Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
File: U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft (raw, json)
Hash identifier: MPi/fZ/ZUDLBaQKUtuvCd+9ed9ZTjRj1GIY57It5p0w=
Subject key identifier: 21:0F:CF:7F:D1:99:84:E2:F0:CD:53:69:27:06:63:64:77:4A:72:87
Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Certificate serial: 01A08A55CE0D194A477F2237A1B611F5210E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
Manifest number: 1A45
Signing time: Thu 10 Sep 2026 08:01:14 +0000
Manifest this update: Thu 10 Sep 2026 08:01:14 +0000
Manifest next update: Fri 11 Sep 2026 08:01:14 +0000
Files and hashes: 1: 1-NYp-ANDJGWn2zBa6tZxxYGdDfA.roa (hash: ACBt4zT2KY2CKqY2w+FWy0192eghSargg1ySIXwb63Y=)
2: U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl (hash: SDV+jEJUn3ngmBvnn3Hncvc00V574afH5huV7lwgTLA=)
3: gGTUtih5jVa-QbWTlOxD1xFHxEM.roa (hash: V1056kAulKAWgU4sgdguF4s6mRxgfRsvQzLGzFRcugQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:ce:0d:19:4a:47:7f:22:37:a1:b6:11:f5:21:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Validity
Not Before: Sep 10 08:01:14 2026 GMT
Not After : Sep 11 08:01:14 2026 GMT
Subject: CN=210fcf7fd19984e2f0cd536927066364774a7287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3d:57:6d:8d:86:8d:cf:69:fc:db:dd:ba:42:
6d:5e:9c:31:43:ba:d2:1b:22:cb:c7:d2:60:03:e0:
24:09:77:e1:e8:97:24:2d:1e:ce:c9:ce:07:20:6a:
7e:68:f0:8a:e5:58:94:46:42:db:ac:40:11:88:49:
24:5b:d1:f3:71:31:76:39:0a:c9:39:e8:90:10:15:
06:01:d1:cf:9f:78:d0:37:ca:5a:9e:b8:7b:68:d2:
dc:ce:22:22:73:af:4b:fb:0a:d0:c8:f9:4c:69:07:
35:f2:bf:17:3c:82:4a:7f:bb:a8:35:04:50:7c:1f:
c6:7c:a8:5a:18:24:1b:16:ba:e0:0e:8a:3b:e5:30:
5d:d5:0e:64:bb:0c:a4:5a:77:fd:37:0f:d5:6d:05:
dd:b0:96:c0:fd:d8:21:5c:77:dd:37:31:3a:84:2f:
1f:c3:cf:bf:cc:33:a2:9e:62:89:63:be:de:89:5f:
e1:fe:2c:c6:ed:1a:36:d5:42:9f:52:62:f0:d9:c1:
e6:0a:38:82:c4:c0:86:c1:0d:c6:af:ba:b6:ba:24:
50:de:4b:eb:8c:3c:1f:36:3f:82:84:4e:70:3f:10:
4b:72:03:1d:f8:b1:ed:44:4c:52:d5:80:de:62:e6:
ab:23:09:54:b1:33:ff:8f:eb:62:ec:ab:94:91:19:
25:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0F:CF:7F:D1:99:84:E2:F0:CD:53:69:27:06:63:64:77:4A:72:87
X509v3 Authority Key Identifier:
keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:6d:e3:45:f4:12:74:c0:27:b0:26:b6:17:2f:c8:d9:dd:3c:
56:21:ad:3d:c4:d6:b6:1c:1b:b8:08:23:97:a5:ef:4e:bd:8a:
5e:7d:b3:66:ff:38:10:2f:dc:27:4a:92:24:f9:cd:54:d3:03:
2d:35:cc:34:8c:54:31:9d:b9:75:2d:4c:2a:46:f8:2f:de:5a:
34:bf:ac:81:34:6b:10:71:5c:f6:9c:e2:71:b1:46:3e:42:00:
9d:bf:ba:56:92:95:33:a6:4f:5d:fe:bc:cc:d3:96:db:cc:5f:
aa:ec:c4:88:ee:f3:97:15:32:9d:d6:60:68:13:6a:55:7a:0b:
e7:8a:6d:43:0f:2b:db:b7:eb:41:9d:d7:e7:29:28:2a:2b:29:
39:56:7b:20:ad:26:4b:fa:9f:db:b4:03:1c:66:b8:f3:f3:86:
e7:6e:ef:f6:cf:d9:2a:10:57:1f:8c:84:4a:b1:8a:80:bf:ad:
ed:f2:09:53:f7:44:18:bd:ab:0e:99:fd:35:e8:43:3f:96:d0:
b9:9b:5e:4c:7a:8a:18:94:01:12:86:ba:67:4f:0e:d4:d8:16:
69:17:50:8a:8a:5f:12:d0:60:79:6e:e4:b4:b1:6b:b0:07:a0:
f5:2d:64:e3:26:59:91:0c:2c:93:c9:b7:01:89:58:e5:50:df:
1e:d6:1b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:13:18 2026 by rpki-client