Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
File: U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft (raw, json)
Hash identifier: bdodIwS/pwH7P5x2j3yOziSqUYaMKE/3iHcZ0sxj/ko=
Subject key identifier: F7:62:8D:4D:04:82:9C:C0:AA:29:F8:DF:B8:C5:30:B4:9A:29:F8:5E
Authority key identifier: 53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
Certificate issuer: /CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Certificate serial: 01A08309D1AF4A11A29637A45F6984C0BB20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
Manifest number: 059C
Signing time: Tue 08 Sep 2026 22:00:53 +0000
Manifest this update: Tue 08 Sep 2026 22:00:53 +0000
Manifest next update: Wed 09 Sep 2026 22:00:53 +0000
Files and hashes: 1: U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl (hash: rMqJYcBGhjBzTE1sQURuuOjf2oDtH1mv32jdo3v9C+s=)
2: qAWpsleSdTKU2QK0ge-DYDJtKTg.roa (hash: hBYa6IMYEuL9W6YmuZd1vKmz/EkBj75T5fHCqH+FPYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:83:09:d1:af:4a:11:a2:96:37:a4:5f:69:84:c0:bb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Validity
Not Before: Sep 8 22:00:53 2026 GMT
Not After : Sep 9 22:00:53 2026 GMT
Subject: CN=f7628d4d04829cc0aa29f8dfb8c530b49a29f85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9e:9f:3e:db:bc:7b:d3:e3:8a:01:09:86:55:
2e:0c:de:8a:be:53:f5:ff:7a:b5:38:08:78:03:80:
80:f1:ef:96:6a:52:fb:58:e2:5d:de:84:2d:b2:85:
9c:85:d0:d3:80:f1:d0:6a:40:e2:31:63:29:23:9c:
d3:e6:ca:b1:99:c4:f8:7a:cb:93:91:b4:d1:89:fc:
c5:64:f1:a7:10:ba:fa:93:3c:4d:cb:a0:60:af:8e:
ab:6f:d2:7c:25:67:6e:c1:52:3e:8f:ba:ff:60:8d:
4e:8f:4a:6e:f4:19:87:a2:fd:76:70:a5:fa:b5:06:
8e:39:ea:17:dc:f7:4e:dc:d9:59:3a:a8:21:81:6d:
2b:6d:60:65:27:cc:26:7a:2b:a3:5e:11:ff:5f:6c:
d1:35:24:23:02:dc:a0:54:07:45:fe:88:b1:61:3d:
be:e0:c0:ea:19:90:85:2a:68:8a:bc:86:9e:4d:48:
dd:8d:05:1d:c4:eb:08:a1:fb:ba:71:d4:38:94:c1:
e1:65:63:7a:77:5c:ac:b3:11:61:df:fc:2e:e6:34:
2a:4e:dc:3c:71:7e:9d:40:3b:99:c9:9f:8f:f9:27:
3b:6a:31:12:1b:8b:10:60:b9:09:43:78:c8:19:d1:
b2:db:03:c1:64:7f:f4:45:32:c4:06:d9:88:64:6f:
4d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:62:8D:4D:04:82:9C:C0:AA:29:F8:DF:B8:C5:30:B4:9A:29:F8:5E
X509v3 Authority Key Identifier:
keyid:53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ee:2a:cf:da:ee:5c:53:19:14:f8:4c:0a:9f:97:8e:e8:cd:
88:e7:52:4e:e8:75:4f:2b:8c:e1:8e:ee:ef:8c:58:a5:7b:40:
59:c6:dc:f3:04:6e:f5:71:2c:04:67:fb:f0:77:db:17:61:3f:
d0:ca:32:22:f0:28:01:00:47:e1:d5:bc:d7:80:5c:f1:bd:77:
64:44:72:28:88:b7:87:03:d6:78:8e:97:16:e6:78:d5:36:b9:
61:37:9c:eb:13:28:f8:32:66:c4:ad:91:55:d0:e4:13:bb:a6:
4b:6a:89:b4:01:ce:2d:fb:e8:fd:40:66:eb:cf:a5:5e:13:58:
c6:98:65:c6:c4:36:43:2b:4c:65:eb:98:a1:5e:e9:6b:2a:08:
25:d3:4d:57:ea:a3:14:13:87:76:5a:f4:91:78:00:30:04:cf:
1e:b1:a8:1e:5e:a6:f8:fe:a5:0f:44:15:99:8f:16:65:fa:47:
15:b0:4f:82:5c:ce:6a:ea:1f:da:74:0d:22:1d:5f:49:bb:4b:
6a:0d:00:bc:9f:c7:6a:4e:6e:28:18:e5:8e:b5:1c:81:fb:29:
5f:e1:e1:69:f4:00:a7:7e:1c:7e:b0:de:00:e8:c3:f0:4b:8a:
19:4f:b2:65:95:90:36:7f:00:f6:96:7d:82:55:33:48:b0:a5:
e9:fd:44:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 05:38:43 2026 by rpki-client