Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
File: U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft (raw, json)
Hash identifier: PGti5f0rBD928BbHYcNANMWqXrAz061Ydhw5yZdVmas=
Subject key identifier: 18:71:BE:99:6B:F8:49:DF:87:3B:0E:DA:F9:FB:AD:28:2B:09:83:47
Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Certificate serial: 01A18D1CFC6C66748835DACC044D6B06CFD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
Manifest number: 1ACB
Signing time: Fri 30 Oct 2026 14:00:49 +0000
Manifest this update: Fri 30 Oct 2026 14:00:49 +0000
Manifest next update: Sat 31 Oct 2026 14:00:49 +0000
Files and hashes: 1: 1-NYp-ANDJGWn2zBa6tZxxYGdDfA.roa (hash: ACBt4zT2KY2CKqY2w+FWy0192eghSargg1ySIXwb63Y=)
2: U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl (hash: Z/HcChX+zNhLG5Bvapfh8Z0VUtyqzTgk3GTqDctuRvc=)
3: gGTUtih5jVa-QbWTlOxD1xFHxEM.roa (hash: V1056kAulKAWgU4sgdguF4s6mRxgfRsvQzLGzFRcugQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:1c:fc:6c:66:74:88:35:da:cc:04:4d:6b:06:cf:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Validity
Not Before: Oct 30 14:00:49 2026 GMT
Not After : Oct 31 14:00:49 2026 GMT
Subject: CN=1871be996bf849df873b0edaf9fbad282b098347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:4b:46:28:26:53:0e:15:74:1e:b2:d0:17:
87:0d:3e:db:c4:6b:1e:66:1a:68:87:88:84:1e:0a:
16:5f:54:87:6f:36:ce:f3:81:f6:94:b5:58:df:7f:
28:00:fe:ce:32:a6:2d:62:13:af:83:59:53:10:06:
64:50:01:92:6a:5e:d6:7d:b7:ad:4f:72:e5:a8:e5:
65:0d:6d:a6:83:de:ad:6a:e2:4f:0b:98:d6:fa:ba:
77:9e:e8:b8:d0:48:ab:d3:79:43:a3:32:23:4a:09:
d3:0a:3d:ca:a3:a9:a7:9d:d6:cc:59:1b:85:21:3a:
52:d8:66:57:7c:ee:67:0d:df:d5:21:6f:d9:a9:0f:
5d:83:66:9b:e6:bf:7d:09:8c:39:6d:5a:cc:c7:ff:
e6:d5:56:0e:f6:bb:4e:33:d8:db:6a:2e:66:e2:02:
af:30:40:d4:bf:8a:2b:7d:b4:b0:f1:4c:76:0b:03:
a0:6d:83:ba:8a:67:f8:3a:e4:1f:40:60:41:f7:85:
ef:6d:a8:26:63:c7:c7:14:15:cc:18:bf:a0:e4:f4:
ce:9a:2b:e9:cf:07:c9:78:34:e4:b5:d8:a3:09:08:
25:28:1b:da:f6:b5:97:50:a7:a2:92:3e:5f:6d:77:
ae:c8:2a:2a:b1:d9:76:bc:0a:5b:cc:5b:75:9d:16:
90:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:71:BE:99:6B:F8:49:DF:87:3B:0E:DA:F9:FB:AD:28:2B:09:83:47
X509v3 Authority Key Identifier:
keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:4d:83:ba:ad:ba:00:9a:ed:de:f0:d9:59:7e:6a:ad:37:39:
cd:49:55:96:f5:12:1f:ba:d4:15:76:76:ee:d2:cf:d1:07:48:
02:0a:ef:c1:3f:2f:b0:6e:22:42:90:d2:64:b3:75:54:58:7e:
b3:44:3c:7c:ec:6e:8e:53:6a:2a:02:be:ef:d8:a5:0e:32:ad:
06:96:29:e0:3e:50:56:ff:cf:3a:fd:78:fa:63:11:1d:1c:5a:
91:e5:1a:2b:21:77:48:90:cb:f4:5e:c9:71:4f:9e:9d:4d:d5:
04:b6:26:05:89:f1:c0:1d:4c:7f:b1:8e:cc:49:55:f7:db:fa:
fb:76:de:b0:22:d8:e9:13:07:b2:45:1b:84:0f:6e:5d:42:db:
8d:fc:84:58:be:31:56:83:f2:19:21:32:1b:fe:81:93:7b:c3:
c4:4e:92:d0:79:5d:b7:2c:76:05:e9:7f:68:25:71:e1:b7:f2:
fc:cd:f1:bc:02:45:26:e8:1e:41:58:9e:08:bc:44:11:de:b8:
ba:da:b0:f4:c2:5e:7f:2b:9f:cf:d7:c9:24:81:0f:81:71:c2:
17:2b:58:c8:c1:0c:d8:07:f3:48:2e:ff:f3:fe:83:d6:be:6e:
29:e8:26:a3:5a:1e:d4:b1:42:78:bb:92:52:7b:9f:fd:fb:33:
09:6a:84:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:03:45 2026 by rpki-client