Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
File: U4Vcjs6b1vjjlAICISzgmwX1-KA.mft (raw, json)
Hash identifier: a8CXH0uCFgCarEl7IId59GwINUxwalEt4JdPNDAPVMw=
Subject key identifier: 00:2A:E1:9D:AF:4F:F7:D9:E7:7B:09:07:41:1C:B9:D3:D2:37:81:CB
Authority key identifier: 53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
Certificate issuer: /CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Certificate serial: 019F90FF14D489151830DF9B7F49B8E9CFFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
Manifest number: 1659
Signing time: Thu 23 Jul 2026 22:01:03 +0000
Manifest this update: Thu 23 Jul 2026 22:01:03 +0000
Manifest next update: Fri 24 Jul 2026 22:01:03 +0000
Files and hashes: 1: U4Vcjs6b1vjjlAICISzgmwX1-KA.crl (hash: UpvkZ/UJcwLWRCbD+AJYARI6o396PMbKPJvin4/CZUI=)
2: wOCmhg5ukUDjqYrrNe8HL0c6WHY.roa (hash: py0DTzjoQh1bUaOEwoDGjjlil3qVagDVLMDa9WBCMVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:14:d4:89:15:18:30:df:9b:7f:49:b8:e9:cf:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Validity
Not Before: Jul 23 22:01:03 2026 GMT
Not After : Jul 24 22:01:03 2026 GMT
Subject: CN=002ae19daf4ff7d9e77b0907411cb9d3d23781cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:66:28:d4:a5:2e:99:10:d0:8c:10:9d:0e:f4:
66:68:3f:0f:fb:55:4b:77:d9:5c:41:72:4e:a0:29:
4c:39:9d:43:1a:38:aa:06:1d:c0:cd:37:59:36:05:
bb:30:dd:0a:f9:e5:97:62:c2:46:56:db:49:bd:96:
c7:ce:45:c0:7e:ad:4b:17:8c:8d:f7:51:73:f8:87:
82:cf:14:66:88:1f:37:41:ca:4c:a3:a6:96:2f:c9:
e3:2c:c3:3c:a6:9e:e0:7a:ed:49:31:a2:d1:fc:d8:
13:9a:32:4b:61:fa:03:f4:a4:03:f3:23:3b:a0:e0:
4d:21:eb:72:90:fd:28:ba:10:dc:bc:3d:89:65:d4:
4e:d1:6f:41:5e:f8:66:40:18:b4:16:3b:c3:6e:c3:
d7:17:1e:b4:29:a6:9a:bf:45:09:2c:5f:b5:99:f6:
3d:ff:ea:bc:f4:f1:d6:f1:e8:64:a5:75:94:12:b2:
af:93:29:a2:d3:17:1d:e4:9d:da:8f:1a:02:ad:52:
c7:b1:16:07:4f:7d:f4:9a:a3:b5:a1:7d:08:6f:3f:
b8:0c:37:ad:07:8d:67:46:f7:39:e4:37:46:f0:4b:
a8:f2:ae:14:30:36:bf:b0:3c:d2:5a:f6:9f:21:50:
96:1c:c4:23:cc:93:31:52:d8:60:cc:6b:b4:c9:15:
cf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2A:E1:9D:AF:4F:F7:D9:E7:7B:09:07:41:1C:B9:D3:D2:37:81:CB
X509v3 Authority Key Identifier:
keyid:53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:dd:81:c8:9b:80:5e:55:91:e5:8d:fd:4f:74:d1:c1:76:09:
32:61:6a:40:ad:54:76:83:ba:fc:8f:6b:81:d2:a3:98:ce:f3:
e6:4a:00:2a:7b:cc:d8:1d:70:99:5a:83:0d:59:2c:d7:38:3d:
75:70:48:99:85:fd:af:07:2b:a4:01:f8:8a:42:b7:0f:ee:4a:
30:32:fc:d7:ce:91:74:7c:e8:c6:b4:f7:4f:8a:88:8f:ce:3f:
35:10:eb:fb:ec:65:d2:ec:1e:ac:35:a8:42:14:2c:11:f1:de:
60:8b:bd:85:1b:14:75:4b:46:55:53:68:0b:4c:74:c5:e9:b0:
83:c2:f4:f4:08:03:f7:03:9c:86:fc:b6:e7:25:c0:79:62:09:
6c:c5:69:66:19:f2:15:8d:da:07:78:ce:d4:1f:ec:9a:fd:56:
c1:e1:c5:2c:b0:81:2d:10:b6:cb:f7:57:20:2f:7e:50:6e:fa:
80:30:6b:bd:51:a9:b8:2f:e4:08:6f:53:09:c6:66:2a:b7:16:
4c:9c:70:55:ee:11:f4:3d:66:24:b8:7c:d8:25:fe:a8:4a:42:
ec:08:8f:c1:64:45:c8:83:d0:58:0a:5b:97:4d:d7:1d:c7:d3:
23:6f:50:2a:63:c9:99:5b:c3:08:9c:8a:b7:48:d6:ce:57:05:
75:f7:2d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:36:31 2026 by rpki-client