Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
File: U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json)
Hash identifier: T/7F5QP7NV8VQ7O40Zf/4+lIS5DQSq5HFX7tgVDFtEY=
Subject key identifier: 0D:9C:CA:C6:EC:85:38:31:03:6C:8B:D2:46:23:A7:A1:F9:0B:8C:0A
Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Certificate serial: 01A08B6854B2F0A96D7225FB3A9A51A74456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
Manifest number: 072C
Signing time: Thu 10 Sep 2026 13:01:05 +0000
Manifest this update: Thu 10 Sep 2026 13:01:05 +0000
Manifest next update: Fri 11 Sep 2026 13:01:05 +0000
Files and hashes: 1: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: 1nGa9y8rBo1MCNUqyhZqHEdlKLaGsRen+droeq/w9m8=)
2: mVapMmHRdrNnHP7qEe61fUd9MJ4.roa (hash: 7gjqh37t5TbJMLovzwK7uE6PbR35tPIiZgeHv6oUC54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:54:b2:f0:a9:6d:72:25:fb:3a:9a:51:a7:44:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Validity
Not Before: Sep 10 13:01:05 2026 GMT
Not After : Sep 11 13:01:05 2026 GMT
Subject: CN=0d9ccac6ec853831036c8bd24623a7a1f90b8c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e9:b0:0a:c3:70:5f:d1:b9:71:85:be:19:f4:
e2:2a:b6:c5:52:86:1b:4f:a6:02:99:1e:fb:a6:88:
4d:e9:52:85:dc:b9:ba:98:80:5b:89:97:94:12:8a:
54:e4:a0:81:66:98:47:1b:32:13:f8:c7:d0:da:10:
4b:3b:a6:69:2c:20:29:8b:ed:8b:ba:89:8c:9c:92:
ed:fe:6e:aa:25:1a:9f:e1:a3:bd:10:6f:d3:13:2a:
69:33:a3:83:7f:3d:0a:02:db:a1:fb:30:da:77:30:
e2:d5:0a:5a:88:35:f9:88:fc:a2:61:aa:bd:51:75:
3e:0f:f4:ee:f7:51:7d:56:14:b8:a9:54:c2:b1:f1:
e3:ee:2f:19:b4:3b:aa:4d:66:c3:a8:3b:d4:a9:4f:
74:2c:e5:40:e6:9d:3f:ad:6e:72:bd:8f:f4:13:aa:
cd:9f:74:9e:ab:8a:4f:d2:ba:9b:31:8a:d2:95:26:
e3:50:aa:e7:b3:44:48:d6:f4:db:c0:f8:ff:4d:4a:
ca:93:b7:1f:11:05:a3:f1:74:b4:1b:35:2d:67:0f:
93:fc:4d:1e:04:44:5e:48:a0:2e:59:44:77:d0:f2:
43:60:0c:4d:2f:92:7b:39:78:3d:0b:69:cc:73:c2:
61:fd:73:46:5d:53:0c:bf:c9:10:85:16:02:d4:a0:
44:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9C:CA:C6:EC:85:38:31:03:6C:8B:D2:46:23:A7:A1:F9:0B:8C:0A
X509v3 Authority Key Identifier:
keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f5:e2:98:b9:f9:e6:1d:5f:45:84:2f:9f:4b:a3:21:d1:3f:
5b:1c:e4:96:91:d2:c2:cd:ae:9f:f0:ec:91:28:71:24:5c:8d:
d9:86:41:37:80:20:49:9a:0c:54:b2:78:bd:a5:43:25:7e:75:
8a:e8:04:4a:46:27:9e:f2:44:cf:55:87:43:3b:68:d0:1f:80:
36:96:6c:30:f1:fc:7e:a0:be:a3:9c:9d:ab:0a:ef:f4:a5:fb:
bc:63:87:14:7d:63:37:32:58:c8:ab:cb:29:f1:69:1b:64:83:
34:a5:60:e9:1b:37:a2:a1:91:af:2f:c1:64:76:31:43:f7:21:
ac:2d:d4:ad:6d:ca:d6:f7:f1:87:9f:9f:d0:74:fb:1f:96:d6:
de:9e:53:92:21:96:7f:5a:a7:02:de:ed:63:89:c2:3d:45:59:
00:7f:5a:85:03:ce:83:49:c0:d8:15:80:6b:12:ea:13:c4:49:
fc:be:c0:8d:4b:63:39:14:5e:30:63:5e:ef:f4:95:17:42:d9:
59:c3:2e:03:7c:21:f5:b7:5d:80:58:39:40:ce:dd:69:61:84:
f8:1c:ff:87:9b:7e:83:e5:12:1e:34:da:69:c1:06:3d:2f:40:
ef:8f:4c:9f:20:f3:07:a2:8a:ad:e8:ae:21:19:7f:f4:fa:72:
b6:b8:5e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:40:43 2026 by rpki-client