Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
File: U-8ohOShM1XbZJo0k1J8RCKJc7g.mft (raw, json)
Hash identifier: jm6tDa8KAGvothKUHVjosOBqL3X+qDsBhKhWwpLcEPM=
Subject key identifier: 69:D5:CA:31:49:6E:C4:B2:F4:D1:6F:B4:66:C7:13:4C:E4:55:C2:EB
Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8
Certificate serial: 019DC039131F6008908975AAD168EF1BF8F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
Manifest number: 13D4
Signing time: Fri 24 Apr 2026 16:00:58 +0000
Manifest this update: Fri 24 Apr 2026 16:00:58 +0000
Manifest next update: Sat 25 Apr 2026 16:00:58 +0000
Files and hashes: 1: E-486E0-raIhh0cU7uEvlJrtVq8.roa (hash: vna5ocXCF4M8ZuD7JNv3pkr7ZzkpCUbGfeYWFBWtRTs=)
2: U-8ohOShM1XbZJo0k1J8RCKJc7g.crl (hash: LCq8bu6gCMUxBo8yqCQRFX2Q/fZtHlCN+aGtMUUjswc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c0:39:13:1f:60:08:90:89:75:aa:d1:68:ef:1b:f8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8
Validity
Not Before: Apr 24 16:00:58 2026 GMT
Not After : Apr 25 16:00:58 2026 GMT
Subject: CN=69d5ca31496ec4b2f4d16fb466c7134ce455c2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:40:42:d9:83:69:11:f3:ea:34:06:d1:3d:
75:99:82:1a:62:b1:14:82:e1:7a:b3:39:7e:5a:f0:
8e:da:03:5a:bf:80:c8:5f:75:bf:d6:e9:eb:13:69:
1a:33:57:72:50:71:a9:e8:a6:7a:97:87:9e:36:22:
41:fe:b4:f5:2f:25:af:0d:a4:d0:cc:0c:bf:84:1c:
64:cf:7e:4a:50:6f:c0:cd:eb:ac:50:f7:81:34:66:
8b:69:1b:3c:a3:fa:62:72:c2:48:72:45:b9:30:86:
58:c9:43:3b:a3:51:e5:8d:92:78:da:55:46:cf:b2:
3f:80:d0:6a:f6:f5:7e:f0:7b:db:d9:47:da:0b:7c:
10:8f:d1:02:ba:da:20:49:21:7e:a6:7e:a6:3a:5e:
ae:db:14:8f:dd:37:2f:f1:8b:c1:85:6a:61:08:69:
26:99:51:27:61:89:d0:86:98:df:2d:07:ef:23:8b:
77:ca:3a:87:79:3f:1a:24:4d:21:5f:6e:3e:d6:f7:
72:bb:d2:9b:6b:05:9f:7f:24:61:a0:13:87:2c:07:
54:42:06:7a:62:35:79:f0:04:c3:05:60:a4:09:a8:
50:b2:41:a1:17:3b:e1:5f:1d:a1:4b:da:d8:b8:15:
c8:74:c7:13:52:e8:50:8d:59:5d:0e:b3:4d:8d:ee:
2c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D5:CA:31:49:6E:C4:B2:F4:D1:6F:B4:66:C7:13:4C:E4:55:C2:EB
X509v3 Authority Key Identifier:
keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:b7:0e:71:25:3f:00:ec:8a:48:58:36:51:7d:49:1c:6b:68:
5c:2e:ae:6a:c2:0c:70:63:a4:63:5c:a9:b4:a4:f1:70:e6:8b:
5d:ab:97:cc:9c:3d:b2:99:e6:49:a1:52:77:bb:90:ae:93:ce:
49:00:66:2c:29:9a:21:3f:3b:16:62:e5:82:50:40:d4:fd:eb:
94:c2:c2:81:ad:3a:e2:db:36:c9:47:89:6e:48:73:d2:6b:ed:
95:ec:5c:8f:51:2c:b3:ea:42:a4:bc:85:48:cc:f3:a0:a9:81:
a4:e5:29:82:a0:64:f5:01:36:30:1f:59:ec:2f:f4:5f:6d:84:
4d:41:cc:d8:8a:38:55:3a:fa:8f:61:75:51:ed:04:a3:0b:ef:
23:9a:1b:24:c5:74:79:7d:85:af:4d:0e:cf:62:1e:91:2f:77:
dd:0e:e6:26:54:f4:b7:90:11:e0:75:b4:77:10:65:5d:e2:a8:
59:5e:3f:5a:6b:e6:5b:72:38:df:df:35:6d:20:8b:fd:81:40:
4c:98:ba:c0:7b:73:d1:b6:2f:6f:c6:20:33:1d:a7:54:cc:24:
fe:ae:c1:a7:06:bf:2a:09:ec:74:78:f8:dc:ca:a9:1f:22:f2:
36:ca:cb:c4:76:75:5d:19:70:c6:99:fd:71:65:0e:30:1a:ef:
8b:df:22:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 00:35:38 2026 by rpki-client