Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
File: U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json)
Hash identifier: gCK5FoemDpwNAl43/OHuQXHl5Hzszn0aavqTRpFgTvc=
Subject key identifier: 21:2A:91:ED:CD:3B:F8:70:1D:EA:10:F3:72:46:F4:4B:E2:D9:46:98
Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Certificate serial: 01A18299F5F26F70DB29D58FE1EA95B06275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
Manifest number: 07AC
Signing time: Wed 28 Oct 2026 13:01:30 +0000
Manifest this update: Wed 28 Oct 2026 13:01:30 +0000
Manifest next update: Thu 29 Oct 2026 13:01:30 +0000
Files and hashes: 1: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: X90gT+BRtTLOPkCrkjZ3Bj42/b1lryZ+NbFj3y4Si/A=)
2: mVapMmHRdrNnHP7qEe61fUd9MJ4.roa (hash: 7gjqh37t5TbJMLovzwK7uE6PbR35tPIiZgeHv6oUC54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:99:f5:f2:6f:70:db:29:d5:8f:e1:ea:95:b0:62:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Validity
Not Before: Oct 28 13:01:30 2026 GMT
Not After : Oct 29 13:01:30 2026 GMT
Subject: CN=212a91edcd3bf8701dea10f37246f44be2d94698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:41:06:75:7f:a2:25:46:51:4c:a3:8a:23:
8f:e6:47:43:e4:09:67:a2:ea:e3:a9:93:53:7b:e6:
ef:81:e6:59:6f:21:3b:bd:fd:d1:8f:85:29:2b:5a:
a9:1f:12:c4:3a:bd:4a:fa:f6:50:b2:83:4d:e0:9f:
64:9a:7d:97:e1:86:0d:fc:2d:4e:88:d6:a1:c5:77:
7a:35:f4:01:01:34:b2:11:7b:18:90:e5:40:f3:5d:
51:c7:13:1f:4f:84:c5:8a:d2:c9:71:c2:de:5e:e4:
ea:e8:1d:04:22:f8:2b:dc:2d:8a:b4:1d:0a:ba:a2:
35:c6:e8:4b:03:08:cc:0e:44:ed:91:4a:d6:26:e6:
48:b2:d3:d0:82:33:fd:32:9c:2b:2a:1c:bf:42:7a:
7c:40:08:7a:2d:56:33:77:c3:e1:e6:95:53:8f:71:
ae:4b:8f:5d:6c:96:ef:58:21:af:96:ea:b2:49:53:
d3:32:b2:33:e9:61:bf:b8:64:a1:1e:11:b5:e1:91:
d9:87:82:ec:93:69:99:f4:6b:f4:b6:ed:0f:86:66:
d4:6a:27:56:9b:81:c8:cb:dc:52:09:66:4a:89:9c:
a4:1b:ad:4e:00:e3:66:27:a4:7c:cf:c5:75:f6:80:
94:63:4e:c0:56:2d:00:3d:76:24:a3:c9:46:2c:e4:
31:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2A:91:ED:CD:3B:F8:70:1D:EA:10:F3:72:46:F4:4B:E2:D9:46:98
X509v3 Authority Key Identifier:
keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:df:86:c4:b9:be:09:6b:1b:3a:ba:cd:ca:31:4f:30:62:f0:
c8:07:2d:e7:2d:63:ad:6e:cc:bc:ec:63:64:bf:20:4a:79:db:
cf:19:b5:f1:4d:9d:75:6d:81:30:c2:9f:db:28:77:e4:5c:03:
0a:1e:65:96:a7:cd:49:54:30:ce:58:3b:07:6e:66:7a:95:b7:
46:db:50:ee:79:db:a9:0a:10:69:83:64:14:39:bc:b4:16:81:
54:0b:38:5e:33:09:5a:93:9d:98:4d:d0:73:19:a2:99:38:9e:
20:3f:fa:39:d8:28:91:6b:fb:18:6a:b6:e9:5e:d4:e3:c8:45:
97:6a:31:89:6f:12:ee:65:6a:9f:44:a3:38:0d:6e:03:51:62:
e6:24:b0:53:ab:90:31:07:e4:09:c7:78:2f:2e:b3:9f:67:fb:
6c:c3:a0:bb:03:e2:f4:ea:e2:d7:dc:d9:72:fd:56:64:47:06:
66:0a:34:90:68:94:78:c1:72:6a:6b:76:55:34:6d:f2:c1:f8:
08:86:f8:9d:2f:de:42:d7:a7:f1:1b:26:69:de:2a:4c:be:75:
87:84:65:43:08:03:d8:05:34:9b:2b:e5:33:d1:ae:51:cc:23:
2b:c4:6e:4b:23:b2:bb:38:c0:da:44:c9:f9:53:ee:15:77:b5:
dc:31:5c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:43:50 2026 by rpki-client