Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
File: U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json)
Hash identifier: vNEnjFS2lJpfTXVfpVbwNAFXqm31DTL5PdfFF3rg+nE=
Subject key identifier: 89:43:98:08:72:FD:D1:0D:39:47:7F:03:23:84:F1:C8:A2:50:34:D5
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial: 019D273AE3B7A4BBF5DCC3E67B2593D7F862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
Manifest number: 0F44
Signing time: Wed 25 Mar 2026 23:01:03 +0000
Manifest this update: Wed 25 Mar 2026 23:01:03 +0000
Manifest next update: Thu 26 Mar 2026 23:01:03 +0000
Files and hashes: 1: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: qsnPXRXoGm6RShl38jadSRku1Af7G8NHG0/RcruaZJU=)
2: WzohaVzPLEBKuPQD-sbPCaZXcnQ.roa (hash: SIJFdx4blAk5vec/FV7gfH5KB998Y+98D4gZTEETEKk=)
3: nM6XYB2iwgJ17oTR8XmeIg2xI2M.roa (hash: 1o7tQyZeZiqzL+ktcifE7MOOMo51KCeyAAEwmbZDyZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e3:b7:a4:bb:f5:dc:c3:e6:7b:25:93:d7:f8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Validity
Not Before: Mar 25 23:01:03 2026 GMT
Not After : Mar 26 23:01:03 2026 GMT
Subject: CN=8943980872fdd10d39477f032384f1c8a25034d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5e:a6:80:12:d3:71:ca:c2:ff:e3:27:d6:11:
1d:de:d9:04:18:de:84:d2:3a:ae:8a:9e:f2:09:bc:
2c:62:8b:b2:e4:2d:21:bf:ad:80:f0:e3:c0:14:df:
1c:7e:8d:4a:20:95:df:c2:6c:a8:2d:65:c1:fe:1a:
56:fa:18:ce:42:98:41:06:e9:0c:5a:bb:cc:26:18:
aa:1c:42:a8:98:38:5d:06:2d:00:48:29:f6:35:12:
4b:57:b9:3a:29:ea:9c:9c:9f:10:0b:7e:fa:17:17:
49:24:61:2b:30:0b:0f:76:ed:0e:a2:ce:68:46:00:
44:d3:44:7c:18:09:68:41:10:a4:ba:7d:22:75:43:
09:14:b8:bf:a1:56:94:6d:82:f3:56:33:24:6d:a4:
72:7b:48:02:de:3f:c2:6d:0c:aa:52:27:2d:dd:05:
46:d3:d8:81:0e:7a:9e:de:c2:65:2c:04:93:b7:4d:
61:9a:d2:62:1b:fe:9d:a6:50:fa:74:70:79:51:03:
5c:dd:d4:ae:b9:cf:ff:b7:24:6c:e3:d4:98:75:e7:
b4:64:8e:9a:d0:5e:9b:ec:6a:25:10:a8:e4:48:30:
0e:b2:ee:3b:1d:d5:ac:68:ab:a4:8b:b9:59:f1:22:
50:43:74:4a:58:12:c8:f0:12:39:89:8d:45:f0:bc:
33:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:43:98:08:72:FD:D1:0D:39:47:7F:03:23:84:F1:C8:A2:50:34:D5
X509v3 Authority Key Identifier:
keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:be:ab:e4:54:72:70:8c:e9:2a:32:25:b5:9d:f0:ff:54:a0:
db:af:f8:7f:1c:f0:d0:61:28:2e:38:78:df:6d:cb:59:76:51:
ee:80:34:da:2e:ac:94:c5:57:48:35:2e:3a:bc:0d:65:4c:eb:
6b:70:18:73:af:36:2f:6f:e0:a2:fc:24:38:04:bf:24:7e:48:
03:cf:e3:2a:33:4a:a6:d8:35:1a:0d:84:f0:9e:71:56:10:cd:
93:e2:02:4d:d9:7a:3d:10:82:92:be:49:3f:65:a7:c9:0f:7c:
7f:26:94:74:fb:37:b2:df:e5:1c:63:36:08:9a:31:92:47:6e:
59:90:98:a1:78:aa:8b:5d:5c:f7:8c:78:aa:cb:22:8d:9d:e5:
46:a1:a3:85:34:0d:78:22:a9:8b:5c:3b:6b:48:9f:b2:0e:4e:
b2:f5:04:a8:56:8f:8e:88:39:b2:86:a8:8f:b1:be:5e:c0:1b:
ad:b7:a7:d4:c6:7d:3f:47:b3:4f:aa:4b:19:a5:31:3a:74:a5:
47:e8:d5:1d:fa:ed:41:56:3d:27:e3:4f:75:a6:3a:03:50:8f:
96:0c:66:1c:53:28:6b:33:68:55:ea:0b:a6:d5:1a:cc:36:de:
88:9c:0f:26:f1:8b:c9:a4:b8:cd:97:f5:63:52:13:0a:9a:d3:
7a:d1:06:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:42:08 2026 by rpki-client