Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
File: U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft (raw, json)
Hash identifier: +ossDFxOYAAQNushXFyOonAgoIHBWM+9663mzk10W1c=
Subject key identifier: 8A:60:54:EF:F7:4A:04:60:FB:DE:4D:EB:C2:C7:FE:72:43:FA:C1:FA
Authority key identifier: 53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
Certificate issuer: /CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Certificate serial: 01A1795EB8554A2EBD6EC3DED16A979F17B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
Manifest number: 1811
Signing time: Mon 26 Oct 2026 18:00:13 +0000
Manifest this update: Mon 26 Oct 2026 18:00:13 +0000
Manifest next update: Tue 27 Oct 2026 18:00:13 +0000
Files and hashes: 1: U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl (hash: NW95Qkb5EsBlvncFHzi8dHXtrwCsZGse37Uoq45e7LQ=)
2: Xn8q_66t7wzhb4v1l5kcWKBFQNs.roa (hash: 6vO+ulMoF82yem5grlAhBfA3FaHkdUHzR33O3qHwMWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 18:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:5e:b8:55:4a:2e:bd:6e:c3:de:d1:6a:97:9f:17:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Validity
Not Before: Oct 26 18:00:13 2026 GMT
Not After : Oct 27 18:00:13 2026 GMT
Subject: CN=8a6054eff74a0460fbde4debc2c7fe7243fac1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1a:55:fd:5f:1f:8a:d0:26:41:35:fb:68:b9:
82:97:ef:01:7c:78:04:f8:6a:e8:1d:d4:ed:85:ea:
92:96:e2:d8:a9:46:7d:4b:c6:7a:17:0a:4a:9a:6f:
b2:47:1b:27:e7:d4:c4:ce:ba:e2:27:cb:09:1d:bd:
72:73:92:99:05:d8:3f:11:a4:f9:38:27:32:3a:d5:
a7:3c:3c:e9:b8:1e:5e:4b:08:51:8a:1a:df:62:51:
f3:e7:75:ba:f8:8e:18:c0:de:cb:97:f7:7f:15:da:
bd:42:cb:67:ba:31:ac:1f:33:68:8f:67:ce:05:55:
fe:9c:7e:ad:f8:70:e1:bd:f7:f3:d5:6d:8e:db:ae:
71:40:60:54:3b:a0:f6:45:7a:57:a3:6a:73:a0:74:
2a:02:35:ea:57:f0:f2:bf:4c:61:6e:d6:4f:ea:f4:
6d:22:57:f5:ed:3c:29:4e:ae:59:fc:17:73:80:06:
ca:75:60:c7:c0:26:89:86:92:0a:96:bf:a5:63:63:
ae:bc:fa:94:c3:32:64:50:48:97:4b:fb:91:08:be:
d3:50:27:0b:ed:11:fd:fc:77:f4:37:5b:b5:6b:74:
a3:45:39:79:10:e4:79:cf:d3:f8:8b:b5:ad:4e:bd:
97:16:f9:61:6d:06:de:77:8f:ea:44:b0:27:e3:be:
fc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:60:54:EF:F7:4A:04:60:FB:DE:4D:EB:C2:C7:FE:72:43:FA:C1:FA
X509v3 Authority Key Identifier:
keyid:53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:75:16:f6:da:c1:e1:b8:65:72:82:e2:44:4d:e6:fc:55:3a:
73:57:5a:7c:e0:e7:9d:2e:ef:7b:79:b5:78:f7:28:47:08:49:
92:c4:cf:41:17:3c:b9:7f:3b:29:13:06:83:bb:93:c1:59:9e:
93:79:33:1b:bb:f0:60:cc:ee:a7:76:7d:d7:8b:c5:1f:6b:96:
ab:38:ae:69:48:fe:23:d3:77:15:ca:64:8e:af:3d:8d:0b:84:
20:1a:ee:a5:8f:78:69:d5:11:63:c4:31:5c:92:64:99:b7:73:
70:65:e2:e3:a1:23:19:75:94:c2:f3:35:17:19:4f:51:53:7e:
b1:04:1e:a4:9b:2a:8d:d1:24:12:8b:b7:67:96:32:00:b0:d4:
4a:f8:70:4b:e0:0b:bf:fb:42:64:5d:50:85:7b:6b:ec:43:a9:
f3:9d:eb:cf:1f:b6:86:a8:82:6e:f3:18:f0:d1:9e:37:aa:52:
ac:19:30:6d:c4:8c:1d:44:60:29:a9:63:cc:7f:2b:b8:da:e5:
c8:ec:2f:12:5c:5c:cb:12:f2:5f:76:16:ac:34:10:8d:0e:6e:
ea:31:45:c7:8a:dc:26:1a:6d:6d:fb:7f:7b:2c:b2:0a:b8:e8:
40:da:70:e4:a2:85:58:dd:c8:bf:99:e8:be:43:34:73:bb:02:
a0:fc:4f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:09:46 2026 by rpki-client