Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
File: U_rXyaSF_rKReT654tuY9BjlxLg.mft (raw, json)
Hash identifier: 2O8InT2DRutDb3wDB38tfIux6zKUCCnljiDPSbyBLQQ=
Subject key identifier: 3A:70:8B:44:D9:2D:4E:83:CC:A9:90:29:C8:D3:44:01:16:FE:F4:D6
Authority key identifier: 53:FA:D7:C9:A4:85:FE:B2:91:79:3E:B9:E2:DB:98:F4:18:E5:C4:B8
Certificate issuer: /CN=53fad7c9a485feb291793eb9e2db98f418e5c4b8
Certificate serial: 019E1E354E360BBA78204D5CBF1A8C51EA49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
Manifest number: 020B
Signing time: Tue 12 May 2026 22:01:10 +0000
Manifest this update: Tue 12 May 2026 22:01:10 +0000
Manifest next update: Wed 13 May 2026 22:01:10 +0000
Files and hashes: 1: U_rXyaSF_rKReT654tuY9BjlxLg.crl (hash: h/HYAYt+JOOkPCEvVGLkeHIgH1mDmDYeRn1gNV3ROEk=)
2: Yg4X9H4DWGGKD8H5YRPUUkoYlHw.roa (hash: 9JB+Ut5rRiBxCY40cvzaauAZdMWzFKX4dxG7GlKOoZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:4e:36:0b:ba:78:20:4d:5c:bf:1a:8c:51:ea:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53fad7c9a485feb291793eb9e2db98f418e5c4b8
Validity
Not Before: May 12 22:01:10 2026 GMT
Not After : May 13 22:01:10 2026 GMT
Subject: CN=3a708b44d92d4e83cca99029c8d3440116fef4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:c0:ee:a5:ca:de:ae:9f:2d:de:98:12:b0:
6f:93:a9:bc:46:21:a1:65:7f:7f:80:eb:57:2d:8f:
81:73:64:99:65:3e:63:a3:fc:33:70:4b:bd:62:65:
31:9a:d3:4d:99:1e:cd:79:8d:74:12:91:af:f0:03:
1e:f3:52:b2:cb:24:7f:d6:ac:9f:1c:f4:2a:87:ac:
9c:f3:da:92:7c:4d:d3:cd:27:d8:95:45:5b:92:45:
ed:b2:d9:1d:b8:82:8a:80:53:4c:86:24:d8:ce:66:
ba:64:94:f8:ad:83:60:78:c4:50:41:1d:12:2d:b9:
a2:95:95:fe:4b:2f:94:d7:b6:9a:81:0d:55:05:1d:
28:d9:57:bf:1e:be:f2:cb:a5:fe:c2:4f:0b:f1:e1:
a7:88:e0:f2:5d:b7:c3:39:ed:3d:47:1a:1c:73:7f:
15:9a:75:8f:47:10:de:dc:8e:1e:21:dc:95:de:4e:
50:2b:db:b9:bd:a2:68:b3:d3:a0:0b:b9:b7:aa:84:
c0:41:7e:9c:ea:76:bb:70:fc:5e:35:17:9a:52:e6:
2f:40:55:79:e9:39:ce:28:e2:cf:15:45:69:15:ce:
38:00:ea:99:b7:ea:fd:e4:52:54:3a:ff:0b:b3:28:
54:8e:4b:21:15:b4:18:0a:9a:1e:fe:0e:87:32:bf:
99:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:70:8B:44:D9:2D:4E:83:CC:A9:90:29:C8:D3:44:01:16:FE:F4:D6
X509v3 Authority Key Identifier:
keyid:53:FA:D7:C9:A4:85:FE:B2:91:79:3E:B9:E2:DB:98:F4:18:E5:C4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:77:26:a7:c9:2b:0f:74:40:a8:bf:8f:43:0a:8a:da:32:6f:
ae:88:a5:d3:45:9d:e1:d6:00:6c:49:39:16:5e:e6:ea:81:23:
ad:63:fc:46:30:5f:47:fa:8e:a0:8a:86:e0:04:8e:46:a6:bd:
6f:a6:fd:ae:85:dd:1c:59:82:03:a5:9b:cf:58:89:73:21:b7:
8a:e2:03:80:51:4a:be:99:e6:95:bf:28:25:3e:d9:39:5e:a2:
d9:ef:94:8f:59:d6:75:10:49:06:20:58:d2:ce:dc:27:dd:33:
0b:f9:13:12:99:48:d8:b2:ac:ae:cf:e1:f4:99:e4:eb:3b:0d:
cc:5f:5f:35:4a:9e:08:5d:65:3c:49:bc:57:be:1e:33:a3:bc:
24:60:f1:50:15:1f:09:38:89:06:08:09:6e:4e:6b:34:0b:61:
74:1b:7c:a7:fa:af:5f:84:fc:a2:ac:59:f6:d6:57:4e:f6:19:
9d:e7:e5:29:e1:e3:78:a0:d6:34:7c:97:6b:25:4b:83:c7:23:
23:e5:61:fd:0c:a9:d4:1f:89:bd:08:56:b8:3a:b1:fc:47:51:
b0:47:f8:c6:c9:04:d9:b3:9b:80:fb:d0:ce:4e:86:9f:52:5e:
98:47:89:2f:a5:a1:d8:30:0c:c8:a8:ec:01:a3:ea:38:ba:d6:
60:76:ca:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:42:09 2026 by rpki-client