Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
File: U4Vcjs6b1vjjlAICISzgmwX1-KA.mft (raw, json)
Hash identifier: YsEqbkyojyCy5Iv8sKF3JWTBSWXDXtDCUHh/MIWr9UM=
Subject key identifier: 8A:9B:63:FF:CF:87:4E:EE:DF:1D:12:6B:31:ED:7E:05:D3:0A:09:70
Authority key identifier: 53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
Certificate issuer: /CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Certificate serial: 01A1DE02C93656A917CC7A7D888DA62FC8FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
Manifest number: 178A
Signing time: Sun 15 Nov 2026 07:01:26 +0000
Manifest this update: Sun 15 Nov 2026 07:01:26 +0000
Manifest next update: Mon 16 Nov 2026 07:01:26 +0000
Files and hashes: 1: U4Vcjs6b1vjjlAICISzgmwX1-KA.crl (hash: VtrcPe24lc3aLc7ovVbVPAVSnybZL01hWIyTZwq7VX0=)
2: wOCmhg5ukUDjqYrrNe8HL0c6WHY.roa (hash: py0DTzjoQh1bUaOEwoDGjjlil3qVagDVLMDa9WBCMVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:c9:36:56:a9:17:cc:7a:7d:88:8d:a6:2f:c8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Validity
Not Before: Nov 15 07:01:26 2026 GMT
Not After : Nov 16 07:01:26 2026 GMT
Subject: CN=8a9b63ffcf874eeedf1d126b31ed7e05d30a0970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:95:ae:cc:c1:7e:9f:80:7a:c3:67:94:da:
52:36:36:c3:70:48:20:3f:06:56:f5:54:81:68:85:
54:4b:a6:8c:69:89:6e:dd:84:8e:83:b1:f7:69:9f:
80:c2:4f:eb:83:53:fd:8b:c3:11:fb:7f:78:be:81:
d1:f7:03:28:e1:b3:7c:52:81:50:89:25:68:3a:ab:
99:ae:a8:e3:6a:d1:75:d1:9f:02:f6:cc:8c:1c:3f:
6a:98:19:1e:c1:3a:15:0f:82:f1:d5:2d:9a:c0:69:
6e:69:e9:90:9b:89:5f:5a:e3:b2:a2:5b:e6:c4:b5:
6b:8a:a1:b7:b6:e1:d5:43:e6:b5:40:52:af:0f:17:
25:7c:e9:6c:a9:32:c7:4b:39:b3:b9:26:b8:c8:ca:
9e:ec:c1:1e:f9:06:b7:d8:10:a0:8f:bc:61:58:f7:
d2:c6:af:fc:85:9f:f6:81:9a:d3:b7:2b:19:8e:2d:
7f:ab:7a:f2:6d:27:6b:dc:85:ea:e5:c8:09:7e:db:
e9:33:29:53:0e:8f:54:5e:b0:f1:09:5f:14:18:05:
0f:34:f4:9a:fc:bb:ca:f7:99:a5:ee:5e:c8:a8:9d:
5a:e1:e3:ec:1f:2f:ee:35:6b:0d:c1:44:37:80:bc:
a7:7d:c5:2e:7f:5a:eb:74:1c:1c:52:9a:c0:de:99:
20:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9B:63:FF:CF:87:4E:EE:DF:1D:12:6B:31:ED:7E:05:D3:0A:09:70
X509v3 Authority Key Identifier:
keyid:53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:da:bd:c4:21:61:a3:b1:eb:f2:44:d9:e4:8e:1c:fb:ef:64:
0c:64:71:ed:13:1e:74:74:43:0a:4f:ff:18:3d:ae:a2:6c:b4:
a5:d8:a2:c2:16:c0:18:7c:94:bf:36:e8:79:a2:04:dd:8c:cd:
ab:2c:11:f7:15:79:e7:ac:12:0c:65:68:30:ce:6a:a2:bd:64:
9e:11:fc:52:48:d9:11:50:19:85:16:3c:8a:2a:1e:98:a9:56:
51:60:0f:e5:08:d6:cc:e7:74:ed:85:9e:6d:9f:8a:e6:cc:a9:
6a:be:50:4f:62:7f:c7:f3:0d:50:4f:d3:64:cb:ca:18:11:88:
04:9d:81:bd:10:b8:e0:ba:fa:4b:e8:70:ca:05:32:d2:c4:66:
c1:54:0e:35:e0:9d:58:e7:26:40:ba:01:7c:7f:32:3f:cf:4d:
1c:1f:ae:b9:5e:21:4d:d1:80:58:e6:52:ac:85:65:46:f9:c3:
72:7a:50:46:67:c7:63:fe:2e:95:3c:17:52:78:95:c5:6a:c3:
ca:dd:09:78:a9:8b:0f:df:42:ef:20:a8:bf:e6:45:de:64:85:
73:2b:d9:5e:8c:29:d0:b7:99:4f:e4:52:43:53:18:92:7d:41:
7b:83:75:07:da:4c:03:f5:07:6c:6e:9f:3a:db:1f:56:b9:44:
ff:fd:60:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:31:54 2026 by rpki-client