8CA3D4751CD4A518C996A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
Manifest number: 1386
Signing time: Thu 26 Mar 2026 10:01:09 +0000
Manifest this update: Thu 26 Mar 2026 10:01:09 +0000
Manifest next update: Fri 27 Mar 2026 10:01:09 +0000
Files and hashes: 1: E-486E0-raIhh0cU7uEvlJrtVq8.roa (hash: vna5ocXCF4M8ZuD7JNv3pkr7ZzkpCUbGfeYWFBWtRTs=)
2: U-8ohOShM1XbZJo0k1J8RCKJc7g.crl (hash: kCkotuyI8O0NCQJ0hdy5yknpuzcRwHLzSZc6/usayp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:39:d2:5d:8c:a3:d4:75:1c:d4:a5:18:c9:96:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8
Validity
Not Before: Mar 26 10:01:09 2026 GMT
Not After : Mar 27 10:01:09 2026 GMT
Subject: CN=7d9a92577bcc5d6f82b2598c1fa831c45e7f9ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c5:5d:24:7c:92:02:55:2e:0b:49:8e:90:35:
5c:5a:db:9d:dd:de:5d:99:cd:11:b7:85:f7:c6:b1:
2c:d8:00:ec:6a:85:b6:94:60:9f:27:1f:e7:ea:d0:
70:d8:0d:a7:97:53:a7:16:9c:2d:e2:db:8b:43:46:
15:b5:44:1a:50:02:13:db:0d:7b:90:fb:29:30:49:
d6:f4:f0:83:54:fe:75:07:34:fc:4f:b9:1e:ed:e9:
cc:d3:c7:56:e9:4c:f0:b0:4a:50:b7:54:90:b3:ab:
72:45:f9:30:82:d1:11:cd:75:55:86:c4:d1:5a:9c:
26:37:1d:0a:bb:bc:49:2d:4c:98:0a:06:83:60:be:
27:34:c1:54:b3:ad:80:b5:eb:b5:8a:fc:dc:76:a8:
7e:0d:90:95:32:ca:04:1f:26:28:e3:1a:16:f1:ca:
0e:38:b9:32:2a:ad:50:0b:1d:a1:06:6b:f6:4d:6a:
b1:e8:41:e0:c3:a1:7a:d8:8b:f0:d7:e5:99:dd:1e:
4d:b1:97:eb:4c:a5:dd:54:2c:81:43:05:9e:d2:ae:
ba:5f:5f:d5:2d:a7:89:4c:7b:c3:ab:40:92:fa:f3:
ea:73:a6:98:e7:1c:47:c7:47:0c:f1:71:ea:d5:62:
ea:d2:a4:11:41:bd:1c:38:b1:f8:82:81:49:90:10:
67:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9A:92:57:7B:CC:5D:6F:82:B2:59:8C:1F:A8:31:C4:5E:7F:9C:A0
X509v3 Authority Key Identifier:
keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ba:3f:50:b3:0d:66:5c:08:03:fa:ce:2f:e0:50:00:28:52:
2c:24:be:5c:c8:3a:3c:7c:2a:f7:54:50:13:6e:21:f5:92:bf:
af:32:a8:10:ec:ec:62:cf:c5:75:ef:c6:d0:a6:a6:77:e0:76:
b4:ba:7a:ff:d1:08:e7:a6:be:f0:77:1a:d3:b1:2c:63:26:8c:
1c:7d:bb:05:03:72:80:78:68:0f:49:c8:43:d0:84:47:ba:77:
f0:ea:e6:28:3d:24:78:ed:2e:0c:98:11:0b:97:d2:2f:4f:78:
7c:2e:8f:23:d6:fe:c7:3f:af:0f:f8:82:b4:58:cd:c5:5c:f6:
dc:b0:a0:d0:9e:aa:f9:a2:b9:35:5b:75:ad:e8:14:0d:1a:df:
59:41:a6:15:ca:0b:75:4c:d9:de:87:cc:c2:42:63:4c:82:51:
d6:b4:13:cb:e3:43:ac:41:14:18:e6:31:b6:33:44:ef:b7:0b:
1d:a4:84:a7:13:bb:b9:45:68:a3:ae:ce:37:e5:b1:18:c0:c5:
f1:3e:8b:ca:4c:22:a9:4e:8d:03:1b:8c:2b:12:3d:6b:fa:d0:
97:7c:b9:90:42:c5:90:43:81:24:7b:f0:0d:08:30:d7:f6:06:
9c:b6:f2:91:8b:03:64:77:24:d8:34:d3:d2:b0:87:55:7b:35:
c7:df:0b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:04:53 2026 by rpki-client