Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
File: U8dzEuDSzshFoEYThF-KG-Jjw5k.mft (raw, json)
Hash identifier: dnKGdwszo6wzWwEUKWB3ilss+t2GAnwAkM2R5SFpyW8=
Subject key identifier: 76:27:E7:86:47:35:D0:9A:D6:4C:BE:BC:F9:C6:D1:DC:46:B2:C6:64
Authority key identifier: 53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
Certificate issuer: /CN=53c77312e0d2cec845a04613845f8a1be263c399
Certificate serial: 019D38654CF97ACB1B801286929000D4061B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:00:56 +0000
Manifest this update: Sun 29 Mar 2026 07:00:56 +0000
Manifest next update: Mon 30 Mar 2026 07:00:56 +0000
Files and hashes: 1: LMMdVEDfefO9DMTodcqsmRU-LHM.roa (hash: hRe5cV7EwZ0Fcxo17tUpXTTj4tA391QQdgKYjlbkJTk=)
2: U8dzEuDSzshFoEYThF-KG-Jjw5k.crl (hash: 1nDqP7/p5ivo24W+iy6dECpmDpNDEABCWCRJp5ShZLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:4c:f9:7a:cb:1b:80:12:86:92:90:00:d4:06:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c77312e0d2cec845a04613845f8a1be263c399
Validity
Not Before: Mar 29 07:00:56 2026 GMT
Not After : Mar 30 07:00:56 2026 GMT
Subject: CN=7627e7864735d09ad64cbebcf9c6d1dc46b2c664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ac:b3:51:d2:80:cd:8f:e0:fa:5e:d5:c6:e0:
6c:d1:24:eb:55:76:17:45:74:09:e6:14:45:f3:2f:
51:b7:db:23:1b:eb:f5:6c:e9:ab:c4:5d:17:fd:15:
ef:13:a6:44:5c:b3:2e:50:09:1b:54:72:14:73:78:
e2:6a:cb:d0:21:81:81:c1:ca:38:67:eb:2f:fd:00:
08:9e:cf:f4:f7:20:ae:6a:ed:84:b8:e8:80:fc:4b:
88:66:18:78:fb:1b:79:92:ca:8c:e3:4e:92:67:9d:
48:96:c0:01:ca:73:23:0b:27:73:6c:63:bf:7e:f4:
8a:ef:26:7f:cb:f9:b4:04:de:44:6b:fb:07:10:0e:
34:a4:b0:fc:f4:13:6b:9d:ea:ff:c3:be:c1:ff:07:
b7:80:cc:1a:6b:d2:16:16:e7:36:f0:00:42:61:10:
2f:ae:09:15:69:2d:ce:32:b4:50:ef:63:ab:f5:86:
8e:9b:87:c0:5a:80:c4:37:74:75:23:c9:39:77:1c:
91:63:85:9d:f1:d7:7e:5b:55:5a:3e:fc:fc:b3:8d:
d5:33:de:4d:7b:70:07:46:47:8d:09:d0:d3:2e:38:
38:2c:41:90:47:19:4f:84:e9:b4:db:1e:dd:8a:8b:
34:cf:0b:6d:a8:21:6b:4a:14:11:b4:97:63:4d:0f:
52:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:27:E7:86:47:35:D0:9A:D6:4C:BE:BC:F9:C6:D1:DC:46:B2:C6:64
X509v3 Authority Key Identifier:
keyid:53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:db:54:09:f6:3e:c6:e8:1c:e7:d4:f8:8f:22:8d:28:eb:74:
6c:fc:bc:cd:97:c3:79:16:a4:ce:dc:71:8f:18:17:19:71:3f:
a7:6d:9d:6a:4a:50:d9:dc:a7:50:76:6c:08:fc:ae:54:f2:7f:
6d:bf:c9:09:9a:04:27:ff:98:ad:9a:34:5c:43:0d:e7:37:59:
d1:47:b6:11:9a:b9:fa:e3:a3:04:f5:62:81:89:82:fe:70:79:
b5:d0:83:4a:8d:0b:6b:29:a0:de:c4:fd:4e:df:29:f5:7a:be:
7f:b1:6f:e7:61:15:65:25:a9:a2:42:c4:e0:6b:22:8c:95:f6:
1c:00:6b:77:17:57:75:6b:41:8e:af:0b:ea:83:4b:08:aa:fd:
e5:ba:4d:10:a8:f1:8d:67:2a:84:4f:d5:b4:55:92:b4:a4:e8:
96:cf:41:ad:4b:87:3e:53:ef:72:0d:c4:fe:eb:ed:a7:35:44:
12:3b:b1:3f:af:18:39:48:85:20:52:23:0a:a3:79:16:f0:af:
08:82:ac:41:76:08:f0:fa:9d:a2:fe:67:dc:12:7a:2b:ca:9a:
de:5c:6d:27:84:4f:07:78:02:85:0a:e7:20:d7:bd:e0:c2:51:
83:88:ea:ae:91:2f:19:52:aa:29:77:b2:87:7e:4b:63:43:30:
e2:07:15:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:47 2026 by rpki-client