Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
File: U8vRR3BEoDQEx_xDlhwsg7unW7w.mft (raw, json)
Hash identifier: NIfb7lcCqsGW3rJLw67eBDkixc6WBOEdJLs6qZvQUpY=
Subject key identifier: 81:7F:A7:B7:E7:A4:85:1C:F4:C6:B6:99:B5:D4:B5:F4:CA:AB:5B:A9
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 01A0D9BB33E954F35D3041A4A45DF89CEBE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
Manifest number: 129F
Signing time: Fri 25 Sep 2026 18:01:59 +0000
Manifest this update: Fri 25 Sep 2026 18:01:59 +0000
Manifest next update: Sat 26 Sep 2026 18:01:59 +0000
Files and hashes: 1: U8vRR3BEoDQEx_xDlhwsg7unW7w.crl (hash: NISD39/2PXxHMOvf83D9z34953MTb/ljxcFt3JDaE2E=)
2: i-hrmAd6eP2UJtkk3SPMJzG0IR4.roa (hash: B6teHj1AoVH0G/n45VB0pZwR7t3AJ0lfJJi8U5XTRvo=)
3: zaKgjQxKOXseye7OptrYTXdeRW8.roa (hash: msUavGu33dhomVrKx+MtKYwUf9QSzxgfQ+UXycVAuNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:33:e9:54:f3:5d:30:41:a4:a4:5d:f8:9c:eb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Sep 25 18:01:59 2026 GMT
Not After : Sep 26 18:01:59 2026 GMT
Subject: CN=817fa7b7e7a4851cf4c6b699b5d4b5f4caab5ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9e:ff:b8:6b:7a:61:b3:40:1f:eb:e5:e4:14:
17:44:14:c4:6c:09:80:1e:c9:31:db:a3:f0:c6:c2:
4d:e3:be:5a:de:c3:db:be:22:3b:54:6c:37:0a:38:
38:9c:f3:a7:58:04:f9:33:37:17:8b:70:3a:e0:09:
1f:b1:e6:d2:62:97:93:5b:03:dd:01:c1:e6:e2:4a:
ca:ef:08:63:0c:f2:1e:b4:1f:cb:d5:4a:77:2c:fe:
0d:14:1f:37:28:4c:f0:d8:bd:e7:be:a4:08:57:96:
9a:b5:6e:0a:30:23:4a:09:10:35:ce:d7:0e:79:c4:
60:c3:a1:71:f5:dc:cd:d1:74:e7:df:34:c5:b6:b1:
50:0d:af:55:24:af:90:56:e3:2e:4a:28:8e:87:55:
0b:41:94:ac:8e:c0:8e:4c:7c:bc:ef:28:c6:b7:cc:
a3:c1:92:c3:17:b0:1a:32:31:1c:65:02:04:87:33:
f4:90:d9:99:94:d3:73:9a:79:f3:56:dc:d4:7d:d6:
66:36:f8:74:61:d8:bd:cb:d6:09:d8:40:4c:8f:b5:
95:30:4c:57:ce:b9:34:4a:4d:79:b3:3f:d9:c3:57:
d5:64:9d:11:c0:98:16:ac:aa:8a:5a:1b:03:13:01:
fc:3c:0a:a2:b2:5b:0c:3c:ef:c8:7a:de:8b:b5:e3:
bd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7F:A7:B7:E7:A4:85:1C:F4:C6:B6:99:B5:D4:B5:F4:CA:AB:5B:A9
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0d:6d:a6:c5:62:b5:84:32:64:7d:3c:23:ac:ea:ec:4a:bc:
5b:24:f4:d5:76:f0:b8:0d:a4:3a:69:d9:0f:13:aa:57:d1:7d:
e4:ca:69:7e:f8:6f:0e:4a:28:82:fc:8c:9b:f1:fb:0e:26:68:
a5:68:6d:39:50:42:df:b4:1e:cc:0d:63:04:d5:99:83:48:20:
fc:ec:5b:58:54:80:96:d4:70:81:17:79:20:7e:a3:1d:ef:7a:
9d:01:a0:e3:70:d8:88:e3:ff:70:00:74:da:aa:65:ac:5a:05:
77:fa:58:03:79:19:9a:97:e2:f8:0b:04:4f:57:7b:3c:d8:86:
98:e0:df:74:a1:c8:a5:b5:18:e1:70:ac:c3:72:fe:61:0c:4b:
75:de:f7:ff:e2:b1:ea:e8:a1:be:69:57:34:38:5e:3b:7d:93:
a6:08:0a:09:93:d7:ed:c1:13:f7:e2:d6:76:72:52:8e:8e:0d:
80:2d:c1:1f:82:64:66:8b:63:a4:d8:2c:84:5e:19:29:e6:1a:
f4:60:42:6d:db:a6:cd:6f:3f:e3:37:8d:25:02:65:37:ba:c6:
3d:63:ee:6a:3b:5d:07:59:fb:c8:86:ac:77:da:0e:d8:74:82:
97:6b:98:eb:63:cc:6f:29:16:b9:5f:ad:f8:6c:c7:c7:4a:c9:
4b:88:5e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:13:00 2026 by rpki-client