Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
File: U4DNitL4ThTptbZCOJN7bUIH4iE.mft (raw, json)
Hash identifier: tASxn2hB2phvzbes6g5irBUS0jjBcl54Iba21SaiRv4=
Subject key identifier: CA:01:58:27:CD:07:F2:A8:27:A9:8F:AF:93:10:1F:6C:B0:E3:2A:A5
Authority key identifier: 53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
Certificate issuer: /CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Certificate serial: 01A08C4423E73785E0A773770F354F3EFE6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
Manifest number: 0BDD
Signing time: Thu 10 Sep 2026 17:01:10 +0000
Manifest this update: Thu 10 Sep 2026 17:01:10 +0000
Manifest next update: Fri 11 Sep 2026 17:01:10 +0000
Files and hashes: 1: 3gqZ21ZiXWY8Si7snLEpMyMD74g.roa (hash: X/t/+w5YUcvfs+3nGPGjtJ/Fhg4+BcTTk+/zNwVCFHo=)
2: U4DNitL4ThTptbZCOJN7bUIH4iE.crl (hash: jZLOX8hsJ0xFFP3MxvV8N31jXJ9Q9aPnUaMeaqmXG6Q=)
3: wlQ0t9w-oLkcGuhWCMs9Bpc2jac.roa (hash: 3f94DHQ4ocfCNVkT9++XQcXx0yPrdObfv5lQ1Z9Etr8=)
4: x0JWlbPq7LDeu4Dm0_N7oeK38ow.roa (hash: tbOy3beQewSvz0vDOcHNb1UEiU3Vzot4Nk2R+I8UvvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 17:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:44:23:e7:37:85:e0:a7:73:77:0f:35:4f:3e:fe:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Validity
Not Before: Sep 10 17:01:10 2026 GMT
Not After : Sep 11 17:01:10 2026 GMT
Subject: CN=ca015827cd07f2a827a98faf93101f6cb0e32aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:45:94:7c:4f:15:9e:38:9c:d6:dc:c7:eb:a8:
e9:8b:9a:55:ad:d7:de:27:a0:90:1a:d3:29:e6:b1:
47:11:c6:1b:bf:1a:6c:4e:b8:e0:8d:69:25:1c:a0:
b0:b9:70:b1:00:f6:5e:72:59:70:48:ba:81:16:df:
b8:d3:5a:ae:aa:56:c5:1c:c9:48:2a:7a:f3:aa:02:
8d:34:42:69:64:7f:a2:83:af:45:71:00:a9:f5:62:
e9:dc:e7:d8:ae:32:ef:a9:0e:0c:3a:61:3c:a0:38:
dd:d3:12:5e:77:68:77:48:5b:8c:16:1e:d0:ca:af:
b6:52:fd:36:0b:fe:18:fb:41:e1:3f:bb:5f:31:46:
28:dd:df:2c:eb:42:15:4b:b4:02:62:ea:5d:a9:7e:
8b:d5:87:4a:86:40:4e:ec:37:45:38:ef:86:26:4e:
a3:89:a9:bd:c7:76:5d:9c:e8:57:dc:5c:f2:f4:30:
22:a6:d9:73:d8:2f:94:6c:3e:16:5e:f2:c1:5e:52:
08:5d:de:b8:4c:c9:5b:94:13:da:b8:d9:87:29:1a:
3e:62:1c:b0:21:c5:16:7c:de:33:53:7b:5e:aa:8b:
5a:2a:1b:8f:67:0d:b2:53:ac:bf:69:28:b1:23:0e:
f6:a5:3c:d1:60:3f:0a:bf:a8:56:7e:90:25:89:63:
35:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:01:58:27:CD:07:F2:A8:27:A9:8F:AF:93:10:1F:6C:B0:E3:2A:A5
X509v3 Authority Key Identifier:
keyid:53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f5:df:ac:2a:79:c5:38:40:05:ac:e1:42:ab:46:b8:3f:9c:
39:11:c3:13:b3:12:5b:54:4a:8e:06:a8:05:40:b0:08:db:19:
ed:1b:82:87:51:bf:59:26:8a:13:b1:72:85:8c:ec:57:8f:19:
8c:cf:b8:10:f0:a2:72:0c:07:1c:e9:09:60:6f:83:23:1c:60:
12:dc:88:01:7c:f3:17:c5:29:33:ed:dd:77:8d:ed:0e:17:33:
d3:58:86:a5:4d:39:e0:52:02:14:e4:1c:0a:d4:a6:2c:86:27:
6f:6e:be:bb:91:50:77:0a:94:bd:ec:02:34:15:e5:dc:d5:d5:
ab:2e:09:42:16:9a:2a:7d:81:3f:62:30:1a:3d:e6:5c:8b:33:
87:53:91:23:0b:59:da:d9:26:70:6e:40:43:d0:80:b9:82:f0:
a8:c5:7a:88:ab:b8:0b:39:9b:fc:7d:ee:32:09:aa:b5:35:10:
d2:8c:65:88:f9:28:e2:35:a6:47:12:d0:d7:58:9d:87:80:eb:
6e:3c:ef:9f:f6:e2:c0:13:23:30:23:8a:7e:50:d5:fa:32:42:
5b:9d:8e:ea:fe:ba:8d:e2:07:ea:8d:bd:17:5a:4c:81:f7:6a:
42:72:54:24:77:1d:df:10:b6:e7:be:e0:0a:70:15:99:84:e1:
12:66:2c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:47:11 2026 by rpki-client