Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
File: 53OduQwc6YQx3zSKE3blOsbgUjw.mft (raw, json)
Hash identifier: 02r/RpZtBYKNshQtqbdtwkYmHOuEIt/J0cZ/aTE9X2M=
Subject key identifier: A2:19:8E:4A:8C:E6:08:E5:55:C7:78:A0:98:3A:FF:A8:BF:25:AB:1B
Authority key identifier: E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
Certificate issuer: /CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Certificate serial: 01A14A617C61E8B3C8F33B36DEEE31B421FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
Manifest number: 0FC9
Signing time: Sat 17 Oct 2026 15:01:05 +0000
Manifest this update: Sat 17 Oct 2026 15:01:05 +0000
Manifest next update: Sun 18 Oct 2026 15:01:05 +0000
Files and hashes: 1: 53OduQwc6YQx3zSKE3blOsbgUjw.crl (hash: a3x4QFU5Lev+2wVs+ibuA1aE8FyFPjlEKdsAUjAoBZU=)
2: JzXhokSG82LcMCULytEUp0QwNC8.roa (hash: ZZxc+1Uxr56VyzAUJ4dBkyZ2Uo54y6GBc5OnUw8X6mg=)
3: q3KyzHaSe2kvbjeAyrJ6xilqOcs.roa (hash: HuGnxltcUOelJB4yz5mBBFw+8XNpy2937+oYWbglU3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:61:7c:61:e8:b3:c8:f3:3b:36:de:ee:31:b4:21:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Validity
Not Before: Oct 17 15:01:05 2026 GMT
Not After : Oct 18 15:01:05 2026 GMT
Subject: CN=a2198e4a8ce608e555c778a0983affa8bf25ab1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:46:98:aa:78:0f:97:95:74:45:b8:cb:4d:10:
ed:ae:b6:28:c6:98:92:17:fb:cf:08:48:da:cf:56:
2a:d9:13:5f:c9:d1:ca:fe:f4:78:73:b5:e0:67:ff:
ce:21:29:99:60:27:e0:9c:7f:58:33:d4:34:42:67:
8e:11:ba:74:72:06:9f:d2:8a:78:b3:96:75:6a:0c:
0e:98:97:63:36:b4:04:eb:bf:d8:ba:1f:e1:c3:f9:
df:89:7a:6e:90:24:a8:79:c8:ba:27:2a:f5:e4:b1:
1e:4b:82:21:f6:74:d7:04:89:95:90:73:b3:aa:03:
70:f2:11:43:e1:12:f5:e9:61:1f:01:32:33:a1:12:
94:5f:c2:80:54:d7:41:a2:72:43:5a:35:1f:31:77:
e7:65:af:7c:3e:d5:7a:fe:ff:52:1d:08:22:fa:f7:
9b:da:0c:4a:9c:da:cb:90:1e:9e:17:54:ac:9b:5c:
18:61:25:15:6b:0a:de:3c:41:0f:0c:96:85:0e:e3:
65:45:4b:1c:79:4e:37:78:dc:e0:88:27:4c:09:82:
9c:20:6c:bf:3f:52:d1:38:50:48:62:2a:7b:e8:1b:
5f:f2:5c:72:50:e1:1b:ca:10:b2:91:c5:40:32:c1:
c8:1d:d1:34:9e:20:e5:47:c3:aa:f9:8b:18:74:44:
87:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:19:8E:4A:8C:E6:08:E5:55:C7:78:A0:98:3A:FF:A8:BF:25:AB:1B
X509v3 Authority Key Identifier:
keyid:E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:69:8a:29:2b:f1:97:2a:01:47:c7:25:4b:67:3c:1e:c1:cb:
9b:72:f1:eb:88:c6:df:a8:65:48:a7:8b:69:5c:ca:a3:72:e2:
a1:32:51:9d:d1:dc:57:fe:6e:7b:a8:a2:60:76:e5:bf:b6:15:
de:be:f7:2a:90:ed:09:db:ac:f6:23:2d:dd:b9:a0:e9:b9:61:
43:0e:b6:c0:dc:c5:a0:5c:fd:e7:70:86:81:d2:b9:86:e2:f6:
ed:a3:8b:c8:e9:58:7b:d7:80:34:46:2a:40:27:e8:a1:fa:aa:
8a:a2:c2:c5:de:09:f6:e3:d8:2e:22:7f:f5:c1:52:ca:f7:25:
e7:63:3d:d1:19:83:fc:d5:ca:30:37:7a:d9:a3:3d:64:23:bc:
6a:f4:bf:8a:5b:23:57:41:6a:27:ed:ad:10:6a:88:8e:45:68:
33:29:62:1e:c9:01:54:da:df:73:46:5f:07:8f:e7:3d:e9:b3:
a3:d1:7e:f6:e3:99:9e:d9:5c:c7:40:d4:bb:46:8d:5e:b1:38:
72:12:63:77:c8:36:93:2c:51:13:e3:b0:33:e8:40:79:ae:84:
a6:74:65:81:7d:16:c2:be:75:e8:7f:8b:82:b7:19:55:35:19:
90:cd:20:1f:fe:aa:81:d9:0d:58:8e:44:2e:cc:67:29:08:90:
5e:c4:7e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 01:48:55 2026 by rpki-client