Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
File: U8vRR3BEoDQEx_xDlhwsg7unW7w.mft (raw, json)
Hash identifier: naFiRkQ/3bfmu5ReYSO7vFCjtJrO92lNedUJAxVg0iE=
Subject key identifier: 44:51:E6:3D:F4:F4:FE:2D:3A:64:72:3E:FA:15:D0:B8:CF:8D:3F:C9
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 01A130A23508B4ADF2881A6E35B21EE33986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
Manifest number: 12CC
Signing time: Mon 12 Oct 2026 15:01:39 +0000
Manifest this update: Mon 12 Oct 2026 15:01:39 +0000
Manifest next update: Tue 13 Oct 2026 15:01:39 +0000
Files and hashes: 1: U8vRR3BEoDQEx_xDlhwsg7unW7w.crl (hash: kc/uzaWgsGVYl5p9KQCo7jBIvG8xwf3hdCfHyl0m0Mk=)
2: i-hrmAd6eP2UJtkk3SPMJzG0IR4.roa (hash: B6teHj1AoVH0G/n45VB0pZwR7t3AJ0lfJJi8U5XTRvo=)
3: zaKgjQxKOXseye7OptrYTXdeRW8.roa (hash: msUavGu33dhomVrKx+MtKYwUf9QSzxgfQ+UXycVAuNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 15:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a2:35:08:b4:ad:f2:88:1a:6e:35:b2:1e:e3:39:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Oct 12 15:01:39 2026 GMT
Not After : Oct 13 15:01:39 2026 GMT
Subject: CN=4451e63df4f4fe2d3a64723efa15d0b8cf8d3fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:97:8b:14:cb:26:cf:ab:9e:61:7f:c9:cd:
6b:35:1e:da:e6:70:86:aa:0b:69:ec:ee:8e:a0:18:
3f:23:2d:b5:11:46:ea:2d:28:d3:7b:0a:58:2d:c7:
67:72:7e:47:f2:e6:2c:f6:7d:75:10:91:04:5e:e1:
7a:b1:54:79:3d:e2:20:df:2c:96:0a:b2:39:27:e0:
fa:08:ef:01:5b:35:b7:0f:01:23:de:dd:b7:0f:8c:
e3:01:04:0b:ed:50:21:bc:e1:8b:a7:d4:92:16:69:
ad:b8:76:6e:39:1f:b8:1d:f0:fd:67:21:a8:d5:85:
16:5a:2e:d3:d3:f8:f3:8e:3a:5c:56:e9:fa:4d:5d:
b5:4d:3d:46:64:4c:30:ba:fc:3f:70:3c:73:b2:96:
2c:14:0a:90:ee:40:e9:01:f9:a8:1a:aa:05:43:ca:
63:03:29:74:06:80:30:60:55:cd:36:83:d2:1d:57:
79:14:17:98:72:08:06:2e:79:df:e6:48:6f:92:a5:
57:4b:c6:47:de:3e:03:91:f5:4a:af:d2:19:a1:4a:
8a:3b:4c:df:53:82:09:fe:c8:6d:c2:a4:8c:0b:9f:
0b:a9:75:03:7c:0d:4a:40:e6:34:a8:f8:49:49:0f:
10:f7:29:40:c8:88:1e:83:3a:8d:a1:4a:2b:44:2c:
1a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:51:E6:3D:F4:F4:FE:2D:3A:64:72:3E:FA:15:D0:B8:CF:8D:3F:C9
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c1:e4:8d:4f:ee:92:20:56:f9:4f:69:a3:fa:be:33:2a:62:
14:96:01:12:f1:b8:25:ed:6f:fb:5d:54:98:62:44:d7:66:b3:
28:6d:e7:ef:4b:5d:57:40:fe:00:cb:3e:44:88:28:5e:3f:3d:
bc:25:c2:32:c6:9b:80:29:b3:57:c8:af:ab:dc:ad:b3:f0:47:
45:d1:ae:2a:aa:39:f7:43:c5:9b:cd:44:da:48:de:f0:fc:88:
17:a9:e8:88:d6:a2:0b:e6:d2:52:68:a4:84:87:78:ae:60:bc:
df:c8:87:6f:d4:14:69:80:31:47:a7:7c:83:7e:7a:aa:7a:f8:
28:99:0b:ff:81:e9:a7:e6:c4:c2:de:1d:9e:82:76:c1:70:68:
13:2c:56:ad:6f:ec:ae:f3:5f:53:93:e8:4e:fa:56:e0:6a:11:
35:17:e9:8f:80:f5:aa:02:f9:8d:88:49:1e:31:06:f9:d6:66:
94:f8:a4:db:9a:8a:0a:72:de:f3:dc:d7:26:fd:03:5a:7f:e9:
8d:a6:47:64:71:df:5c:9a:1d:21:36:8a:f3:34:82:9e:ab:71:
ec:af:d5:cf:44:74:69:bb:37:cc:7f:10:6d:e5:10:d6:4e:98:
78:ee:d5:2d:ca:d2:93:58:70:25:07:63:3b:c8:bf:ab:5e:77:
a6:f5:ec:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 02:22:59 2026 by rpki-client