Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
File: U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json)
Hash identifier: DZ70svP1jU9mfmBEZboU4Sq69/C0h/rrYpWuILERUh8=
Subject key identifier: 5F:6E:B9:00:C5:3D:BC:98:69:A8:BD:BC:FA:39:6D:42:B3:55:36:4D
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial: 01A0E13D5D3C45462175F3299A17CCBCB297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
Manifest number: 1132
Signing time: Sun 27 Sep 2026 05:01:30 +0000
Manifest this update: Sun 27 Sep 2026 05:01:30 +0000
Manifest next update: Mon 28 Sep 2026 05:01:30 +0000
Files and hashes: 1: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: 6/W4rg16BgnaQ28oIJGaHKjXSs4NO9qZiSnrhTrK/+4=)
2: WzohaVzPLEBKuPQD-sbPCaZXcnQ.roa (hash: SIJFdx4blAk5vec/FV7gfH5KB998Y+98D4gZTEETEKk=)
3: nM6XYB2iwgJ17oTR8XmeIg2xI2M.roa (hash: 1o7tQyZeZiqzL+ktcifE7MOOMo51KCeyAAEwmbZDyZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3d:5d:3c:45:46:21:75:f3:29:9a:17:cc:bc:b2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Validity
Not Before: Sep 27 05:01:30 2026 GMT
Not After : Sep 28 05:01:30 2026 GMT
Subject: CN=5f6eb900c53dbc9869a8bdbcfa396d42b355364d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:47:d1:3d:63:0d:76:3f:8f:32:d5:5b:f2:5a:
a2:1a:34:75:9c:bf:fd:45:ad:e6:2c:cd:3e:31:71:
19:bf:35:db:39:03:eb:ce:3a:d8:d8:eb:5b:73:d5:
a4:6a:48:4e:9e:48:30:3b:e0:2e:72:2d:56:f4:f1:
b2:24:bb:eb:98:bb:26:fe:f9:6e:f0:a7:17:7d:3d:
b3:8c:2e:8d:85:af:f1:f8:43:0d:94:13:2f:39:11:
1e:05:08:20:94:12:0d:9c:b7:f7:30:30:02:da:84:
a8:36:11:8b:18:84:67:f7:50:02:cc:c1:54:37:54:
de:5c:55:f2:fd:d8:93:6b:a8:f0:cf:88:9a:e3:27:
50:05:c3:99:44:4c:80:2d:fe:e2:38:e8:83:53:44:
16:16:81:31:3b:67:ef:92:a1:7d:22:f4:e8:82:08:
a4:a7:c1:08:80:ff:f7:c0:3e:e8:2d:df:9c:f3:b3:
65:8d:65:ed:f0:37:e1:fc:89:c8:57:17:ca:45:09:
57:dd:f2:45:5f:17:e0:69:63:e1:ea:24:1d:6e:cb:
83:07:cb:1f:ac:b9:8b:f7:8a:b1:c6:e5:af:82:4f:
b6:f0:b7:11:09:22:19:34:e1:bc:6c:b2:4b:a1:f9:
d7:d2:fa:a5:59:62:92:df:86:99:7e:a7:7d:c2:8d:
65:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6E:B9:00:C5:3D:BC:98:69:A8:BD:BC:FA:39:6D:42:B3:55:36:4D
X509v3 Authority Key Identifier:
keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6a:77:fe:e6:4d:6b:38:de:91:f4:53:df:f4:79:56:ae:2d:
49:ef:ea:ce:a0:e6:ac:f0:fa:b7:c0:74:4f:19:62:5c:7c:e9:
a9:cc:aa:3d:ed:3d:f6:d5:4e:ae:ba:08:1e:84:88:7e:38:de:
20:3b:70:8f:ed:6b:47:f4:01:6f:6f:5e:ff:26:12:c1:7a:8c:
c3:40:73:21:18:b3:68:bf:7a:60:66:bf:be:95:17:15:39:14:
85:f2:55:2f:45:f8:32:13:51:76:5e:c6:54:e5:13:3f:95:37:
e4:73:aa:01:b3:7f:5f:89:38:3c:a2:5e:03:21:de:22:4f:79:
05:96:4e:e0:d4:c9:7c:8b:5a:9a:8d:f7:23:e2:5d:65:6b:2f:
a2:af:f1:c4:44:97:e6:a8:45:63:57:4d:e3:c2:b7:b6:22:85:
54:f3:2a:15:c2:87:41:d2:ea:b2:28:62:bb:19:81:fa:f9:30:
d4:8f:bf:00:c8:f2:e0:54:1c:c7:1f:e2:14:3b:4f:43:48:23:
08:69:8d:30:0c:ad:9a:11:31:a1:38:8a:a4:fc:af:dc:6f:d8:
95:00:0b:bc:65:24:55:21:b4:a1:a0:8c:c5:6a:aa:61:79:87:
3b:3d:4d:57:7a:19:89:b0:98:5e:73:88:57:68:c2:56:31:86:
2d:6d:21:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:28:50 2026 by rpki-client