Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
File: U4DNitL4ThTptbZCOJN7bUIH4iE.mft (raw, json)
Hash identifier: CtsluaL2apaGVZ6jcww85LZMrfk8FTWS0TI93ZciA7g=
Subject key identifier: 88:15:FF:19:CF:E1:FC:C3:D9:00:25:6F:D0:37:DD:10:28:8B:CE:F0
Authority key identifier: 53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
Certificate issuer: /CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Certificate serial: 01A17F98B0F4D2DDF3919A869C568D17D420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
Manifest number: 0C5B
Signing time: Tue 27 Oct 2026 23:01:15 +0000
Manifest this update: Tue 27 Oct 2026 23:01:15 +0000
Manifest next update: Wed 28 Oct 2026 23:01:15 +0000
Files and hashes: 1: 3gqZ21ZiXWY8Si7snLEpMyMD74g.roa (hash: X/t/+w5YUcvfs+3nGPGjtJ/Fhg4+BcTTk+/zNwVCFHo=)
2: U4DNitL4ThTptbZCOJN7bUIH4iE.crl (hash: NpA9ZzrsUunqMJzauaCkdpmUi5dA4d5SbeCY1I8N4L0=)
3: wlQ0t9w-oLkcGuhWCMs9Bpc2jac.roa (hash: 3f94DHQ4ocfCNVkT9++XQcXx0yPrdObfv5lQ1Z9Etr8=)
4: x0JWlbPq7LDeu4Dm0_N7oeK38ow.roa (hash: tbOy3beQewSvz0vDOcHNb1UEiU3Vzot4Nk2R+I8UvvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:98:b0:f4:d2:dd:f3:91:9a:86:9c:56:8d:17:d4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Validity
Not Before: Oct 27 23:01:15 2026 GMT
Not After : Oct 28 23:01:15 2026 GMT
Subject: CN=8815ff19cfe1fcc3d900256fd037dd10288bcef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:32:fd:63:3c:c5:da:e6:8f:21:09:47:1c:7f:
6a:52:e4:d8:09:f5:f3:e7:e1:ea:26:7e:29:c2:b2:
56:d2:1d:c2:10:9c:43:52:4b:67:8b:ef:cd:8c:52:
38:77:44:b1:52:f5:95:c8:49:f8:5f:f2:d7:1f:f9:
da:9f:59:a7:c7:10:d7:59:84:7c:bb:f4:9e:a8:9e:
8b:58:84:a6:a7:8f:c0:c1:16:a2:37:88:53:b6:b8:
ba:43:96:37:20:c0:cb:08:ff:b8:be:f5:ac:bd:31:
e8:9e:1d:c6:6e:80:98:a9:17:98:13:4a:e8:4d:00:
a6:66:a6:18:85:11:e5:36:43:e7:50:ab:ef:4b:df:
bf:e6:3e:50:0a:99:9b:3b:9b:72:ea:34:05:ec:60:
31:72:27:36:d8:e8:82:c9:48:94:ad:13:ec:ac:26:
58:64:9f:57:55:c4:ea:93:7f:d3:22:e8:f2:07:14:
e8:02:ab:7b:e7:10:eb:f6:41:9d:07:87:6b:7e:80:
45:68:91:be:fa:80:a6:2d:bc:f1:0b:6a:c9:c9:21:
b2:7a:c2:c1:23:fd:20:b7:c2:30:7e:85:e8:92:0f:
8c:95:37:76:d6:e0:97:f8:dc:5a:30:9b:75:fc:77:
d8:30:0c:53:2c:de:86:01:ca:e8:28:d3:ee:2e:cd:
c8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:15:FF:19:CF:E1:FC:C3:D9:00:25:6F:D0:37:DD:10:28:8B:CE:F0
X509v3 Authority Key Identifier:
keyid:53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:30:0c:a4:38:26:e8:f2:2e:58:ab:7e:08:a7:a3:39:33:bc:
cc:e9:ac:25:73:81:d9:26:45:11:3b:c2:16:97:6b:6d:c3:9a:
ee:ee:60:53:c4:26:32:dc:5e:54:50:50:21:f3:22:7d:c1:db:
d5:a3:a1:bd:9b:90:8d:dc:10:0f:b3:11:e4:33:21:be:01:49:
57:f6:b7:28:f3:64:ba:a4:46:1e:45:2e:36:1f:ff:46:31:a9:
20:17:ed:9a:ef:2f:fa:99:01:92:20:b0:66:6e:0e:84:7b:e0:
13:5c:24:09:d6:d5:5a:2a:00:77:09:fc:28:58:9a:19:dc:5d:
48:97:24:67:c0:b8:3f:2a:3d:98:66:13:03:24:f4:61:86:50:
a1:69:4a:10:9f:78:1f:a6:f3:7d:53:68:dd:64:cc:92:b1:03:
82:39:02:63:24:f8:42:6a:e6:80:3f:fa:06:f2:51:f9:5b:6f:
21:46:e8:9d:d7:36:48:28:3b:bd:32:9b:45:ac:8d:bd:1f:60:
a0:44:fe:d8:45:7f:14:b9:52:3f:c7:8d:53:9e:b3:cd:6a:f5:
51:b2:4e:e4:e2:da:2e:e0:50:8f:e8:99:bc:6d:7b:aa:33:92:
f6:0f:f1:80:68:eb:e4:c4:6f:3c:38:a3:b1:64:1b:d3:c7:f9:
8b:b0:b9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:10:56 2026 by rpki-client