Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
File: U4Vcjs6b1vjjlAICISzgmwX1-KA.mft (raw, json)
Hash identifier: vUkHRLEKVw5039r9ShTKMNHuFKuD261DST08fOKUXvs=
Subject key identifier: 30:53:A8:9A:7C:21:7A:82:68:CA:23:B1:ED:3B:3E:52:7A:2F:F7:86
Authority key identifier: 53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
Certificate issuer: /CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Certificate serial: 01A06D26DE983AEFC26ABBFCFB607F0083B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
Manifest number: 16CB
Signing time: Fri 04 Sep 2026 16:00:58 +0000
Manifest this update: Fri 04 Sep 2026 16:00:58 +0000
Manifest next update: Sat 05 Sep 2026 16:00:58 +0000
Files and hashes: 1: U4Vcjs6b1vjjlAICISzgmwX1-KA.crl (hash: wdk+jMBic4me+11coZpt9aJ+OwINr7SYKoemAmJZhfs=)
2: wOCmhg5ukUDjqYrrNe8HL0c6WHY.roa (hash: py0DTzjoQh1bUaOEwoDGjjlil3qVagDVLMDa9WBCMVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:26:de:98:3a:ef:c2:6a:bb:fc:fb:60:7f:00:83:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Validity
Not Before: Sep 4 16:00:58 2026 GMT
Not After : Sep 5 16:00:58 2026 GMT
Subject: CN=3053a89a7c217a8268ca23b1ed3b3e527a2ff786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fe:08:b5:07:c7:7c:26:7e:9d:a2:51:cf:34:
e3:d4:90:dc:cf:8f:8c:2f:eb:4f:af:52:8e:0f:c0:
51:28:eb:d1:89:4f:ee:21:6d:fc:90:f3:1a:d1:96:
5e:03:84:3e:e9:ce:be:fd:04:8f:27:a6:1c:2e:16:
b4:bf:d6:0d:47:ee:7e:6b:01:fa:40:7a:df:d5:b2:
3a:56:8d:33:32:32:23:a2:96:8a:f2:5c:0a:fd:a0:
08:19:db:4d:5b:c0:e0:b0:27:b7:af:c7:bc:8a:46:
22:0e:a7:f1:68:86:b7:7f:10:42:c4:51:a3:3e:04:
c2:86:90:24:64:33:fd:07:ca:54:5f:58:ff:e4:da:
54:43:cf:cc:d5:7f:2b:d7:f2:8a:c6:c9:4e:ec:f1:
08:f8:90:3e:97:1b:53:49:5a:b0:c7:c4:62:86:66:
43:3d:65:79:9d:65:6f:89:78:b8:ac:b0:c6:9f:18:
47:3f:6c:68:91:ab:79:e4:b4:83:6d:78:73:1a:8d:
f9:05:6e:a7:50:82:05:9b:de:dc:7b:09:3a:a1:a2:
ea:b7:e3:18:7b:c6:07:62:2d:0a:4e:8a:c4:8c:45:
21:1d:e1:10:d7:a2:86:2b:9e:48:1b:e4:64:9a:0f:
31:b8:12:82:cf:9c:e7:47:5f:1a:bc:76:f1:76:4d:
79:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:53:A8:9A:7C:21:7A:82:68:CA:23:B1:ED:3B:3E:52:7A:2F:F7:86
X509v3 Authority Key Identifier:
keyid:53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:c1:84:40:1c:f2:da:78:68:2a:cb:e8:90:d9:b1:30:84:8a:
fa:5b:12:25:d8:89:26:12:c7:99:a5:8e:a4:75:3c:ae:bc:f9:
aa:47:8a:18:5f:e1:67:ff:12:a7:77:06:c7:88:0b:6f:1b:d0:
ce:9c:7d:3c:5d:01:0f:fd:c6:32:d4:d8:f5:2e:77:0e:97:11:
59:42:9e:4f:e7:48:a6:1f:51:ef:2a:01:69:5a:c7:71:0b:14:
30:72:ad:32:a2:ea:dc:77:cf:97:78:1c:37:45:c4:96:af:92:
a8:3b:8d:da:30:27:73:e4:bc:2b:60:e9:d8:7e:df:8f:3b:da:
d2:ee:2a:bd:d1:bd:a9:0f:8f:77:0b:5e:18:db:03:d8:39:d3:
2f:0c:a1:04:57:20:da:a5:cd:4c:05:8b:20:db:2d:aa:d8:6a:
8a:53:7b:77:63:59:cc:78:48:6d:60:0f:fb:df:12:d0:75:55:
44:93:fe:8b:9e:42:78:73:40:9a:7b:53:9a:9d:a3:da:31:23:
11:42:e7:2e:d9:10:06:07:64:32:4d:39:8a:c3:bb:be:bd:e7:
9b:e8:b4:29:67:3f:0f:50:9c:f3:e5:30:ad:ca:41:c2:b9:57:
8d:c9:3d:d8:f1:86:42:5d:93:d2:64:ee:f7:60:ac:8f:67:22:
10:5b:08:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:00:09 2026 by rpki-client