Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
File: U8kSoEEbsBdFBwktDKNaka15kFw.mft (raw, json)
Hash identifier: vAsVxa6dxB1DGsnZcrH2mluMiXZYFR2DXK4J3gDl4ek=
Subject key identifier: 09:FC:57:88:50:B8:5E:E5:4E:3B:A6:66:3B:A4:CE:AB:7B:DB:3D:3C
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Certificate issuer: /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial: 01A17C297EF26244C13A12B880BA34414EC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
Manifest number: 1ACE
Signing time: Tue 27 Oct 2026 07:00:56 +0000
Manifest this update: Tue 27 Oct 2026 07:00:56 +0000
Manifest next update: Wed 28 Oct 2026 07:00:56 +0000
Files and hashes: 1: 92JgNy2UniVvWNA6kvsz4sovFIA.roa (hash: lAqICp0tk9GujbZHx2/6RHqqJpx7oSWIDsAW5NqmUFs=)
2: Jgm412TDqz8eqc-jU7VKAy0ZDsw.roa (hash: z/uYXvq2xIRczyrsXkqCGG5d8yfec3+FGNIntpcNWWU=)
3: QbAALDYZ_RGHs07gYUQih_CDJyk.roa (hash: +Uv/ugRA2zDra5XT10jpvOYMi9ZmxhbMWKYPoPRN5bM=)
4: U8kSoEEbsBdFBwktDKNaka15kFw.crl (hash: WDLtalyPq9m54d2sExNHflOK+MTDteAF+jEWoXOJkJM=)
5: j0O3QqEAKxBIurzqupf19ooBC2Q.roa (hash: lqgmu0Q3rGQnKd7YQUi3rshBshIXMyyxF0xhRSz2zf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:7e:f2:62:44:c1:3a:12:b8:80:ba:34:41:4e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
Validity
Not Before: Oct 27 07:00:56 2026 GMT
Not After : Oct 28 07:00:56 2026 GMT
Subject: CN=09fc578850b85ee54e3ba6663ba4ceab7bdb3d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f2:31:6f:31:48:8a:38:3a:1d:b1:db:91:32:
88:c2:ac:b4:d3:95:f8:9a:e8:49:77:c2:99:17:19:
8e:2e:0a:cb:81:24:0f:3f:03:56:51:9d:a6:0b:93:
1c:0d:50:a7:be:a2:f5:4f:5f:ac:b3:30:36:a0:9b:
07:34:98:8a:19:4f:95:d3:78:b3:29:97:3c:89:03:
f3:1c:c2:94:2d:45:49:83:cf:94:36:ac:be:5e:34:
27:4f:77:b7:07:3a:ab:b6:92:86:6a:27:40:28:4b:
82:fa:61:3e:6a:25:59:2b:6b:0a:4e:a0:87:40:b5:
19:61:c4:ee:70:02:40:53:00:1d:ea:b1:4b:40:8a:
3f:ef:04:52:47:d1:25:04:e3:7e:85:21:90:8a:0a:
7f:50:83:7a:c1:77:06:6a:f6:b5:2c:52:f7:8e:a8:
e8:7c:e3:9a:6a:18:d1:d3:b8:de:e9:65:3b:a5:3d:
e6:4e:04:42:21:2a:aa:38:7f:84:cb:b8:79:10:b6:
a0:b0:85:63:fe:f2:e4:6e:73:36:72:62:d6:e3:fa:
5c:1e:f3:3e:30:a3:5e:7f:cd:5e:47:66:f1:40:a1:
77:36:55:db:cf:ab:09:c7:9b:fe:0f:39:69:8f:39:
76:09:d8:22:f6:29:af:ab:74:12:ca:00:82:9d:6a:
b5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FC:57:88:50:B8:5E:E5:4E:3B:A6:66:3B:A4:CE:AB:7B:DB:3D:3C
X509v3 Authority Key Identifier:
keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:dc:7e:05:e1:06:c2:6d:24:94:22:55:2b:a3:6a:c4:c3:d1:
95:07:8d:86:ac:56:21:27:76:67:7e:af:39:a9:47:b1:52:d8:
7d:eb:51:0d:4b:89:6e:0c:d8:fc:e6:ba:01:c8:b8:dd:23:54:
75:2f:e6:ee:73:2a:c8:6f:64:34:38:9c:1c:aa:0f:07:9a:1f:
68:45:96:62:8d:fa:04:93:9d:33:62:29:17:f0:d2:9d:0c:6c:
ce:30:51:03:13:99:7c:bd:39:cb:ae:86:a4:ad:4a:9a:0a:5b:
04:f9:5a:60:3e:8d:fd:56:36:3b:64:34:8d:e1:ce:59:0a:16:
c1:20:47:67:39:55:62:0b:ba:e8:a6:f7:f9:ba:59:cf:ff:97:
0f:e1:36:fe:d2:54:1e:cb:fb:06:c7:b3:c8:08:ed:d4:72:4a:
6b:a1:7e:21:c7:95:92:5d:b1:bd:25:8d:8a:f1:e9:bc:ad:28:
20:c3:c5:66:3f:e7:dd:15:39:f5:07:82:ca:4d:ff:51:1a:b9:
ff:2d:42:24:53:21:b0:ec:49:fc:fc:4d:9e:23:79:6f:be:3b:
15:ce:5c:37:46:3f:99:ff:e9:de:f4:33:27:80:eb:6a:82:8f:
27:70:1f:20:ec:c2:28:34:bc:69:a9:ed:d5:1e:77:34:44:ca:
3b:9e:46:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:38:51 2026 by rpki-client