Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
File: U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft (raw, json)
Hash identifier: OrAK3SseVVM2ZmjsrVmmpPUsv2y1LnNWjEQtFIDtmf4=
Subject key identifier: 0B:A1:C8:11:B5:92:5E:78:8D:0B:88:07:E0:DD:24:F0:38:36:1C:36
Authority key identifier: 53:E3:AE:DD:91:BE:82:45:13:42:DC:D1:C9:82:83:45:DB:66:1A:5F
Certificate issuer: /CN=53e3aedd91be82451342dcd1c9828345db661a5f
Certificate serial: 01A155C13F133DC78796F8381A0C06465ED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
Manifest number: 0D3C
Signing time: Mon 19 Oct 2026 20:01:30 +0000
Manifest this update: Mon 19 Oct 2026 20:01:30 +0000
Manifest next update: Tue 20 Oct 2026 20:01:30 +0000
Files and hashes: 1: U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl (hash: wMYN+VNgr0+ecvJ93yMykvbDvq813bFcjnTtmCtD1d4=)
2: d4Z8dyEwWVlK-z1Mt82VdRZaIcY.roa (hash: pNguw2qBCLAYUuPZ0wVkI6YbP099kM2Xh8UMvqT4t9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 20:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:c1:3f:13:3d:c7:87:96:f8:38:1a:0c:06:46:5e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53e3aedd91be82451342dcd1c9828345db661a5f
Validity
Not Before: Oct 19 20:01:30 2026 GMT
Not After : Oct 20 20:01:30 2026 GMT
Subject: CN=0ba1c811b5925e788d0b8807e0dd24f038361c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e7:ef:4c:85:68:be:f3:8f:ee:2d:dd:8d:9f:
68:09:8f:dd:df:0a:aa:40:c7:10:d7:39:b0:10:10:
27:49:6e:54:d0:38:89:3e:17:8f:e6:43:5c:00:f2:
0e:4e:f5:42:d2:33:82:ef:ea:b5:e0:58:f4:c7:f2:
5c:67:64:04:b8:fe:de:27:05:ca:76:16:6a:2b:74:
a8:ac:5e:a7:28:b3:8a:c2:c1:d0:36:38:7e:1c:9a:
b3:fb:a9:10:aa:87:ec:bf:52:22:f0:84:eb:14:59:
b7:60:ab:ff:a5:26:aa:35:52:2a:03:6f:02:9b:99:
47:62:8b:cb:52:0c:0e:07:9c:36:91:2e:94:dc:6b:
b8:96:74:a4:08:a5:3a:d6:88:1c:3f:e9:42:2b:a9:
28:ef:3e:e4:0d:81:20:1a:a0:1e:09:68:cb:91:83:
7b:13:82:09:75:9e:7e:5f:3f:07:66:25:c4:f5:1e:
65:db:df:50:7e:34:d9:82:51:4a:93:3b:f1:57:33:
92:ba:66:9b:82:d1:c0:55:66:1d:26:6b:b2:c4:55:
59:0a:25:ad:ea:d7:ea:78:e5:9f:e2:bf:78:d8:26:
65:db:85:51:bc:92:79:ec:99:ea:bf:ab:6a:fd:9a:
68:ff:4e:5d:f9:46:c9:df:66:26:26:79:92:ed:9e:
4f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A1:C8:11:B5:92:5E:78:8D:0B:88:07:E0:DD:24:F0:38:36:1C:36
X509v3 Authority Key Identifier:
keyid:53:E3:AE:DD:91:BE:82:45:13:42:DC:D1:C9:82:83:45:DB:66:1A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c0:45:b3:06:25:06:47:24:aa:45:84:d0:9a:88:dd:eb:30:
5a:93:79:27:dc:b7:98:a0:00:eb:4c:7b:5f:81:7e:d8:d4:06:
f5:60:32:d8:93:32:16:96:21:b4:c4:a5:35:fd:44:35:37:d6:
01:1d:00:bd:74:5e:5c:95:9f:7a:49:12:23:13:a1:20:4d:bc:
c1:7c:44:36:c7:3b:12:fe:2d:44:35:92:d8:b3:36:f0:81:bc:
50:38:4f:c8:ee:f4:20:ae:40:cb:46:bd:49:91:ae:3f:1a:8d:
0b:ef:e1:76:f9:ba:51:b5:de:3d:ee:04:6a:85:01:2e:4e:75:
53:47:13:f1:10:cc:68:d6:e9:05:1e:59:82:63:68:ee:4a:de:
67:f0:99:97:02:28:21:a8:e3:1b:a3:e1:c4:a5:64:b6:93:48:
ad:1a:31:30:b4:cd:56:1c:91:d8:25:45:9a:b0:9a:e5:35:d1:
ca:dc:54:85:0a:dd:55:d4:b4:69:5c:de:fb:bf:69:36:80:bc:
37:f4:ce:63:eb:b4:c5:80:72:8f:a2:e4:cd:67:e1:c3:09:81:
8d:86:ed:73:53:0d:b4:9d:03:16:11:e6:3c:4a:cc:3d:9e:64:
0e:3d:5b:e4:00:ea:90:6b:02:84:31:5d:b6:c5:71:25:db:99:
92:09:90:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:56:48 2026 by rpki-client