Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
File: U_rXyaSF_rKReT654tuY9BjlxLg.mft (raw, json)
Hash identifier: lsy794hKepXmwwGytRP/7n7LLI+BYzOT7nU9H5nc7uo=
Subject key identifier: DB:53:08:D7:23:EB:74:93:F9:59:8D:3B:77:3E:F0:80:5B:86:94:CB
Authority key identifier: 53:FA:D7:C9:A4:85:FE:B2:91:79:3E:B9:E2:DB:98:F4:18:E5:C4:B8
Certificate issuer: /CN=53fad7c9a485feb291793eb9e2db98f418e5c4b8
Certificate serial: 019F94DB881FC218B8D04CB38D0192FE7884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
Manifest number: 02CD
Signing time: Fri 24 Jul 2026 16:00:42 +0000
Manifest this update: Fri 24 Jul 2026 16:00:42 +0000
Manifest next update: Sat 25 Jul 2026 16:00:42 +0000
Files and hashes: 1: U_rXyaSF_rKReT654tuY9BjlxLg.crl (hash: zBueJDaTejQfVk6kOdPNTO9TV4HcY2Hj/NK21+z4+a8=)
2: Yg4X9H4DWGGKD8H5YRPUUkoYlHw.roa (hash: 9JB+Ut5rRiBxCY40cvzaauAZdMWzFKX4dxG7GlKOoZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:88:1f:c2:18:b8:d0:4c:b3:8d:01:92:fe:78:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53fad7c9a485feb291793eb9e2db98f418e5c4b8
Validity
Not Before: Jul 24 16:00:42 2026 GMT
Not After : Jul 25 16:00:42 2026 GMT
Subject: CN=db5308d723eb7493f9598d3b773ef0805b8694cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ff:c3:a1:bb:dc:7e:e1:85:bc:3f:a1:db:12:
92:3e:2a:aa:94:52:8d:4d:a5:eb:03:5a:a5:66:25:
3c:e7:bd:0f:68:0d:b4:f5:ca:71:28:92:03:72:96:
9a:d4:cd:d0:d1:42:5a:31:5f:cf:a7:56:0b:fa:6e:
93:a5:e3:3c:8b:65:18:16:23:2d:f0:0e:8b:34:b9:
6f:36:b4:1b:49:8b:c6:e4:80:8b:33:82:c1:04:6c:
81:c0:c2:97:41:2b:66:90:f3:c7:a3:56:c0:c4:2b:
6f:34:55:a3:7b:e0:38:fa:17:d2:f8:97:08:a0:9b:
40:ef:b1:8e:66:7e:40:de:fc:27:1b:a1:ed:27:84:
e4:bc:8a:54:b3:ca:d4:ea:a8:c1:17:14:ca:be:c7:
71:ae:68:2b:f3:9c:0f:11:13:21:7b:3a:4b:85:74:
98:a6:3d:e1:7e:7a:e9:34:13:ff:0d:fd:1d:d0:90:
9c:25:34:dc:7b:8a:c1:d6:25:79:a1:e7:3c:f4:f4:
1f:51:4d:d9:73:69:b3:89:bb:09:d9:e6:27:5e:c3:
19:b9:60:83:7b:68:39:76:f6:2c:c4:4c:67:90:65:
1c:7b:10:c2:7c:4b:63:ec:cb:b8:14:07:b9:3e:42:
8b:da:e2:cd:60:d2:fe:86:68:15:ce:88:63:27:41:
cb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:53:08:D7:23:EB:74:93:F9:59:8D:3B:77:3E:F0:80:5B:86:94:CB
X509v3 Authority Key Identifier:
keyid:53:FA:D7:C9:A4:85:FE:B2:91:79:3E:B9:E2:DB:98:F4:18:E5:C4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:55:47:f4:db:52:31:fa:db:16:bf:6e:53:b8:6e:ed:77:90:
67:0a:e3:e1:13:5f:92:a5:e6:9b:1a:03:74:2b:1d:3a:09:25:
fa:00:9c:7a:96:49:f3:c0:9a:63:f5:46:19:ba:78:93:ee:db:
fd:23:de:3f:81:03:a9:6c:dd:3f:b7:6b:7b:26:41:c2:10:dd:
dd:4f:52:54:d0:b1:f2:bf:68:d7:aa:6d:82:e4:53:1d:21:e6:
7c:b5:03:32:6c:a2:a7:a8:fb:ca:7f:db:f2:bb:e3:50:23:f0:
9a:54:14:11:81:8f:d0:e1:50:4f:96:fd:98:b8:92:24:23:d1:
6c:bc:0d:2b:01:7d:4b:79:17:88:87:9a:36:10:f5:c3:ca:ab:
bd:a3:b2:17:e1:d7:3d:00:d9:27:45:87:f1:bd:22:a4:2b:ae:
e4:ea:2e:f2:94:27:bc:6c:07:f0:8a:c5:7f:cc:47:93:eb:85:
e1:b8:d5:3d:90:3c:c9:bd:7c:78:76:7f:d5:c7:08:f0:22:b5:
5f:38:72:2b:da:0d:e7:ae:41:12:b1:18:f7:fd:28:3e:2b:a7:
05:2e:4c:72:ef:f0:82:a7:69:66:8d:dc:11:62:4c:de:52:4e:
f4:05:34:93:ca:a4:ef:c6:7f:07:de:cd:57:81:a7:26:98:cf:
ef:8a:7a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:26 2026 by rpki-client