Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
File: U4Vcjs6b1vjjlAICISzgmwX1-KA.mft (raw, json)
Hash identifier: iklX2DmZm6WqjBftxF7pAlTiGdb2x/f3OCeVXhacndo=
Subject key identifier: 5C:1D:1D:2D:8E:D3:73:39:39:5C:1C:48:6F:46:ED:4E:98:5B:3D:34
Authority key identifier: 53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
Certificate issuer: /CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Certificate serial: 019E1E35535FA282661697A0CABF6D5BFB0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
Manifest number: 1599
Signing time: Tue 12 May 2026 22:01:11 +0000
Manifest this update: Tue 12 May 2026 22:01:11 +0000
Manifest next update: Wed 13 May 2026 22:01:11 +0000
Files and hashes: 1: U4Vcjs6b1vjjlAICISzgmwX1-KA.crl (hash: MWureOeJs6l3HQrRqdzn9qBomE6hLM/iFRvzQ2VMuMY=)
2: wOCmhg5ukUDjqYrrNe8HL0c6WHY.roa (hash: py0DTzjoQh1bUaOEwoDGjjlil3qVagDVLMDa9WBCMVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:53:5f:a2:82:66:16:97:a0:ca:bf:6d:5b:fb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Validity
Not Before: May 12 22:01:11 2026 GMT
Not After : May 13 22:01:11 2026 GMT
Subject: CN=5c1d1d2d8ed37339395c1c486f46ed4e985b3d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:30:62:31:f8:2e:78:bc:7d:b0:92:f9:33:e1:
68:af:cb:fb:7c:54:c5:f6:b2:c2:71:22:c4:ec:d3:
f5:17:f5:f8:70:ad:f2:3d:43:a4:55:0a:f9:76:a3:
46:7b:3e:31:92:0f:26:a7:f3:a4:d5:cd:da:20:5e:
18:48:86:a8:65:a7:aa:10:54:21:45:04:27:48:fd:
eb:4d:18:45:93:91:3f:d3:d1:76:c6:15:86:d8:52:
74:c1:80:9f:ca:44:ba:18:68:08:c3:85:63:9e:b5:
3e:9a:91:54:fa:df:71:5d:3d:f1:19:99:2c:ef:a7:
0c:f7:1d:d6:4c:40:1f:b0:ab:3f:7d:84:50:d4:fd:
70:2a:74:6e:c9:78:4e:80:29:fe:93:83:47:40:68:
9e:70:5c:96:75:d6:2e:d7:39:64:d2:a4:e0:62:a4:
9b:cb:f1:4c:e4:06:81:c4:83:2b:29:1a:35:41:0c:
83:5d:24:df:6d:1e:56:33:92:55:5d:03:3c:94:fa:
55:3f:e5:37:34:91:03:f6:2e:23:4f:23:58:21:32:
99:4c:8a:b5:99:8a:a9:37:8f:ea:f0:58:a3:d2:8f:
50:5c:4b:76:6d:37:a0:1f:1f:89:8e:67:45:83:90:
b4:e0:e4:94:3f:cf:55:1a:a0:6c:cf:58:96:5d:19:
1c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1D:1D:2D:8E:D3:73:39:39:5C:1C:48:6F:46:ED:4E:98:5B:3D:34
X509v3 Authority Key Identifier:
keyid:53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:0b:f3:7d:f8:e0:a8:25:6f:d5:e3:02:b3:05:88:4d:d4:4b:
5b:a9:74:30:f8:15:68:57:67:e3:48:9e:69:55:5e:23:d7:8a:
60:39:1d:2d:6b:85:eb:7b:c6:e9:65:ef:2e:16:6f:12:ef:b7:
34:9a:c1:6e:be:8c:d5:7f:a4:c9:22:53:49:d2:de:1b:b6:8b:
c8:23:de:f8:46:6f:bf:90:b6:71:56:ba:af:a7:e2:00:55:3f:
90:0e:a5:1a:d1:50:cf:d3:c8:81:33:45:9d:c4:9d:9c:92:84:
9d:c5:01:03:a9:3d:cf:f8:17:f7:2c:69:3d:89:fe:00:4f:6c:
b2:39:24:76:ae:2f:3c:8e:be:ef:60:5b:2c:5b:99:ee:ee:d8:
97:53:49:d4:af:bf:d2:b3:9e:ad:b1:4f:13:be:fb:7f:e8:64:
06:40:02:79:15:6f:58:e5:68:51:3e:62:2b:dd:0c:f2:75:14:
48:39:ef:54:8d:46:e7:eb:75:7a:aa:8a:c4:61:d2:d4:32:91:
f6:48:9f:28:24:f4:4e:71:ab:c0:d7:c3:e5:97:d3:91:73:ee:
e0:79:9e:39:7c:c9:cf:36:af:b1:5d:17:7b:d0:43:8b:e5:db:
70:37:de:4d:d8:92:08:a5:ca:b5:3f:6c:f2:78:d6:f5:1b:de:
03:01:99:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:07:24 2026 by rpki-client