Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
File: U8vRR3BEoDQEx_xDlhwsg7unW7w.mft (raw, json)
Hash identifier: ymgb3JNI+m3dP6hMrX3UDYWHF6EXVeVxdgIismwvwKw=
Subject key identifier: 2F:0E:2D:91:27:FE:2F:79:99:31:45:E2:24:3D:4A:A0:73:5C:16:17
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 019F3A86C0F53BDEEA5063E1B3BB932D2C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
Manifest number: 11C8
Signing time: Tue 07 Jul 2026 03:02:17 +0000
Manifest this update: Tue 07 Jul 2026 03:02:17 +0000
Manifest next update: Wed 08 Jul 2026 03:02:17 +0000
Files and hashes: 1: U8vRR3BEoDQEx_xDlhwsg7unW7w.crl (hash: 7SotYOwKIcf6DeEz0Jsanar/qpr9w1JwMaPyhSUN/xo=)
2: i-hrmAd6eP2UJtkk3SPMJzG0IR4.roa (hash: B6teHj1AoVH0G/n45VB0pZwR7t3AJ0lfJJi8U5XTRvo=)
3: zaKgjQxKOXseye7OptrYTXdeRW8.roa (hash: msUavGu33dhomVrKx+MtKYwUf9QSzxgfQ+UXycVAuNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3a:86:c0:f5:3b:de:ea:50:63:e1:b3:bb:93:2d:2c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Jul 7 03:02:17 2026 GMT
Not After : Jul 8 03:02:17 2026 GMT
Subject: CN=2f0e2d9127fe2f79993145e2243d4aa0735c1617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:d5:d2:5f:68:3d:f0:68:63:9e:66:c8:01:
4d:fa:96:2d:72:f0:9a:0d:0e:06:b3:85:8d:f2:93:
c9:ba:1c:08:df:86:96:55:c2:24:fc:8d:af:b2:ff:
10:f8:cf:1b:df:26:e9:63:b5:76:2f:a6:39:2f:98:
ca:1a:e7:b2:46:64:f3:b8:cb:0c:2b:b6:93:30:4d:
7b:de:de:bc:6b:c4:ff:58:2c:23:43:85:a6:20:a3:
37:98:d3:42:da:43:b2:48:ea:55:aa:dc:e9:09:6b:
03:61:c1:1a:73:b3:be:8b:0b:51:b3:d3:3d:46:08:
b4:d3:e6:d0:dd:60:10:c4:a8:94:10:9b:60:20:b9:
c9:e3:51:a1:32:21:73:16:fd:c3:91:5f:ad:b0:18:
fc:83:f2:13:f9:e4:28:30:7b:69:dd:5b:a8:90:b6:
40:df:69:b7:c2:9c:52:61:c5:10:b3:eb:82:84:c0:
9c:93:8f:3e:14:0a:e9:aa:84:52:62:91:af:13:05:
8d:be:b3:7d:05:5b:51:05:f8:1f:90:63:44:ba:29:
64:0d:d9:fe:64:22:8d:98:ac:ec:26:b5:74:b9:a8:
b9:7f:06:a6:db:d1:e4:4f:45:eb:c3:ec:7e:84:c7:
0b:97:13:ab:de:21:98:fb:34:c9:af:22:68:86:02:
a8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0E:2D:91:27:FE:2F:79:99:31:45:E2:24:3D:4A:A0:73:5C:16:17
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cf:c4:c5:8f:b9:c8:d7:7c:c7:5c:be:d4:9b:09:6e:ec:8d:
91:fb:e7:ed:9b:49:6a:05:15:14:ac:59:17:29:98:50:17:c6:
5c:da:77:42:81:4b:24:9d:d2:ed:47:73:91:ea:32:37:8a:80:
95:19:2b:06:f4:9a:f9:0c:9e:4c:80:20:44:4c:6b:31:2c:3a:
8e:0d:a6:3a:9b:9d:e9:70:a8:42:e2:4e:5f:e8:79:eb:15:71:
09:9e:b8:8b:2f:e0:de:e6:b1:42:8f:09:5e:5b:31:f1:48:19:
f3:83:81:0b:a0:f2:4f:08:97:d0:a5:eb:0d:6f:db:ea:1a:1e:
25:b1:ec:d3:a9:d1:7e:04:a3:a7:31:1a:4d:ce:8b:05:6b:56:
54:37:94:b8:c2:2a:46:91:88:93:9a:b8:22:93:91:6d:98:23:
56:50:71:61:14:c8:b1:ad:37:bc:b6:00:fc:2c:c8:2a:f8:8f:
93:fc:ac:43:c1:ef:e0:92:01:6f:ef:25:f9:30:a0:ab:b7:c0:
78:09:72:1a:b9:c3:8e:cd:af:20:da:7e:60:63:a6:46:c8:fa:
8b:d9:77:06:ce:8a:cd:1a:7f:39:4a:d4:0e:6e:cc:c0:c5:b4:
15:55:dd:70:f4:5b:31:12:28:70:8f:2d:6e:f0:dc:f7:ef:80:
5f:e1:1e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:46:00 2026 by rpki-client