Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
File: U4Vcjs6b1vjjlAICISzgmwX1-KA.mft (raw, json)
Hash identifier: tAWAAZ30rQOgUarFccIycg2NnAjAymgNVEIn2xtcc1s=
Subject key identifier: 60:E9:A3:A2:C4:BF:48:A9:F7:43:A9:10:15:C7:62:C4:50:C2:BB:60
Authority key identifier: 53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
Certificate issuer: /CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Certificate serial: 01A0D382D1D56582FDF3A70E1E68FACBD724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
Manifest number: 1700
Signing time: Thu 24 Sep 2026 13:02:40 +0000
Manifest this update: Thu 24 Sep 2026 13:02:40 +0000
Manifest next update: Fri 25 Sep 2026 13:02:40 +0000
Files and hashes: 1: U4Vcjs6b1vjjlAICISzgmwX1-KA.crl (hash: 96au7B0ip3BmgqlZDUhd5P1F9bBfFB+kh/75fViUb4E=)
2: wOCmhg5ukUDjqYrrNe8HL0c6WHY.roa (hash: py0DTzjoQh1bUaOEwoDGjjlil3qVagDVLMDa9WBCMVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:82:d1:d5:65:82:fd:f3:a7:0e:1e:68:fa:cb:d7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Validity
Not Before: Sep 24 13:02:40 2026 GMT
Not After : Sep 25 13:02:40 2026 GMT
Subject: CN=60e9a3a2c4bf48a9f743a91015c762c450c2bb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e7:d5:9b:64:a8:41:1a:35:c2:10:40:ea:1c:
32:ec:ce:77:66:da:4c:3f:07:19:30:d9:88:71:9f:
dc:cb:95:21:fd:83:28:70:4f:d0:b9:1a:b2:df:1c:
86:59:30:d8:9e:ba:68:c1:da:14:59:06:b1:a7:ac:
ed:00:f2:c5:c0:88:39:cf:df:c0:8f:0e:17:34:64:
90:04:ca:a5:9b:9f:3c:3f:ff:ac:c6:86:30:d2:1a:
67:0a:5f:cd:e2:93:f1:1b:a8:8e:db:c0:cf:38:62:
fa:77:8e:53:1e:d5:db:fd:12:72:02:82:c2:72:b7:
44:3a:20:ca:bf:e4:f7:14:85:12:10:3c:d9:51:68:
4d:c3:d2:a8:33:d3:80:f7:c0:20:bf:56:a5:68:ec:
79:02:ce:7f:55:5f:56:3d:fb:4e:46:9d:56:d1:05:
65:fa:1b:13:54:d2:6b:53:a7:74:aa:9e:88:53:10:
f5:28:b1:54:b2:2e:19:27:44:fa:ce:77:cc:b8:d1:
89:df:b7:39:0a:5e:1e:2b:5d:dc:36:ce:d9:2e:ee:
8b:94:e8:c4:94:da:1e:fc:3f:d1:d4:a9:0c:20:83:
d3:ec:89:a7:c6:bd:6a:19:f0:85:7d:ae:43:d0:eb:
17:6a:34:37:62:20:4d:47:ac:e3:00:f6:91:c9:ef:
5a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E9:A3:A2:C4:BF:48:A9:F7:43:A9:10:15:C7:62:C4:50:C2:BB:60
X509v3 Authority Key Identifier:
keyid:53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c2:9f:5d:46:72:e3:89:75:09:2b:60:f9:eb:51:77:de:6f:
da:14:71:a5:da:3b:17:a6:d2:69:41:78:ed:bd:59:95:7e:77:
f2:bd:82:5b:13:2f:47:e1:d8:8c:f5:c1:9f:34:66:c2:df:53:
13:ad:2c:30:c2:9d:66:86:83:97:b9:2e:2c:9f:05:b0:af:72:
02:dc:5f:71:e2:ee:5f:21:3f:15:36:38:6c:45:e7:3b:26:a0:
5e:ff:29:8e:ef:db:d9:71:6d:12:cf:b9:d0:1d:7b:cd:1e:c6:
14:ea:4f:a6:2f:d6:8a:46:2e:63:2e:92:0f:1e:22:c1:24:d2:
57:b0:81:a1:e2:11:37:4b:ee:9e:1b:15:f8:cf:48:e0:a2:ea:
03:c5:76:ce:9f:77:43:81:b0:a8:26:16:fa:dd:53:e1:6b:e2:
e5:9d:2e:08:72:8e:14:5b:1c:f8:66:cc:ef:33:bc:e8:48:48:
d9:0a:e9:66:02:47:06:4d:8b:fd:59:cf:d1:c3:9b:94:7b:a2:
70:19:5e:46:9b:ab:1e:d0:82:73:c4:b9:90:5d:05:4e:69:78:
e7:6a:1b:bf:88:2f:8c:e1:cc:42:1c:2f:dc:f9:0c:0e:69:a5:
f8:21:81:0f:7f:d4:08:d2:61:0d:72:55:a4:51:88:a0:97:d7:
17:01:b8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:54:14 2026 by rpki-client