Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
File: u5O3SkaFwcFKueGSF6qxQWNBEdY.mft (raw, json)
Hash identifier: axH/llFEvWMV0ZcwWOo9bBqA8zLJRUHtq55W2ZGWEss=
Subject key identifier: 0B:8F:88:7C:0A:D8:9F:2D:E0:BD:0C:A7:38:53:BC:1C:57:93:E7:85
Authority key identifier: BB:93:B7:4A:46:85:C1:C1:4A:B9:E1:92:17:AA:B1:41:63:41:11:D6
Certificate issuer: /CN=bb93b74a4685c1c14ab9e19217aab141634111d6
Certificate serial: 01A08B67FA2BF9A33EF832A12BDFB322D84F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
Manifest number: 13EF
Signing time: Thu 10 Sep 2026 13:00:42 +0000
Manifest this update: Thu 10 Sep 2026 13:00:42 +0000
Manifest next update: Fri 11 Sep 2026 13:00:42 +0000
Files and hashes: 1: u5O3SkaFwcFKueGSF6qxQWNBEdY.crl (hash: unAtc37/pHCtRqmMAghzmdg6doB7MIXuO6b8VPlD7UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:67:fa:2b:f9:a3:3e:f8:32:a1:2b:df:b3:22:d8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb93b74a4685c1c14ab9e19217aab141634111d6
Validity
Not Before: Sep 10 13:00:42 2026 GMT
Not After : Sep 11 13:00:42 2026 GMT
Subject: CN=0b8f887c0ad89f2de0bd0ca73853bc1c5793e785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:34:4f:de:81:57:ce:ec:6c:5a:f2:e6:2d:9e:
64:4e:95:11:f0:73:6a:e2:6f:90:a7:6a:cb:92:cb:
73:f1:82:94:12:31:c1:2a:aa:56:12:9c:1e:28:3f:
dc:57:c0:64:f1:a7:12:b8:98:59:5c:17:90:6a:1f:
5e:91:99:ef:12:6c:1e:61:f8:ff:8f:d6:c7:18:04:
90:e5:0c:a4:6f:e7:de:ac:7a:e0:9a:da:12:fe:be:
79:32:c5:35:c8:f4:85:24:36:cd:3d:9a:94:0e:d3:
6c:de:89:80:2a:b7:58:95:d4:4e:10:a1:b0:23:d1:
c3:6e:06:cd:49:1d:1a:2a:5d:3b:1f:f6:05:1c:a6:
d9:f9:f6:e3:68:cd:78:18:4d:af:e1:72:59:eb:ec:
1b:e6:9a:eb:44:ef:1c:1f:69:1d:a7:8e:6a:a4:ca:
e0:99:12:2c:a0:75:dc:4e:9f:50:77:d7:d4:ea:d1:
82:ac:2c:f4:14:fc:b9:c3:c6:82:95:45:50:6f:b5:
9d:c7:62:77:31:61:22:e3:7b:08:46:7e:f0:ba:2e:
20:8d:9e:b7:b8:e8:ed:bc:87:ff:4b:53:86:da:e0:
ce:8f:aa:0d:74:ea:df:f0:1f:3f:a8:ed:9d:fe:ff:
26:5b:eb:36:91:32:1a:49:e8:bd:9e:1e:12:e5:3f:
b9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8F:88:7C:0A:D8:9F:2D:E0:BD:0C:A7:38:53:BC:1C:57:93:E7:85
X509v3 Authority Key Identifier:
keyid:BB:93:B7:4A:46:85:C1:C1:4A:B9:E1:92:17:AA:B1:41:63:41:11:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ff:dd:06:2f:a2:72:5e:b8:db:c5:ed:df:69:7e:9e:48:40:
11:db:4e:bd:a0:64:b2:18:fa:a1:fb:b4:59:ce:76:dd:97:2f:
6e:cd:3b:14:fc:f5:4e:dd:78:48:4b:e4:28:f8:4c:33:bb:9b:
e8:ba:e9:c7:19:e8:8d:6e:3b:ad:c6:73:2b:c1:21:c8:9f:2b:
22:07:7a:be:ff:63:6f:99:27:55:66:ee:5f:bf:ab:9e:48:5d:
b4:e7:e2:c7:17:b3:a1:a8:ce:fe:63:9a:02:4d:8c:ae:b9:70:
62:ec:8b:10:50:3f:fc:8f:35:71:31:d5:2d:5c:38:fd:5a:3b:
49:e9:39:b4:44:1a:86:33:cf:0f:af:05:21:dd:ae:a3:c2:8c:
f4:85:b2:bd:a8:82:ac:68:75:a0:51:01:d3:24:fd:fc:64:80:
8d:86:5c:7e:99:ac:cd:3a:3d:2d:35:e4:a4:7d:95:44:79:96:
e4:95:9a:26:08:5f:29:13:98:ec:67:93:e9:54:24:57:ef:e7:
8c:33:e6:05:fc:b4:32:04:b4:cd:0d:42:07:4d:84:4c:26:be:
db:b2:ad:bd:d1:aa:f7:5b:2d:22:6e:4b:c5:d7:b9:f5:2b:5f:
fb:6d:9b:d0:a1:cd:a3:6f:8a:b8:64:a7:de:3b:d4:5c:9d:30:
78:1e:0f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:13:14 2026 by rpki-client