Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
File: U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft (raw, json)
Hash identifier: PIurdbIG9n92bpCL6V1Li59BadbA4B8tgRmfuyfMxco=
Subject key identifier: 04:02:B8:23:4A:5D:7F:96:5B:E3:E5:25:36:31:5A:C8:47:7E:DE:8C
Authority key identifier: 53:49:C2:D0:0B:A4:6B:E9:24:4B:76:19:4B:AA:10:F3:3C:E3:46:2C
Certificate issuer: /CN=5349c2d00ba46be9244b76194baa10f33ce3462c
Certificate serial: 019FF345C90F3155489DE6238EE541AC8A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
Manifest number: 0A86
Signing time: Wed 12 Aug 2026 00:01:04 +0000
Manifest this update: Wed 12 Aug 2026 00:01:04 +0000
Manifest next update: Thu 13 Aug 2026 00:01:04 +0000
Files and hashes: 1: U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl (hash: 0P+d7cd4QzDacRXm1HACR9M+mwv2K46VXRbeX7BAzz8=)
2: XcRX1RAJL4NGdzyun1ejeZqAF24.roa (hash: YNAZegeHiWzquonxoxjxpFIiVyp3kn/I+1eygwpZVIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f3:45:c9:0f:31:55:48:9d:e6:23:8e:e5:41:ac:8a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5349c2d00ba46be9244b76194baa10f33ce3462c
Validity
Not Before: Aug 12 00:01:04 2026 GMT
Not After : Aug 13 00:01:04 2026 GMT
Subject: CN=0402b8234a5d7f965be3e52536315ac8477ede8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:42:93:53:7f:b8:73:e6:23:df:5a:da:25:f5:
af:fa:47:6a:5f:e8:8d:f4:e9:4c:90:3d:69:c3:1e:
42:e6:d5:37:e2:54:22:e9:84:06:ad:b6:8f:3d:ad:
11:ff:4a:b2:09:f0:b8:90:28:6e:74:8f:29:ec:4f:
af:7a:ee:88:54:0f:7b:65:d3:9a:0d:89:ff:e4:cd:
92:c0:96:9c:37:f3:2f:11:cb:ae:6e:86:50:de:b9:
35:f2:29:7e:40:8f:59:29:07:6c:33:9e:79:27:41:
9b:97:a2:67:b2:9c:8d:69:11:b7:12:ae:c2:95:69:
5f:55:76:2e:0a:6c:28:a5:be:77:e6:7c:7d:d4:47:
99:78:36:bb:3e:80:bc:90:eb:11:00:43:47:07:5d:
a5:ee:6b:0d:27:0e:49:1e:91:dc:4b:1c:10:37:e0:
d5:86:7d:fb:a0:f7:0e:19:e5:9a:68:38:8a:ff:f6:
24:de:41:9b:87:a4:a1:17:8e:75:a8:f6:89:aa:62:
8c:ff:a5:ff:07:e0:24:59:f5:6b:6d:4d:34:14:85:
f0:49:67:d4:97:b2:e9:7a:05:72:4d:8f:ad:8c:75:
47:cc:b0:f3:45:73:de:01:a9:ca:e9:fc:53:fa:de:
8c:5a:c4:ca:86:77:c0:7f:82:76:10:2b:db:54:0a:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:02:B8:23:4A:5D:7F:96:5B:E3:E5:25:36:31:5A:C8:47:7E:DE:8C
X509v3 Authority Key Identifier:
keyid:53:49:C2:D0:0B:A4:6B:E9:24:4B:76:19:4B:AA:10:F3:3C:E3:46:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:fc:e8:66:cb:ca:af:47:1c:68:4d:7a:65:4f:21:a9:77:d0:
0c:52:3c:34:c6:e3:cb:5d:fd:c9:5f:c5:4f:88:65:7e:46:c9:
6e:b2:06:46:18:b7:f6:7f:96:a2:53:9a:32:d5:7a:df:e1:6a:
a1:a0:b7:22:ed:2d:32:7d:de:56:8c:ee:a5:09:3c:f4:99:a2:
0d:24:ca:7b:a7:cf:49:ff:46:f8:96:f1:8a:78:26:f0:2b:6a:
28:b8:5f:3a:11:12:e0:7c:08:69:cb:c1:19:60:db:a3:20:ce:
97:5a:a6:be:6d:ed:bc:3e:ee:b9:4f:95:f3:37:73:54:db:0f:
16:e8:83:a1:9b:37:2c:48:23:e7:71:0c:a4:63:06:73:5b:85:
48:94:a4:99:77:b8:25:9e:c8:78:41:3b:9a:83:d3:d7:64:91:
e1:0d:15:21:8e:70:d8:17:15:07:5d:9e:23:2f:e8:f5:c6:18:
0d:fb:81:59:cd:d5:fb:ba:be:72:67:83:89:50:3e:7a:bd:ec:
1c:77:9f:20:31:61:e2:8e:00:94:6e:df:26:01:ed:17:d9:65:
f0:9d:c4:ef:0b:f9:ec:4d:46:ab:b2:7a:01:92:51:e7:fa:36:
fa:c0:16:ab:fa:ea:a2:c1:a8:db:24:c9:3e:bf:1a:49:8e:19:
89:1b:38:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 10:22:29 2026 by rpki-client