Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
File: U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft (raw, json)
Hash identifier: hRy96qPvTcBooWMGSBrLTU6WGCHxBlprIQkI3HV2Uuw=
Subject key identifier: C3:63:B3:B4:DD:BC:9C:9A:AE:2D:49:09:1A:D1:7B:CC:45:53:92:0B
Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Certificate serial: 019EB6FC524E2FF808942E2D3B17E899C868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
Manifest number: 1953
Signing time: Thu 11 Jun 2026 14:00:49 +0000
Manifest this update: Thu 11 Jun 2026 14:00:49 +0000
Manifest next update: Fri 12 Jun 2026 14:00:49 +0000
Files and hashes: 1: 1-NYp-ANDJGWn2zBa6tZxxYGdDfA.roa (hash: ACBt4zT2KY2CKqY2w+FWy0192eghSargg1ySIXwb63Y=)
2: U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl (hash: V5+HZZsxVQaNY/mX/nPR5+5cUcsJ2bcH9GtK1PMayqg=)
3: gGTUtih5jVa-QbWTlOxD1xFHxEM.roa (hash: V1056kAulKAWgU4sgdguF4s6mRxgfRsvQzLGzFRcugQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fc:52:4e:2f:f8:08:94:2e:2d:3b:17:e8:99:c8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Validity
Not Before: Jun 11 14:00:49 2026 GMT
Not After : Jun 12 14:00:49 2026 GMT
Subject: CN=c363b3b4ddbc9c9aae2d49091ad17bcc4553920b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:88:da:52:ed:2a:0a:e0:58:f4:78:f3:af:6d:
8a:1d:ff:d4:3a:f0:0d:27:b8:2c:86:8d:7f:b8:94:
72:da:16:78:c8:0b:3a:98:67:20:fc:37:58:ae:19:
a4:31:72:68:fd:a3:8f:06:6e:7f:9b:56:23:64:3d:
07:27:98:84:58:f7:44:db:5a:f7:30:d5:8f:5a:f2:
db:d0:04:1a:b3:1c:89:88:f6:da:ae:2a:9b:97:dc:
2a:bd:e1:0f:2a:e5:57:f5:d8:d2:df:93:8b:ed:78:
2d:e9:03:74:e5:f8:45:99:14:c4:88:41:8c:0f:88:
b1:05:4f:08:cf:47:e7:3b:6c:e5:48:60:21:4f:93:
1f:df:b1:39:86:d6:dd:c1:27:b6:23:fc:97:32:be:
6a:23:a1:6b:dd:5c:1d:39:a7:da:76:93:5e:4f:69:
1b:4f:fd:c7:3a:79:de:65:d9:96:05:13:bc:0b:dc:
1b:97:96:73:2c:e1:1b:bf:05:62:57:42:4a:7b:d5:
f8:16:fd:25:9c:ac:d1:54:af:83:91:e5:9e:a7:cc:
48:b5:6d:23:3b:a5:35:33:0f:92:d9:30:ab:75:57:
4a:fd:44:13:15:24:1f:0d:2a:7d:f7:12:a6:55:28:
0b:41:72:83:26:ff:60:1a:19:5e:8b:f2:ad:b7:e4:
6b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:63:B3:B4:DD:BC:9C:9A:AE:2D:49:09:1A:D1:7B:CC:45:53:92:0B
X509v3 Authority Key Identifier:
keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ff:e0:2d:6b:63:db:a5:6b:b0:5d:d0:0f:ee:c6:1b:11:b2:
fc:97:92:07:cb:cd:74:d2:42:12:fd:71:5d:25:1e:7c:d8:35:
95:4e:f4:33:7f:89:05:ee:22:c6:0b:cf:2d:33:8a:09:61:21:
3c:67:7a:fa:86:f4:57:f6:23:d7:a2:11:be:bb:c1:3f:13:d6:
01:c7:47:88:c8:47:ae:06:e2:6d:c8:93:93:58:f8:93:ec:68:
79:50:7d:bc:2b:10:31:42:9b:9e:2b:76:5f:e6:6a:9f:eb:8d:
05:d6:ce:3d:58:1c:1f:d7:8a:0f:a8:64:88:f6:03:7d:1e:d8:
59:4c:23:85:2b:2a:14:84:52:eb:33:96:2a:e4:a0:7b:81:e8:
25:64:92:2c:ec:35:89:27:f5:31:05:e9:d0:f5:70:f1:70:e5:
69:54:82:dc:b7:42:ae:e6:e5:0a:8e:02:80:05:c8:eb:5a:1f:
a1:97:b8:90:00:65:dd:17:35:4f:32:66:34:e2:cb:80:9a:c3:
a8:9f:4d:6e:f6:5f:be:93:69:9d:b6:8f:6f:a3:40:e6:b1:5a:
01:70:40:ec:d2:56:0f:f6:25:60:3b:73:8f:2f:62:7f:4c:08:
b2:2f:6b:fe:a4:9c:5e:e4:46:bb:3e:07:98:1e:c2:bc:c3:88:
e2:f8:2a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:13:57 2026 by rpki-client