Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.mft
File: U4LANwL31t1s72Zs4gUxU8mv6Us.mft (raw, json)
Hash identifier: t4JNAGTiNbyHKWXeySm5khRkBzfQkNGOZCDx21Xsdjo=
Subject key identifier: F8:55:4F:F1:D9:A6:E8:57:74:60:41:E2:0B:A9:C1:BD:9A:F9:87:09
Authority key identifier: 53:82:C0:37:02:F7:D6:DD:6C:EF:66:6C:E2:05:31:53:C9:AF:E9:4B
Certificate issuer: /CN=5382c03702f7d6dd6cef666ce2053153c9afe94b
Certificate serial: 019FF9ED2AFD81923E61F4DD52C2201529CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4LANwL31t1s72Zs4gUxU8mv6Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.mft
Manifest number: EA
Signing time: Thu 13 Aug 2026 07:01:37 +0000
Manifest this update: Thu 13 Aug 2026 07:01:37 +0000
Manifest next update: Fri 14 Aug 2026 07:01:37 +0000
Files and hashes: 1: U4LANwL31t1s72Zs4gUxU8mv6Us.crl (hash: zmk4GPUrOTqm2VhVygy+RjfO5tZXlO18+o/1b9jyk8M=)
2: m_nKiCuVzTi2TKccGiONJSKEB70.roa (hash: S3r/rA3wAxsL4UrMnk+l9Ka3WgxOB/UdzMyaqt2gqiY=)
3: xNohHyHNAtZbFs1TNTPBi4HGfmM.asa (hash: RKzmJOhU01ix0w7bW/M3Ue48L0hu6xJh91dZNeFrjAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4LANwL31t1s72Zs4gUxU8mv6Us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:ed:2a:fd:81:92:3e:61:f4:dd:52:c2:20:15:29:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5382c03702f7d6dd6cef666ce2053153c9afe94b
Validity
Not Before: Aug 13 07:01:37 2026 GMT
Not After : Aug 14 07:01:37 2026 GMT
Subject: CN=f8554ff1d9a6e857746041e20ba9c1bd9af98709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:93:7d:0e:66:11:ec:d1:ff:b1:a8:45:33:d6:
6a:bf:f7:31:79:1b:5a:89:ff:49:56:0c:f6:7d:5b:
32:02:e2:e0:27:00:76:80:8b:26:50:e0:99:9f:57:
71:0d:62:3e:1d:3b:59:33:04:44:1e:23:a5:11:90:
c0:28:6c:7d:75:12:5b:2c:7c:95:ff:83:6d:24:7d:
84:a8:e6:f1:46:60:85:32:cb:5a:97:95:a9:3f:ca:
6d:90:df:78:37:95:8a:71:73:71:1e:fe:8a:f2:b2:
6f:e8:f9:6e:dd:df:3b:70:ac:66:68:7a:d1:66:b5:
c6:d2:6b:48:c6:de:ff:59:db:30:66:c6:9b:89:e8:
11:17:45:da:97:a4:c0:10:e9:3d:bb:c0:33:22:8b:
bb:0c:8f:cd:4d:5c:06:d2:7b:98:8e:7d:78:cb:bc:
50:ce:2c:7b:38:8b:a4:25:de:bc:e2:76:a5:31:e0:
6d:63:4b:2c:fd:2b:13:71:2b:14:50:21:c5:37:12:
a6:27:1b:ca:4c:9f:fb:51:7d:8b:a2:98:2b:01:47:
a4:9e:0f:17:a9:bd:93:a1:1d:c1:c1:3e:26:40:a6:
a6:f9:19:e3:d1:01:ba:57:d3:a6:59:12:2f:65:ef:
19:4f:88:d4:e6:0e:0a:bb:de:78:b0:62:05:db:c3:
25:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:55:4F:F1:D9:A6:E8:57:74:60:41:E2:0B:A9:C1:BD:9A:F9:87:09
X509v3 Authority Key Identifier:
keyid:53:82:C0:37:02:F7:D6:DD:6C:EF:66:6C:E2:05:31:53:C9:AF:E9:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4LANwL31t1s72Zs4gUxU8mv6Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:43:90:fe:b0:30:f6:83:c7:99:d3:2b:81:f2:c0:e3:a7:e3:
32:65:00:a7:83:5d:fb:fd:0d:cf:a2:57:36:47:17:38:a1:ec:
20:a4:18:76:3b:30:ad:0f:cf:89:f9:df:1a:c8:36:ed:23:87:
2f:b8:b5:36:a3:68:c6:ca:e3:e0:1d:3d:1d:0a:da:ff:17:15:
98:44:59:16:9f:25:8d:be:7a:cc:19:fb:12:9f:80:51:21:12:
48:c5:21:9b:b3:b3:44:72:f8:9b:d2:6f:c6:ab:20:ec:40:5a:
16:fc:03:d9:21:74:ad:88:65:a1:61:67:1e:75:2e:b8:45:2c:
87:ac:a5:07:0b:8c:fa:f1:29:58:7e:f8:c9:c2:7e:eb:74:04:
65:38:73:60:1c:a5:96:17:c2:8a:9f:e5:06:b5:27:83:dd:4c:
c5:af:5a:6d:b4:50:0f:2d:42:74:10:26:2b:ee:dd:ca:07:fa:
8a:83:67:1d:b7:7f:3d:f3:17:46:42:e1:1a:7b:6b:84:29:e4:
30:08:1c:c8:c3:46:b4:74:e5:35:b5:69:6b:40:91:f7:64:e4:
be:97:5e:8e:58:ba:f8:5c:d1:63:41:55:ce:29:6a:e0:0b:ab:
75:d0:b0:b5:ca:54:86:96:0d:05:70:6b:af:d2:f4:01:14:8d:
3f:4d:8c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:00:53 2026 by rpki-client