Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
File: U8DiB45PPrpfh5UD_dgJw4O7dig.mft (raw, json)
Hash identifier: HlL63P0TOnHXbaKJn2ccvgkh0f/Xy3jrMepup5xyGxA=
Subject key identifier: 96:A1:15:DF:0E:46:20:AC:E3:67:7C:3D:1B:E7:93:2F:4B:62:20:9E
Authority key identifier: 53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
Certificate issuer: /CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Certificate serial: 01A02921EEE1CAD3EA106CE3184F81B9E5D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
Manifest number: 1412
Signing time: Sat 22 Aug 2026 11:01:24 +0000
Manifest this update: Sat 22 Aug 2026 11:01:24 +0000
Manifest next update: Sun 23 Aug 2026 11:01:24 +0000
Files and hashes: 1: 1-GMVzwMDxSiYZaD7figfVQ0BMo8.roa (hash: 6cucZyQkv8Clqp8Dmj2mB2zHAVxhCmtUwPlqKFCqEpw=)
2: U8DiB45PPrpfh5UD_dgJw4O7dig.crl (hash: 1xiOTeyP+vX/BcJa61sbg7zYsI0eY3l0EZih2X1kgek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:21:ee:e1:ca:d3:ea:10:6c:e3:18:4f:81:b9:e5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Validity
Not Before: Aug 22 11:01:24 2026 GMT
Not After : Aug 23 11:01:24 2026 GMT
Subject: CN=96a115df0e4620ace3677c3d1be7932f4b62209e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:01:0f:2e:e2:20:7d:ef:48:a5:ac:0b:db:ee:
5f:83:e6:97:9b:58:ca:5c:13:42:31:b8:76:3e:f9:
5e:2a:ec:cc:f5:a1:d6:05:cd:63:44:bb:c1:37:cc:
7b:e4:67:77:be:7e:98:b4:51:10:53:77:00:40:19:
62:57:ed:27:fe:11:c8:af:b5:f6:07:27:75:86:d2:
d3:49:29:a8:bf:a6:fc:d5:c1:68:77:36:4f:89:2b:
86:c6:7b:5f:2d:bf:f2:46:97:09:d1:97:f2:db:9f:
da:af:01:70:dd:7d:3a:2d:e4:76:c0:2f:c2:56:49:
3a:b6:53:31:21:e4:f7:d8:7c:9c:41:3e:ea:91:4c:
3c:6f:6b:96:0f:54:82:dc:73:06:65:e8:8e:e8:cd:
c2:9b:b5:e1:99:6e:88:4d:3d:d0:4a:27:7f:d2:00:
61:c5:9a:e2:5f:cc:6f:df:8d:29:f0:e4:3f:1d:4e:
91:4b:fe:0f:af:ab:e1:fb:3b:4b:8c:d6:07:0c:58:
ae:f0:8a:c9:a4:51:f7:2c:f8:1c:c3:e1:bb:2b:55:
7d:a5:fa:55:2d:61:54:45:04:f6:b3:f2:15:02:c0:
c7:34:f3:d6:d1:65:cc:2f:a9:91:67:eb:1b:42:f2:
e6:73:a1:01:c4:a8:7b:11:6b:2e:59:34:95:bf:c4:
ad:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A1:15:DF:0E:46:20:AC:E3:67:7C:3D:1B:E7:93:2F:4B:62:20:9E
X509v3 Authority Key Identifier:
keyid:53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:23:95:6d:60:90:5a:2b:eb:13:5a:cc:99:2c:df:34:4f:e9:
fa:e4:96:a3:94:1f:36:f7:98:31:97:3b:12:b9:8e:2a:57:25:
e2:9f:12:38:c0:3a:43:03:75:d6:2b:4f:ee:4b:7d:8e:4d:09:
b6:96:4e:b6:b7:76:99:57:1b:bb:83:32:eb:69:f3:3a:e2:1c:
ea:b8:c2:7a:9f:c1:97:78:ae:66:7b:be:86:21:ce:ad:40:5b:
ed:31:a7:8e:ce:46:66:42:ec:f6:c9:64:ab:ff:93:92:af:dd:
e7:1e:26:ab:6a:bc:ce:d0:73:a5:33:f4:5b:8e:54:a5:9b:9f:
f8:ef:f6:80:a1:95:7c:e2:58:b3:df:30:2d:2a:51:3f:bc:05:
45:f2:76:9a:8a:c8:75:6a:1c:a1:5d:ab:1e:c6:16:dc:7a:29:
40:a9:b3:77:fa:a9:44:f7:e1:a5:6e:b9:01:86:cf:5e:69:8d:
03:54:1b:32:29:18:75:55:11:d0:b7:a5:cc:ae:8e:5d:d5:01:
a0:d6:36:2c:4b:8a:f4:78:50:f5:89:a2:fc:92:75:80:af:01:
14:d1:aa:cd:06:5a:24:ec:a7:1c:cb:0a:0c:1b:d4:86:ee:9c:
99:10:a7:e3:44:d4:c0:6b:ee:fb:5f:f5:dd:1c:95:6c:1d:51:
58:66:63:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:09:12 2026 by rpki-client