Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
File: U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft (raw, json)
Hash identifier: vyfgv1/8TeHl3K7R2RBlj4msFu1YXYfyFlr1DT7Ps60=
Subject key identifier: A7:2F:2D:F1:F9:37:13:DC:C8:8C:2B:17:25:66:13:65:E8:D0:5F:AD
Authority key identifier: 53:E3:AE:DD:91:BE:82:45:13:42:DC:D1:C9:82:83:45:DB:66:1A:5F
Certificate issuer: /CN=53e3aedd91be82451342dcd1c9828345db661a5f
Certificate serial: 01A16AFEFCC8BA1A253B24CCC55449B4D9AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
Manifest number: 0D47
Signing time: Fri 23 Oct 2026 23:00:58 +0000
Manifest this update: Fri 23 Oct 2026 23:00:58 +0000
Manifest next update: Sat 24 Oct 2026 23:00:58 +0000
Files and hashes: 1: U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl (hash: SPwKJ+yxtI5g+/KlwJTYeCN52EBKbx4EcH36JZ9gKMs=)
2: d4Z8dyEwWVlK-z1Mt82VdRZaIcY.roa (hash: pNguw2qBCLAYUuPZ0wVkI6YbP099kM2Xh8UMvqT4t9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:fe:fc:c8:ba:1a:25:3b:24:cc:c5:54:49:b4:d9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53e3aedd91be82451342dcd1c9828345db661a5f
Validity
Not Before: Oct 23 23:00:58 2026 GMT
Not After : Oct 24 23:00:58 2026 GMT
Subject: CN=a72f2df1f93713dcc88c2b1725661365e8d05fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:32:82:6a:ac:6e:a5:c0:38:e1:5e:e8:a4:ff:
38:95:d0:b0:21:f5:cf:5c:e0:49:9c:16:30:5e:91:
29:cf:3f:fd:24:9c:9e:56:18:69:91:6b:29:1c:a8:
3c:97:10:fe:1a:61:dc:9a:6b:8d:14:cb:70:b0:20:
3a:11:a5:7c:9b:01:c7:78:bf:8a:b9:d7:c6:ab:25:
ee:7d:da:5c:48:6a:73:63:41:8d:01:67:f8:7e:f7:
d5:be:e0:bb:8d:27:77:91:73:ad:e7:5e:32:75:9d:
0c:ad:1f:a1:f4:da:99:6d:9e:f7:2a:43:7c:68:27:
21:33:5c:17:c5:43:a1:eb:55:8c:66:d2:6c:9a:8d:
27:68:f0:13:2a:37:05:e1:6f:40:d7:ba:85:75:03:
9b:2c:3f:90:65:0c:50:30:c4:99:be:1b:86:a8:e0:
e2:05:7b:e4:a4:58:33:30:63:20:21:43:97:7a:7a:
41:73:b4:0d:76:72:1b:84:6e:eb:5c:83:fe:4e:ff:
20:ab:8a:69:3d:2e:e0:66:37:69:f7:89:40:47:25:
6a:fe:9e:f6:a1:12:52:d2:95:61:ae:8d:c6:22:b5:
ba:38:a0:c0:1c:0f:b8:0d:c2:83:27:e6:2c:f2:b0:
ea:a6:b7:bd:92:68:03:bf:1e:88:c5:15:e3:85:2b:
c9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2F:2D:F1:F9:37:13:DC:C8:8C:2B:17:25:66:13:65:E8:D0:5F:AD
X509v3 Authority Key Identifier:
keyid:53:E3:AE:DD:91:BE:82:45:13:42:DC:D1:C9:82:83:45:DB:66:1A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:68:5c:e5:39:69:6f:7e:0d:d6:41:30:1f:c1:8d:91:51:88:
69:c7:7d:84:5c:6c:e7:07:6c:d3:96:88:76:24:9b:cb:54:8d:
99:55:4d:1a:47:7e:10:27:3a:b7:6f:5b:9c:68:2c:2b:07:cc:
d1:7c:3f:7a:fa:ce:b9:5e:69:5f:63:19:b0:5e:d8:06:76:16:
ab:0a:45:74:af:c5:2f:b9:75:36:12:f8:80:ab:22:33:09:b9:
ff:93:f0:ac:d3:d2:86:a8:52:f0:1b:10:06:27:9f:74:61:29:
39:57:df:23:2b:7b:59:7c:a0:49:6c:23:0b:a3:2d:c5:0f:19:
82:43:74:93:60:cd:01:a8:95:93:63:b4:f0:2b:9c:be:f7:9f:
04:00:7f:3d:87:a3:97:28:77:52:09:71:63:61:74:8e:79:3b:
43:45:ea:a9:ed:19:22:88:1c:07:cd:c6:3b:f9:19:bc:93:3f:
05:8b:3b:31:ec:75:90:44:45:ae:f7:e6:23:e5:f6:3e:c2:18:
22:4b:c8:55:31:ba:61:b6:18:c7:34:63:ab:f7:1b:69:a0:cd:
47:9d:f5:25:15:12:e9:56:c3:2d:ba:00:e7:76:9d:94:82:a5:
32:01:a1:48:36:e0:9b:11:76:fe:d3:be:aa:76:0d:27:11:87:
e8:5f:16:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 07:07:44 2026 by rpki-client