Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
File: U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft (raw, json)
Hash identifier: pgab1BSZEhUwxaiaJSMBY9M9zmC8XCQBptE3eg/Kb3E=
Subject key identifier: D9:A6:34:A4:2C:14:90:0E:1C:7E:4F:7F:2C:29:7A:25:6E:6D:97:4B
Authority key identifier: 53:E3:AE:DD:91:BE:82:45:13:42:DC:D1:C9:82:83:45:DB:66:1A:5F
Certificate issuer: /CN=53e3aedd91be82451342dcd1c9828345db661a5f
Certificate serial: 01A001DD75F0A1FE6A6ED8BEBEE5E2B67819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
Manifest number: 0C8C
Signing time: Fri 14 Aug 2026 20:01:25 +0000
Manifest this update: Fri 14 Aug 2026 20:01:25 +0000
Manifest next update: Sat 15 Aug 2026 20:01:25 +0000
Files and hashes: 1: U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl (hash: rn0x9uktjX2VWE+N65yMHYtUm2B8Mpj8Q9KhWjLNVtY=)
2: d4Z8dyEwWVlK-z1Mt82VdRZaIcY.roa (hash: pNguw2qBCLAYUuPZ0wVkI6YbP099kM2Xh8UMvqT4t9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:75:f0:a1:fe:6a:6e:d8:be:be:e5:e2:b6:78:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53e3aedd91be82451342dcd1c9828345db661a5f
Validity
Not Before: Aug 14 20:01:25 2026 GMT
Not After : Aug 15 20:01:25 2026 GMT
Subject: CN=d9a634a42c14900e1c7e4f7f2c297a256e6d974b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:25:d4:5f:01:4c:a6:d2:51:67:73:03:97:63:
c9:6c:16:41:52:de:2e:ea:53:59:09:c1:05:84:38:
a6:af:92:d9:ba:88:1f:f0:d8:2d:ee:23:16:d3:30:
25:6c:a9:bc:0d:aa:6a:cc:9d:1d:f0:15:5f:03:92:
ec:07:a2:21:bd:25:34:d3:d8:4f:6c:6a:6f:c5:20:
e0:b8:2a:62:ae:03:72:41:9e:84:c6:f7:d5:cb:cd:
d3:53:0f:fb:4b:bb:fc:e4:e8:41:93:b1:b7:5d:23:
5f:48:bf:cb:5d:0a:06:c0:01:c1:f2:a7:6c:da:7a:
50:31:aa:ea:35:60:13:11:78:f5:ce:34:fe:ca:2e:
f1:3d:01:fb:d9:1e:7b:41:3d:8e:4a:e9:e3:66:85:
d1:5f:ab:4a:de:29:02:6d:6e:4d:18:f8:0a:44:f5:
42:98:99:5b:93:46:8d:2d:1d:72:b7:09:cf:96:d1:
46:a7:0d:59:27:a8:34:11:d7:3d:b0:32:e5:55:d8:
1f:23:0d:d6:b9:6e:f6:e5:5a:b3:43:97:69:7e:ff:
c6:73:fb:26:bf:d0:eb:31:0b:1d:91:44:da:ce:a4:
de:52:d6:36:a6:5b:9c:0e:3a:1b:eb:4a:88:51:39:
c8:26:57:8d:7d:f8:88:6c:d4:1a:1b:ec:c5:32:e4:
0c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A6:34:A4:2C:14:90:0E:1C:7E:4F:7F:2C:29:7A:25:6E:6D:97:4B
X509v3 Authority Key Identifier:
keyid:53:E3:AE:DD:91:BE:82:45:13:42:DC:D1:C9:82:83:45:DB:66:1A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:3e:cd:7d:06:22:8c:cc:9d:55:e3:a7:79:37:cd:3d:81:5f:
7b:8d:b2:75:90:cb:d6:58:b4:26:72:a2:8b:4c:e0:4d:1d:87:
5a:13:7e:9b:a2:ef:59:b5:22:ae:27:a6:66:45:1b:94:1d:cd:
8a:86:5b:8a:c1:e7:3e:69:77:bf:da:1d:d0:ae:1d:d4:32:06:
1d:6d:72:c0:9d:4a:62:9c:2e:3f:b5:65:9c:ed:3b:71:c4:56:
ce:48:b2:a9:76:c1:36:9a:12:de:b3:7e:4b:a9:b1:ec:44:b9:
ab:ca:d4:9d:09:f9:1c:9e:e5:d4:88:5f:fa:78:cf:31:38:40:
af:ce:8a:0a:21:f8:a5:65:ad:96:14:47:c7:69:c2:6f:34:86:
c1:1d:0e:bf:d3:0f:71:9b:d6:be:e8:03:3f:99:05:7d:33:5a:
1a:6b:8f:98:d8:9e:f2:45:ee:7f:e7:ee:b7:7a:a1:27:69:79:
ba:e2:68:6f:27:1d:cb:7e:49:05:d6:cc:7e:59:93:2f:0c:e9:
4d:aa:02:53:df:9a:d4:f6:a9:cf:5e:1e:09:fd:01:68:2e:56:
0a:88:ac:cd:7c:e9:6e:4a:91:cf:7b:a2:8e:f6:f4:d9:3c:9c:
4b:f7:62:b8:89:da:0f:dc:3f:f5:9c:74:e8:95:5b:fa:14:0c:
2a:6c:dd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:29:44 2026 by rpki-client