Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
File: U4Vcjs6b1vjjlAICISzgmwX1-KA.mft (raw, json)
Hash identifier: WIqAEClShX4HrAqtbl1UrcYn/fqf+UnYydtlyAJngB0=
Subject key identifier: EC:AC:53:8A:C5:E3:41:C8:9D:52:50:67:85:18:C4:D9:28:D7:08:43
Authority key identifier: 53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
Certificate issuer: /CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Certificate serial: 01A16458C72C8E2291976C11077F6902386D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
Manifest number: 174B
Signing time: Thu 22 Oct 2026 16:01:41 +0000
Manifest this update: Thu 22 Oct 2026 16:01:41 +0000
Manifest next update: Fri 23 Oct 2026 16:01:41 +0000
Files and hashes: 1: U4Vcjs6b1vjjlAICISzgmwX1-KA.crl (hash: bxHNwhT8shSDBhw0awMDMUJ3PXbH7HznRx5mz5aiZS0=)
2: wOCmhg5ukUDjqYrrNe8HL0c6WHY.roa (hash: py0DTzjoQh1bUaOEwoDGjjlil3qVagDVLMDa9WBCMVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 16:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:58:c7:2c:8e:22:91:97:6c:11:07:7f:69:02:38:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Validity
Not Before: Oct 22 16:01:41 2026 GMT
Not After : Oct 23 16:01:41 2026 GMT
Subject: CN=ecac538ac5e341c89d5250678518c4d928d70843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:7b:fb:74:e9:19:b6:f5:02:93:38:d1:7a:
3e:d3:35:1b:78:22:7a:e6:d9:cc:f0:59:f5:87:87:
db:96:59:d0:47:41:f6:d0:85:e4:59:9a:32:d7:0a:
e0:ba:3a:f5:80:96:3c:63:c8:22:b5:cc:74:67:b5:
0b:bb:36:7e:37:e7:f0:23:4a:40:7b:cc:95:1c:e1:
e4:84:db:2e:d4:e8:19:5b:16:7a:17:71:e1:69:6a:
03:ec:2c:13:ce:43:54:0f:02:95:13:2b:29:5e:e4:
86:f3:5d:cb:3c:75:27:e2:c9:74:50:7d:11:57:af:
8b:09:92:a4:e5:7a:1a:ee:c1:23:3e:bb:a0:3c:a8:
c9:50:a9:f2:11:60:ac:75:d3:18:a0:33:ba:f6:50:
20:73:8f:15:db:2e:f4:18:e4:fb:03:27:75:0a:30:
6a:d0:ef:d4:f2:d4:80:4c:5b:be:b5:36:14:90:f6:
50:f8:50:0d:f1:e3:31:18:7e:16:c6:3f:d0:50:dd:
8a:81:b1:ec:b3:66:1d:96:05:73:d9:1f:87:c5:c7:
c6:7e:52:f7:1e:fe:d8:d1:fe:9f:8f:af:d5:5d:6d:
4f:54:4f:60:ec:13:38:fb:2a:fb:4b:6d:f2:bb:37:
f4:e7:dc:a8:c4:a1:c9:77:d5:fb:5e:22:26:0b:5b:
19:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AC:53:8A:C5:E3:41:C8:9D:52:50:67:85:18:C4:D9:28:D7:08:43
X509v3 Authority Key Identifier:
keyid:53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:46:ea:02:73:33:d8:9c:0c:a4:a6:42:0d:16:98:56:9f:ba:
e2:35:50:c7:21:6b:af:d8:82:f3:16:84:a1:f5:ad:ec:3c:f1:
f3:7d:2a:13:5d:14:73:15:f8:8d:80:38:6a:7d:f4:33:41:c1:
4e:04:46:7e:91:1f:1f:60:28:c7:ec:84:7b:fd:9a:f7:85:b4:
4d:6a:28:8e:14:0f:2c:af:d6:7c:11:79:1f:38:3f:e2:18:d5:
8d:70:05:03:ce:2b:25:4c:21:f2:fc:11:4d:d3:ff:eb:81:f0:
ae:2f:91:3e:24:e0:c1:85:5c:24:a8:07:f3:e7:2e:f6:9f:43:
22:f0:f1:f6:e7:8c:ec:05:17:f8:b3:df:c6:d7:87:7a:ac:01:
8a:d0:fd:f5:c2:14:ce:dd:e3:20:f4:74:ed:d7:e2:c5:5b:93:
08:a7:2a:9c:d0:4e:de:bd:bf:3f:ff:d2:b6:60:0f:93:de:18:
ae:43:73:3b:b1:e0:69:f1:05:e7:19:1f:3d:f8:6a:4d:15:5e:
ce:d5:37:14:66:d9:47:b3:33:24:7f:b6:1d:b5:c8:ba:82:9a:
b0:5b:db:ab:4d:84:34:1a:ab:bf:9c:4c:4c:33:72:fa:ae:01:
fa:59:1b:c4:3f:2e:4c:59:db:dc:bd:d6:06:40:7b:7b:09:8d:
03:e5:ee:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 23:02:44 2026 by rpki-client