Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/U3kggzC5j0ALjYNFoCtZHBoXLwo.mft
File: U3kggzC5j0ALjYNFoCtZHBoXLwo.mft (raw, json)
Hash identifier: BEn7ooxiin16qkt2bbujYgN3CSBT4imRLuyuY65///I=
Subject key identifier: A9:60:83:46:39:82:0C:2E:DF:F3:14:98:F8:0A:D0:BE:81:8F:4E:46
Authority key identifier: 53:79:20:83:30:B9:8F:40:0B:8D:83:45:A0:2B:59:1C:1A:17:2F:0A
Certificate issuer: /CN=5379208330b98f400b8d8345a02b591c1a172f0a
Certificate serial: 01A0016EDBA8BBB0FF57207223E811D05B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3kggzC5j0ALjYNFoCtZHBoXLwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/U3kggzC5j0ALjYNFoCtZHBoXLwo.mft
Manifest number: 7A
Signing time: Fri 14 Aug 2026 18:00:37 +0000
Manifest this update: Fri 14 Aug 2026 18:00:37 +0000
Manifest next update: Sat 15 Aug 2026 18:00:37 +0000
Files and hashes: 1: O-cCgnAl_EXxSdCrC4tkvkppPd4.roa (hash: WRAqcdEC4BihxMpwxNM+vLeE0V773UMxtKGnjU33uZ4=)
2: U3kggzC5j0ALjYNFoCtZHBoXLwo.crl (hash: Hy1zhzzQPB1C5S0Qx1Zn13yiPh5FbLCbA7ZpV2h1IrQ=)
3: qoEL7wNReBLuDKc4jYOaN4M9oBw.roa (hash: qFJEnOgfFFYB+MoLzXEG2pB0vqzM3XWcILWtmrtL3/Q=)
4: xT-39jUqS4f54vy6vE4YoHmThAg.roa (hash: sLrCpJdnB15y/XZZIevDa0EIGfWSXGKGKqzSyzhFle4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/U3kggzC5j0ALjYNFoCtZHBoXLwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/U3kggzC5j0ALjYNFoCtZHBoXLwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3kggzC5j0ALjYNFoCtZHBoXLwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6e:db:a8:bb:b0:ff:57:20:72:23:e8:11:d0:5b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5379208330b98f400b8d8345a02b591c1a172f0a
Validity
Not Before: Aug 14 18:00:37 2026 GMT
Not After : Aug 15 18:00:37 2026 GMT
Subject: CN=a960834639820c2edff31498f80ad0be818f4e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c8:30:80:b4:c3:8f:53:10:33:d4:e7:3e:32:
bf:0b:69:5a:79:5e:2d:d5:4b:ef:95:57:93:82:5a:
c8:9e:a1:5f:f8:29:4d:f9:ac:f8:e3:b1:f0:14:78:
95:a9:2a:e2:b2:e2:c1:1c:eb:c8:bf:c5:0c:6d:87:
e8:52:52:19:94:e0:ff:63:c8:26:c0:fb:ed:58:e6:
f4:73:8b:3a:8e:4c:97:bb:e1:2e:dd:09:35:07:1d:
96:c8:b9:83:ee:11:1b:78:ab:51:f7:4d:be:3d:5c:
dd:67:9f:9a:3e:d2:2a:4b:50:36:d7:b6:26:88:38:
90:8b:09:dc:88:53:1d:ac:58:b6:82:22:38:45:b9:
b9:67:df:36:a5:a4:34:f9:37:81:40:24:10:f4:70:
ea:c4:a2:26:70:25:f7:ec:f4:eb:7a:9f:84:f5:90:
62:28:a4:ea:08:52:de:0b:8a:61:ee:6a:20:38:16:
38:54:3f:e0:3b:78:c5:4f:2e:bb:09:d7:91:d0:a9:
8c:f8:bf:46:d1:08:75:28:6f:c5:65:7b:a2:14:96:
19:f3:7b:5d:a8:68:9a:6d:c3:0e:54:a8:cc:98:94:
45:ff:f8:d6:f8:e3:5b:0b:66:16:da:f7:12:c3:65:
d1:fb:ac:9c:7c:3e:4a:cb:10:7e:21:d2:15:0d:79:
ec:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:60:83:46:39:82:0C:2E:DF:F3:14:98:F8:0A:D0:BE:81:8F:4E:46
X509v3 Authority Key Identifier:
keyid:53:79:20:83:30:B9:8F:40:0B:8D:83:45:A0:2B:59:1C:1A:17:2F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3kggzC5j0ALjYNFoCtZHBoXLwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/U3kggzC5j0ALjYNFoCtZHBoXLwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/U3kggzC5j0ALjYNFoCtZHBoXLwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ad:1c:ab:9f:b5:28:d4:f6:e9:75:8f:e5:75:56:8a:f0:68:
ef:a7:67:f1:7f:9c:e0:7d:61:54:3f:00:b0:00:0f:cd:f5:90:
3f:79:ff:9b:17:99:55:94:2e:75:02:1a:34:c8:84:11:31:57:
45:fd:2f:43:0e:94:06:dc:14:1e:90:05:56:ea:6b:3e:00:cf:
e5:87:f6:f3:7c:c4:6f:2d:20:63:cc:14:ff:48:e3:23:16:4d:
4c:d4:0c:ee:e8:b5:08:aa:ba:92:65:78:c2:14:95:6d:75:18:
44:6a:df:4f:f2:12:90:5b:e7:ad:68:8c:e3:bf:bc:74:bb:7f:
bf:a1:f3:b9:b4:df:d7:e4:b0:65:f5:17:02:24:4b:87:f0:4e:
bf:29:30:25:f9:1d:a6:46:32:49:ab:17:52:3b:20:b5:92:98:
51:e5:9c:b4:9f:99:7c:d1:68:c6:7e:eb:03:0e:d1:06:68:1d:
17:9a:6b:f7:35:9d:6e:a1:0c:57:99:72:77:68:7d:a9:ee:ad:
8e:59:b7:59:90:e8:f4:66:61:74:cc:f6:47:71:7a:4b:aa:b6:
bd:15:d0:e5:18:64:2a:c3:4a:61:30:15:d9:13:23:2d:ac:ce:
a7:e8:b3:4e:fb:43:bc:79:08:3c:5c:46:de:b7:1d:12:9f:83:
30:1d:b6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:16:17 2026 by rpki-client