Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
File: U8vRR3BEoDQEx_xDlhwsg7unW7w.mft (raw, json)
Hash identifier: UzbcpImsXo9w10lkL1LuVaT+nldoPZysvQKSFJ2bAJc=
Subject key identifier: 2A:68:B1:51:BD:3C:18:34:A1:39:B0:89:99:AA:29:7F:00:D5:72:A1
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 019F935A97BB476CCD3E0A311F953791238E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
Manifest number: 11F6
Signing time: Fri 24 Jul 2026 09:00:15 +0000
Manifest this update: Fri 24 Jul 2026 09:00:15 +0000
Manifest next update: Sat 25 Jul 2026 09:00:15 +0000
Files and hashes: 1: U8vRR3BEoDQEx_xDlhwsg7unW7w.crl (hash: k7rp9etanmWR/2CQ8/SF4b//URFu0nX/4XoZcnMo7qI=)
2: i-hrmAd6eP2UJtkk3SPMJzG0IR4.roa (hash: B6teHj1AoVH0G/n45VB0pZwR7t3AJ0lfJJi8U5XTRvo=)
3: zaKgjQxKOXseye7OptrYTXdeRW8.roa (hash: msUavGu33dhomVrKx+MtKYwUf9QSzxgfQ+UXycVAuNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:97:bb:47:6c:cd:3e:0a:31:1f:95:37:91:23:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Jul 24 09:00:15 2026 GMT
Not After : Jul 25 09:00:15 2026 GMT
Subject: CN=2a68b151bd3c1834a139b08999aa297f00d572a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:c5:fd:19:9c:05:fb:63:0a:3d:a2:5b:d4:
46:ec:dc:d6:56:48:94:6e:dd:1a:fc:19:70:e6:e6:
7e:8d:a3:cc:41:f7:cd:81:95:4f:18:54:34:c2:00:
0a:46:a8:34:1c:02:7b:16:45:b9:7e:f1:e7:c1:63:
a0:13:ed:0c:34:44:0f:6d:4f:68:b3:dd:3b:cd:42:
bf:29:8a:dd:67:53:c3:45:db:ec:5a:c1:f0:f7:cb:
83:24:b7:43:d0:75:42:e1:14:fe:73:8e:62:bb:bc:
34:70:ac:ab:d0:8d:b9:af:e3:06:0f:65:0a:cb:24:
74:68:73:a3:d4:2c:67:e8:2d:52:e8:e0:e9:64:9c:
ff:eb:3a:6d:da:4b:a3:cf:dd:37:51:69:f6:e7:ea:
88:6e:0c:13:e2:b9:8f:1f:6a:e3:8f:37:a5:2e:16:
3d:38:ec:a7:39:5c:27:7a:7d:2f:99:b1:7e:a1:bc:
d7:d0:0c:eb:bb:70:1c:c2:b8:1a:44:21:28:65:20:
13:c1:0c:73:f5:d8:6f:37:1b:53:c8:15:92:c3:68:
79:6b:a4:6b:da:2d:14:77:28:44:92:c2:21:ef:cd:
f0:2b:0a:fd:6e:b9:5e:f4:19:5a:32:98:37:bf:eb:
7d:03:00:fc:cd:a2:cf:4f:25:14:42:21:ba:09:6d:
05:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:68:B1:51:BD:3C:18:34:A1:39:B0:89:99:AA:29:7F:00:D5:72:A1
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9c:ad:97:29:01:b2:dd:4d:64:d7:9f:71:a9:56:2f:bf:db:
5d:dc:1d:10:44:1d:d2:88:f2:c7:6f:bc:e7:4a:60:90:4c:52:
4b:0b:51:28:e2:c2:f1:c5:91:b5:3a:a4:ad:b6:79:da:d3:68:
c5:65:64:40:40:d8:20:5a:90:ac:c7:0c:1b:81:1b:cd:0c:38:
ff:9f:0b:0b:d7:ab:0f:7d:7d:b9:f1:d7:9f:02:d0:75:3f:b6:
67:57:63:13:89:ca:d4:e0:18:ec:b1:d3:58:ac:af:9f:d1:7c:
69:28:62:2c:d8:b2:03:af:30:23:43:04:46:2f:2c:9b:54:8d:
a1:98:f4:cf:0c:0c:0b:97:de:4c:08:b1:0c:3b:df:99:f9:b6:
0a:f0:24:fe:de:79:5a:5c:9e:a7:5d:0b:db:34:2c:72:cd:54:
de:d5:f1:f0:e9:33:1c:b5:85:e9:47:29:fd:49:5a:b7:67:f5:
17:70:ea:a8:b1:e3:4f:11:1e:4c:a8:30:00:38:41:20:2f:6d:
04:f3:f1:4a:2b:16:1c:7e:91:19:3c:72:d4:da:40:a0:df:ea:
1e:e4:b0:3f:ab:8c:fb:de:e3:92:c0:4f:09:eb:5c:db:29:dd:
f2:36:c6:59:06:66:0b:31:25:6d:73:5a:05:bc:28:52:b0:db:
ef:5e:d0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:10 2026 by rpki-client