Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
File: U-8ohOShM1XbZJo0k1J8RCKJc7g.mft (raw, json)
Hash identifier: EmgHVH7QMpAl7MuTW6x3QzBKceu0L00ugXp5veDJdtQ=
Subject key identifier: 51:33:A1:FB:6E:DE:60:2B:C1:24:61:16:4A:5B:CE:4C:89:C8:70:55
Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8
Certificate serial: 01A17E181A67DDCDC3B3F04940C029F13DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
Manifest number: 15C4
Signing time: Tue 27 Oct 2026 16:01:11 +0000
Manifest this update: Tue 27 Oct 2026 16:01:11 +0000
Manifest next update: Wed 28 Oct 2026 16:01:11 +0000
Files and hashes: 1: E-486E0-raIhh0cU7uEvlJrtVq8.roa (hash: vna5ocXCF4M8ZuD7JNv3pkr7ZzkpCUbGfeYWFBWtRTs=)
2: U-8ohOShM1XbZJo0k1J8RCKJc7g.crl (hash: 9Tbfn9Vk2oqDXvfTZw5dZuIUGqXlma4JqQIRGs5MKBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:18:1a:67:dd:cd:c3:b3:f0:49:40:c0:29:f1:3d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8
Validity
Not Before: Oct 27 16:01:11 2026 GMT
Not After : Oct 28 16:01:11 2026 GMT
Subject: CN=5133a1fb6ede602bc12461164a5bce4c89c87055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c9:d3:6f:5e:8c:9d:17:41:b4:26:35:a9:42:
3d:c3:97:67:45:f6:0c:af:8b:74:a0:c1:c0:e7:db:
02:52:04:ec:fe:3c:8e:fe:30:af:ef:90:de:db:13:
9b:8b:85:7c:94:bc:51:36:9f:a1:85:91:82:a3:df:
a0:6f:1a:81:41:fb:82:54:1b:bb:5b:88:5b:c3:4e:
0f:ae:05:87:da:52:23:8a:8a:dc:9e:0e:f5:f4:12:
e3:1f:08:73:9d:74:e5:5c:f1:f7:cf:40:d4:37:b4:
19:e7:5b:fa:99:4e:f8:b8:58:35:85:0e:27:ef:ff:
b1:a6:8a:bc:b1:25:9f:07:e7:11:ce:c3:50:58:78:
47:8b:1c:38:a1:72:a3:61:42:cd:fd:55:8b:9a:da:
88:f4:f7:7f:3f:56:9d:48:4e:44:6a:4a:82:71:9f:
d9:83:e8:13:c5:11:db:c5:a1:b6:6a:91:ec:f9:91:
d0:2c:24:52:0b:9d:0d:0c:ad:19:19:0f:c2:70:e5:
f2:aa:dc:6b:09:b2:fb:e6:88:b8:94:76:ca:8d:8f:
15:bf:ca:c6:b1:77:b2:29:1d:06:2d:ac:9e:5c:61:
c0:21:3a:86:dc:c8:a3:22:ee:d6:53:45:19:b4:71:
eb:18:0c:a9:77:02:a0:a1:6f:33:46:0e:d5:af:14:
7b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:33:A1:FB:6E:DE:60:2B:C1:24:61:16:4A:5B:CE:4C:89:C8:70:55
X509v3 Authority Key Identifier:
keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:de:d5:4d:17:b8:de:81:71:16:62:b8:c0:24:a5:48:b6:61:
01:ed:ee:ba:6b:fc:3f:a4:50:94:65:58:c2:07:bc:de:55:43:
69:d7:2c:33:75:49:ec:80:e6:53:7c:01:37:36:37:34:f8:52:
7a:90:3f:1f:f6:ed:10:ee:c0:32:c4:0d:d8:d1:d1:2e:30:88:
a5:d7:3f:a7:5b:27:82:c9:6a:5d:24:4e:02:bc:2c:b8:22:36:
7c:f7:b4:97:f1:b0:b0:68:52:3d:92:f3:a9:05:87:4e:07:3e:
1f:c7:df:1b:f9:1b:68:0c:35:69:fd:e7:2a:08:05:4d:d8:c6:
b1:d2:12:14:9a:e9:36:45:7f:8f:c9:38:bc:b0:de:d5:87:c7:
83:ae:38:28:7d:b7:6c:98:db:d9:74:ef:1b:04:59:6c:3c:39:
d4:7b:4a:46:07:29:dd:f7:d9:bb:d2:da:8d:2c:b1:88:df:bf:
44:a2:a4:81:fa:5f:87:ad:4b:59:6a:59:d9:9a:33:bb:4e:8f:
89:aa:42:27:25:26:c8:ca:83:d7:23:93:5f:cc:e3:08:7c:85:
8f:7a:99:b2:15:b8:6a:e0:18:90:66:fd:68:9e:0b:33:be:89:
fa:0f:06:82:e4:3d:6c:29:a8:30:27:2c:82:2e:ba:ed:7b:88:
2e:77:f6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:35:43 2026 by rpki-client