Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.mft
File: U_tSQvmM_53qm6qMiuRmpCtTfFw.mft (raw, json)
Hash identifier: szNtE7nBU7PH1/miOJzWVRbb2wfJrNRD1+4EL5dArOE=
Subject key identifier: B5:68:01:19:41:18:BF:E2:E5:78:0A:0E:84:49:DB:44:00:FA:E4:8B
Authority key identifier: 53:FB:52:42:F9:8C:FF:9D:EA:9B:AA:8C:8A:E4:66:A4:2B:53:7C:5C
Certificate issuer: /CN=53fb5242f98cff9dea9baa8c8ae466a42b537c5c
Certificate serial: 01A08A1E52F9B0E7D1BD63352CD54F7303F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_tSQvmM_53qm6qMiuRmpCtTfFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.mft
Manifest number: 1A2C
Signing time: Thu 10 Sep 2026 07:00:38 +0000
Manifest this update: Thu 10 Sep 2026 07:00:38 +0000
Manifest next update: Fri 11 Sep 2026 07:00:38 +0000
Files and hashes: 1: U_tSQvmM_53qm6qMiuRmpCtTfFw.crl (hash: VXf3dsF5GYJkIOEhbsf+ixPXnZbR8NQAhlJbd82R6Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_tSQvmM_53qm6qMiuRmpCtTfFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1e:52:f9:b0:e7:d1:bd:63:35:2c:d5:4f:73:03:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53fb5242f98cff9dea9baa8c8ae466a42b537c5c
Validity
Not Before: Sep 10 07:00:38 2026 GMT
Not After : Sep 11 07:00:38 2026 GMT
Subject: CN=b56801194118bfe2e5780a0e8449db4400fae48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2c:22:75:39:6d:71:66:27:76:8d:0c:98:ad:
a3:c0:1f:8e:23:83:49:a3:74:e9:44:97:a6:16:a5:
eb:73:04:f4:82:c3:eb:26:69:de:d6:38:33:cf:f9:
fa:5a:bc:09:d0:a9:94:1a:0c:23:3a:da:98:94:69:
c5:09:3b:05:83:98:82:7a:e4:89:02:fd:14:ff:69:
a8:68:57:41:59:f6:70:a4:62:15:d8:4a:d6:c1:ce:
6c:78:ec:4a:8c:06:10:1c:79:75:43:32:e7:63:e4:
00:63:01:fa:cc:da:e3:f4:62:10:d2:3f:01:2c:42:
5c:4c:e7:02:ef:2d:dd:98:36:a5:0b:f1:7e:10:97:
8b:c5:bf:a6:2f:4c:52:2f:73:1a:b0:41:e2:12:f8:
73:20:8f:02:d3:fb:7b:d4:a6:e2:81:e4:47:11:bf:
ec:64:66:03:0c:8e:3c:27:97:d0:37:df:2f:dd:e6:
fc:26:04:85:d1:e0:21:d8:d5:8a:20:9c:6e:7a:31:
ec:55:9e:91:04:98:f6:ae:24:f7:95:c5:f0:37:d3:
11:ba:1d:15:11:e1:d2:76:a4:42:2a:c1:f5:22:36:
10:f8:bc:26:99:7c:de:cd:36:3b:0c:04:95:35:19:
85:c2:24:de:a7:41:ec:54:e5:9d:a1:6a:23:92:d8:
f6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:68:01:19:41:18:BF:E2:E5:78:0A:0E:84:49:DB:44:00:FA:E4:8B
X509v3 Authority Key Identifier:
keyid:53:FB:52:42:F9:8C:FF:9D:EA:9B:AA:8C:8A:E4:66:A4:2B:53:7C:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_tSQvmM_53qm6qMiuRmpCtTfFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2d:a4:ca:e1:10:b1:d3:60:bf:3f:a2:c2:1f:85:87:3b:41:
a5:90:c6:3b:59:21:87:48:7b:f3:25:98:b4:02:b0:3c:d1:41:
1b:eb:7b:7a:92:51:2e:98:1a:67:e8:6e:73:52:49:c7:93:62:
a3:81:6f:d8:4b:0f:ed:ff:ec:02:37:bd:08:db:3b:0a:5d:58:
5f:bd:09:e5:0f:20:7f:4f:f4:d1:cc:01:5c:b6:5c:cc:eb:95:
cd:e4:aa:37:39:6f:0e:8e:ed:e2:87:b5:fd:5b:60:35:15:3c:
d1:ea:f0:cc:bb:1f:59:20:57:5a:e3:dc:72:c0:33:99:d1:c1:
a5:e9:6e:31:b9:ae:57:27:98:6f:aa:85:43:34:c8:46:90:2a:
78:30:4d:00:55:3d:03:39:e3:70:54:33:73:fb:76:ca:82:ad:
5f:b5:5d:e3:b9:93:b1:de:fd:91:10:9d:fc:6c:af:a1:f9:fd:
d5:bc:13:15:93:6d:28:70:98:65:74:e4:64:86:c7:60:9b:e0:
3c:b1:32:fc:2e:64:d5:1f:dd:66:e8:ac:ad:b4:5c:e4:3e:9d:
bc:55:82:bf:f1:c3:c8:ad:93:1d:60:ee:cb:83:a7:45:0c:1d:
85:20:5c:1c:05:37:72:6d:19:ff:76:43:b2:75:94:83:0f:ab:
9a:ae:f0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:52:55 2026 by rpki-client