Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
File: U-8ohOShM1XbZJo0k1J8RCKJc7g.mft (raw, json)
Hash identifier: Ae4OlI41lI6ga7NiZ1EAWrCDFmKhEzGxFIqhuHzbntE=
Subject key identifier: 6D:25:05:74:1A:D0:97:A7:12:D6:6D:83:BF:E2:88:2C:54:88:D9:73
Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8
Certificate serial: 019CD68BF41FF2B255F4C42DFD5754E4B092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
Manifest number: 135B
Signing time: Tue 10 Mar 2026 07:00:22 +0000
Manifest this update: Tue 10 Mar 2026 07:00:22 +0000
Manifest next update: Wed 11 Mar 2026 07:00:22 +0000
Files and hashes: 1: E-486E0-raIhh0cU7uEvlJrtVq8.roa (hash: vna5ocXCF4M8ZuD7JNv3pkr7ZzkpCUbGfeYWFBWtRTs=)
2: U-8ohOShM1XbZJo0k1J8RCKJc7g.crl (hash: J1RYXDQKjgXhdHU9F6HrYiI3iOi421oOJin43vkDJUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 06:19:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d6:8b:f4:1f:f2:b2:55:f4:c4:2d:fd:57:54:e4:b0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8
Validity
Not Before: Mar 10 07:00:22 2026 GMT
Not After : Mar 11 07:00:22 2026 GMT
Subject: CN=6d2505741ad097a712d66d83bfe2882c5488d973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:a6:65:7f:9d:08:c3:a8:53:7a:14:e2:8b:
b1:4f:eb:65:00:74:01:9f:5d:a9:0c:94:b5:18:56:
7e:10:ca:2d:eb:a0:33:d5:dd:45:6d:46:3a:52:6e:
25:66:1b:10:e2:ad:cd:1c:7e:99:53:59:a1:08:6a:
ae:3f:19:36:f7:89:5c:fa:4e:8b:4f:f9:46:ce:47:
d5:b6:d6:ab:c5:94:45:21:bb:2a:1d:e6:d6:f8:bd:
32:0b:c6:b0:f7:b5:93:c2:25:5f:0f:38:9b:5c:06:
5f:1b:8d:31:6b:4a:6a:92:f5:4d:13:5f:4c:d4:76:
df:b4:69:58:3c:17:d6:5c:b2:76:01:de:bf:0c:99:
05:d9:19:1d:e2:de:65:82:c4:e4:4f:72:a0:28:9c:
38:7f:df:cf:24:9c:9d:c4:07:ec:39:60:96:ae:bb:
f2:42:98:83:9a:1c:98:90:d1:c2:75:e8:3c:23:83:
d9:3a:ee:ce:65:e3:bb:d7:c4:0d:11:95:e9:fe:22:
cc:21:84:f3:51:4e:55:86:08:56:59:6d:0e:41:e3:
46:d5:d5:49:c6:05:06:3c:d2:29:d9:15:2c:72:64:
c4:a7:ac:fa:0d:23:37:9e:be:cb:2e:8c:39:23:9a:
49:05:e2:6d:22:4a:7c:ab:62:21:d7:81:74:48:76:
b0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:25:05:74:1A:D0:97:A7:12:D6:6D:83:BF:E2:88:2C:54:88:D9:73
X509v3 Authority Key Identifier:
keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e3:3a:fa:6c:86:f2:b5:b1:53:41:63:71:e0:b3:6e:4c:0d:
ba:6a:e6:58:49:42:91:40:07:89:44:2c:46:82:d0:d3:48:2e:
69:9c:f0:2c:52:b6:ee:92:82:35:7f:25:c0:99:b4:b6:ac:e4:
eb:00:e6:e4:d3:5a:5c:04:99:d8:a4:64:e9:f1:23:6a:96:f4:
31:88:47:06:69:eb:0d:86:66:d8:f2:76:25:af:50:a4:3c:58:
bf:7d:70:34:4e:66:c8:5d:f7:a6:ec:91:c1:b8:45:0c:80:ed:
42:63:f8:5f:07:bc:57:ff:4e:a9:97:0e:f0:ac:3d:95:af:c6:
31:f3:ff:85:2a:00:80:7f:d3:12:aa:a7:49:fd:58:fe:04:b6:
ed:24:b5:9a:fc:71:8c:a0:df:8e:f9:87:c4:13:da:ab:eb:f5:
c7:cb:c2:7d:50:47:ed:e9:04:2f:b0:20:22:8c:cc:09:cb:8d:
6f:9b:69:9a:dd:78:21:86:23:b6:20:da:d4:e2:2d:90:8e:a7:
5a:24:33:fb:be:f6:49:f1:00:53:44:51:eb:0b:da:36:49:f7:
09:fa:e3:de:10:43:0f:38:eb:4d:5f:4b:9d:98:43:1d:e4:d1:
22:05:33:21:1a:6f:75:56:14:14:b0:06:9f:7c:77:55:2a:1b:
81:fe:67:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 13:22:40 2026 by rpki-client