Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
File: U5Nwh4FLQ1glRwBp255yPb5yjzs.mft (raw, json)
Hash identifier: Skbmbeu+ySaDOsHRvtVuUUtQzxFEFIAwfKqKxpQliJA=
Subject key identifier: DA:68:FE:EC:EB:47:D4:0A:86:C4:45:0E:70:5D:B7:88:51:CB:39:87
Authority key identifier: 53:93:70:87:81:4B:43:58:25:47:00:69:DB:9E:72:3D:BE:72:8F:3B
Certificate issuer: /CN=53937087814b435825470069db9e723dbe728f3b
Certificate serial: 01A089E818FBBF28C3BE2F98E4C01B2B5CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
Manifest number: 1A45
Signing time: Thu 10 Sep 2026 06:01:24 +0000
Manifest this update: Thu 10 Sep 2026 06:01:24 +0000
Manifest next update: Fri 11 Sep 2026 06:01:24 +0000
Files and hashes: 1: U5Nwh4FLQ1glRwBp255yPb5yjzs.crl (hash: TLcwR6qcbxTpd5c9Foiw2LB209r6L8jgWrgU1XQQjXI=)
2: yO8zPdnLQTGP7FTjpB9nvhDS9uQ.roa (hash: WQ8kjol5PEW10sFGD7RLYN+v3wnRZb1OVJX+5S1910M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e8:18:fb:bf:28:c3:be:2f:98:e4:c0:1b:2b:5c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53937087814b435825470069db9e723dbe728f3b
Validity
Not Before: Sep 10 06:01:24 2026 GMT
Not After : Sep 11 06:01:24 2026 GMT
Subject: CN=da68feeceb47d40a86c4450e705db78851cb3987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9e:56:40:7f:da:85:0b:ea:b6:38:58:c3:26:
f1:21:30:78:fa:86:85:f0:54:14:bd:71:76:66:99:
14:c8:3c:01:7a:17:df:3d:fe:97:27:15:36:35:1d:
b5:7a:a8:86:70:cf:79:53:84:06:d3:6c:3f:08:d5:
c3:9e:cd:c2:a3:6f:19:b0:ec:1f:3a:1e:dc:dc:01:
14:ad:4b:67:4f:5d:a9:04:df:a4:97:2a:37:48:6f:
33:8d:a1:9b:76:85:7d:83:58:9d:99:9b:fd:b6:d4:
58:96:e1:ff:cc:9c:c9:c8:84:2e:09:0d:64:20:25:
6d:53:ee:a1:0e:9e:73:03:83:b7:26:ad:0f:b4:a6:
38:b4:cc:80:a3:38:01:e5:1a:dc:cd:78:d9:88:8c:
cd:6d:99:26:d4:fa:07:59:7c:bf:36:72:99:e8:31:
c2:07:ec:37:2a:fd:d6:cc:de:6f:ac:b8:db:4e:59:
6e:df:8e:84:1b:f9:36:81:31:f7:a3:19:08:6f:e4:
df:90:24:8b:3c:69:bd:b2:9e:20:db:c1:55:83:28:
9a:66:20:2f:5c:70:cc:9b:56:22:a8:89:87:35:79:
9e:fe:32:34:29:1c:e9:c0:3b:0e:a2:68:f9:c5:6e:
53:40:91:8a:3b:dc:35:08:b0:32:c6:fe:90:92:e0:
9f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:68:FE:EC:EB:47:D4:0A:86:C4:45:0E:70:5D:B7:88:51:CB:39:87
X509v3 Authority Key Identifier:
keyid:53:93:70:87:81:4B:43:58:25:47:00:69:DB:9E:72:3D:BE:72:8F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:0f:71:d5:87:80:1b:5f:a4:f9:c1:e4:4b:51:d6:1d:9d:7c:
7d:13:ac:44:ef:14:e1:2a:62:e3:f2:48:aa:f5:d4:7a:20:70:
b5:b8:fc:76:b1:17:b0:aa:f5:40:ce:90:33:42:e4:f2:5f:34:
2d:87:d7:03:f2:96:7e:84:c2:a0:93:a8:42:53:1c:87:51:2f:
f1:6a:4e:6f:fb:76:38:32:1c:d4:87:f2:cf:c6:a9:8d:49:31:
a2:7e:90:2b:b2:c3:92:99:f4:17:e8:3e:53:a8:d0:2a:74:04:
68:8c:09:af:b0:99:aa:18:f1:00:9c:f6:1f:99:00:b1:c8:11:
6e:03:70:6f:f8:27:f9:11:b9:d8:bd:2e:93:30:f2:f7:9b:d3:
53:2c:91:a7:0b:65:8c:ca:fd:08:8f:5b:2a:d9:6e:03:e8:fd:
fe:8a:4e:7f:0a:8b:4e:bc:31:a0:b8:84:a2:9c:8a:12:12:0c:
b1:ca:98:19:31:26:b3:0a:69:ab:b8:10:a5:06:c9:2b:3f:24:
8c:1c:27:7e:81:3d:ac:22:79:dd:a5:83:df:20:cf:b0:11:7f:
13:9d:03:a4:d0:7c:37:56:73:4e:b0:bd:3f:7b:63:3e:d7:9a:
63:ce:78:db:52:8d:43:9f:ed:5e:7c:d6:6c:45:00:ed:b4:7c:
9f:1a:e9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:09:29 2026 by rpki-client