Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
File: U-8ohOShM1XbZJo0k1J8RCKJc7g.mft (raw, json)
Hash identifier: Yx+J0zWc4DZk3i9kpFNj+on7LaqL5J1ipZR8BdeJn7A=
Subject key identifier: 62:94:A1:A1:D3:0D:8A:90:DE:4D:E5:9F:10:42:27:2B:04:46:22:56
Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8
Certificate serial: 01A0811BCBF9582A01A588951F56AB7CB04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
Manifest number: 1541
Signing time: Tue 08 Sep 2026 13:01:17 +0000
Manifest this update: Tue 08 Sep 2026 13:01:17 +0000
Manifest next update: Wed 09 Sep 2026 13:01:17 +0000
Files and hashes: 1: E-486E0-raIhh0cU7uEvlJrtVq8.roa (hash: vna5ocXCF4M8ZuD7JNv3pkr7ZzkpCUbGfeYWFBWtRTs=)
2: U-8ohOShM1XbZJo0k1J8RCKJc7g.crl (hash: kiO5Vld6fRZ1W8zm+Ad0uTwvKdWwlnhPYsXVG+S9qds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:1b:cb:f9:58:2a:01:a5:88:95:1f:56:ab:7c:b0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8
Validity
Not Before: Sep 8 13:01:17 2026 GMT
Not After : Sep 9 13:01:17 2026 GMT
Subject: CN=6294a1a1d30d8a90de4de59f1042272b04462256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:95:a4:c2:f5:9c:cd:13:8f:a6:89:8d:e8:3e:
b2:95:c9:ce:ac:ee:db:56:e8:9b:ee:46:72:c8:8a:
ba:85:c8:d9:60:1e:6d:83:d6:63:93:c1:62:af:47:
48:27:be:07:e1:b1:52:c3:ad:d7:d2:04:bd:65:ec:
d4:4e:d5:01:da:7d:c7:7d:bb:6c:a7:96:98:23:3b:
bc:d9:ea:81:e3:f1:22:d8:3f:86:82:82:e5:12:13:
46:9f:36:ad:56:b3:80:81:c2:db:70:3b:99:d9:f8:
22:c0:d0:78:43:9c:4e:85:82:79:54:40:ac:49:0e:
ee:63:55:b8:a4:1a:e3:39:7f:1b:4a:52:98:6d:36:
98:38:3d:73:26:8d:b0:95:a1:79:fd:cf:76:39:bf:
56:0f:da:26:16:21:e9:d8:cf:7d:02:aa:f6:c6:5d:
7c:df:93:46:25:cc:c3:82:8f:10:fb:f3:4c:41:c1:
cc:61:64:50:61:50:45:5e:e0:fd:ed:32:31:eb:5a:
c1:f4:91:0f:0a:e9:c6:f2:ae:2a:e5:f5:20:e8:eb:
92:5d:4a:1b:70:a1:a5:82:46:0c:1b:b8:06:41:af:
c9:4e:06:85:41:e6:29:43:1e:42:4e:ba:c8:cc:bc:
b2:d8:0e:ae:e1:aa:d3:09:54:19:5e:a4:d0:fa:44:
b1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:94:A1:A1:D3:0D:8A:90:DE:4D:E5:9F:10:42:27:2B:04:46:22:56
X509v3 Authority Key Identifier:
keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:db:2b:a0:9d:26:65:04:19:a0:a8:d0:2f:ce:70:c3:d9:87:
9f:ac:1e:90:ca:cb:59:63:8b:24:32:9f:bb:b3:eb:e3:c8:a9:
27:da:d5:a2:6d:69:ab:19:b3:b5:f9:8a:00:24:6d:6c:ba:3c:
e9:6d:23:a6:dd:d0:ac:de:d0:9b:d8:67:4d:9c:8f:dd:73:30:
9f:03:76:c8:7e:14:c5:21:a9:e9:37:33:59:2e:94:31:f5:d9:
8d:e1:0d:9f:7c:65:c7:ac:11:c3:99:aa:04:51:72:bf:89:31:
a3:1a:84:21:70:42:9f:13:79:ae:0d:78:1f:48:f3:11:aa:8f:
c6:9f:4a:79:98:73:24:d3:ff:64:f2:c5:25:3a:64:2a:93:47:
d7:eb:6f:f4:ee:15:be:d8:26:62:f6:5e:cb:66:4a:70:45:1e:
8d:55:14:ce:c6:f4:1e:bf:00:e7:b7:a1:66:0e:45:35:b7:41:
74:99:c2:02:1e:3a:e7:86:89:66:d6:ff:ba:f4:50:c7:06:6a:
7d:d2:a7:36:11:5e:3b:b1:a3:c5:a3:7b:78:52:77:e1:c3:a0:
2f:70:3b:0e:80:b2:0e:a7:bf:a5:61:1a:46:c1:01:d4:3e:66:
cc:b4:31:40:a2:fb:be:2d:2a:9a:94:62:0d:20:90:8a:1a:3c:
22:a2:7a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 20:41:16 2026 by rpki-client