Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
File: U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json)
Hash identifier: szr0+YygWI5O4DDLrPa8es5CD0yHFFiOx4NMo1wAiCs=
Subject key identifier: 4F:08:CA:DD:60:35:62:30:D4:53:38:7F:B9:F1:37:DE:09:DA:53:31
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial: 019E1E6C7F2472EDDEC4E82B6A6C16486248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
Manifest number: 0FC4
Signing time: Tue 12 May 2026 23:01:27 +0000
Manifest this update: Tue 12 May 2026 23:01:27 +0000
Manifest next update: Wed 13 May 2026 23:01:27 +0000
Files and hashes: 1: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: ale9C0VEDejHNnTyq/+dRtYR1q1SGiOxIAToqEn3iEY=)
2: WzohaVzPLEBKuPQD-sbPCaZXcnQ.roa (hash: SIJFdx4blAk5vec/FV7gfH5KB998Y+98D4gZTEETEKk=)
3: nM6XYB2iwgJ17oTR8XmeIg2xI2M.roa (hash: 1o7tQyZeZiqzL+ktcifE7MOOMo51KCeyAAEwmbZDyZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:7f:24:72:ed:de:c4:e8:2b:6a:6c:16:48:62:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Validity
Not Before: May 12 23:01:27 2026 GMT
Not After : May 13 23:01:27 2026 GMT
Subject: CN=4f08cadd60356230d453387fb9f137de09da5331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:a4:69:34:df:4c:87:8f:f9:9e:05:99:21:
3b:92:0e:79:ef:05:b2:bc:dd:4f:8c:f7:da:75:4a:
ac:ee:f0:fe:11:cd:e5:0e:8f:92:5a:06:5b:59:8d:
bb:bf:dc:ab:81:7e:08:22:7e:72:f1:48:3c:5b:13:
3b:f7:b2:62:91:46:55:62:89:7a:fb:5c:ff:57:b0:
e1:a5:dd:3c:50:e1:fc:f3:a0:4d:14:26:b6:bc:a5:
82:a8:b6:88:1f:55:03:72:07:1a:1a:08:b0:02:2c:
6a:42:4e:55:04:63:49:68:cb:8e:14:1c:aa:b8:a0:
e8:2f:9e:51:99:04:d9:ae:9e:72:3b:a0:52:44:28:
9b:8d:48:fe:12:85:da:16:a7:88:da:f6:54:6e:3c:
35:66:2c:fa:75:ec:47:b3:ba:69:5c:a0:89:03:33:
5f:84:83:9e:f6:2a:c1:44:22:4c:2a:a2:05:3d:de:
53:84:e4:3e:14:15:30:85:98:1c:1c:ee:e3:65:42:
ce:29:07:57:be:72:44:91:c5:ca:ca:f6:9f:39:30:
52:ab:a8:75:7d:d7:47:52:66:ad:03:0f:e9:7f:6c:
85:3f:7e:30:7c:a7:d8:39:66:4b:ac:fd:d4:65:77:
2a:34:92:dd:0b:ff:ca:47:99:e7:53:d6:8a:ec:74:
d9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:08:CA:DD:60:35:62:30:D4:53:38:7F:B9:F1:37:DE:09:DA:53:31
X509v3 Authority Key Identifier:
keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f8:fa:1a:95:f7:8f:d3:c0:27:ee:06:8f:81:1c:d1:45:0d:
92:70:cb:7d:6d:70:49:f4:e8:c2:68:e3:49:50:9c:64:db:d6:
b5:eb:4e:62:8f:a8:ba:91:d7:0c:81:6c:c0:55:3a:bb:23:3f:
a4:9e:c8:74:43:0b:df:74:0c:4d:a2:fa:c4:3f:35:d2:62:44:
62:8d:9f:04:6b:6e:44:b7:7e:20:6e:ff:70:84:4d:a6:7d:7e:
50:20:a6:54:79:64:c1:ec:67:9f:ff:d6:c5:9e:90:3f:15:9e:
37:00:d4:3e:ed:15:11:36:e5:1f:5c:fc:12:40:5f:9b:64:8b:
f5:6b:d5:b6:4c:ae:8b:3b:2e:c4:6e:c9:ef:2d:6a:9a:ce:61:
83:00:de:81:9f:05:9d:67:d8:71:c8:44:c9:0d:97:f1:92:ca:
3e:2f:16:e9:26:16:87:47:5c:33:63:71:ca:ab:89:d3:1c:cf:
f6:0f:69:6a:30:be:23:70:13:33:17:fc:4d:de:41:ab:08:cf:
23:ce:9c:2d:2b:58:fc:6b:8d:10:e5:9f:8f:5a:ab:94:73:c9:
5c:16:d7:de:2b:67:7e:2e:a6:3e:f6:c4:b3:de:8b:9d:0c:3d:
4b:f7:88:40:fb:ac:0b:6d:32:bc:34:e0:ce:b1:29:60:46:d0:
02:7d:53:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:05:10 2026 by rpki-client