Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
File: U8vRR3BEoDQEx_xDlhwsg7unW7w.mft (raw, json)
Hash identifier: fRXTrbYroh7glm2jFA/snDqfU121lzqqMRxDrBzCaFo=
Subject key identifier: 95:90:46:3F:30:3B:0E:DF:32:FD:E0:4C:95:B9:55:40:18:A8:07:2E
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 019D38D305A7DF0193864B8E8A0EAFF24BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
Manifest number: 10BE
Signing time: Sun 29 Mar 2026 09:00:46 +0000
Manifest this update: Sun 29 Mar 2026 09:00:46 +0000
Manifest next update: Mon 30 Mar 2026 09:00:46 +0000
Files and hashes: 1: U8vRR3BEoDQEx_xDlhwsg7unW7w.crl (hash: 92kXXLbWQxMShl+yC6OzQwWCSG8VZtKE7ZFt7wgjq6Q=)
2: i-hrmAd6eP2UJtkk3SPMJzG0IR4.roa (hash: B6teHj1AoVH0G/n45VB0pZwR7t3AJ0lfJJi8U5XTRvo=)
3: zaKgjQxKOXseye7OptrYTXdeRW8.roa (hash: msUavGu33dhomVrKx+MtKYwUf9QSzxgfQ+UXycVAuNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:05:a7:df:01:93:86:4b:8e:8a:0e:af:f2:4b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Mar 29 09:00:46 2026 GMT
Not After : Mar 30 09:00:46 2026 GMT
Subject: CN=9590463f303b0edf32fde04c95b9554018a8072e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:59:10:20:08:45:59:8b:32:d0:20:c1:77:45:
db:dd:ff:38:12:8f:d3:b7:26:4a:b4:2c:3f:22:8d:
26:e0:b7:15:0b:d9:d5:6a:ba:2f:3c:2f:ae:33:6b:
90:80:93:aa:e5:8d:db:c3:a5:7f:65:82:99:71:b9:
a9:44:64:bb:ba:73:59:41:b9:0a:cd:5b:ac:ec:22:
65:1f:62:97:5f:85:59:fc:d9:f9:f5:9c:48:81:04:
ce:99:40:e9:d9:58:d4:f8:8c:b2:ab:f5:52:1c:b2:
c6:d5:5b:9a:d2:1a:86:b7:80:aa:b4:45:aa:10:38:
74:84:c7:ab:db:dd:0b:44:00:9d:01:fe:0f:bf:59:
45:ad:7f:b2:28:e8:8e:5a:48:61:76:da:f0:2f:f8:
e9:45:3a:2d:f7:83:db:35:ff:0c:46:86:12:6c:f6:
96:93:23:19:df:fa:2e:16:5e:6b:1a:6b:03:78:2d:
eb:a0:36:ca:ea:86:6f:91:ec:b1:af:c4:b8:b1:b8:
f0:cf:fe:df:6a:69:c0:f5:70:67:ba:ba:ef:e5:75:
67:29:ec:42:88:86:64:b4:94:33:86:fd:80:83:62:
f9:20:c5:d4:7d:af:64:8f:30:6b:0f:35:39:ce:dd:
4b:95:b0:09:7f:60:42:95:17:1b:32:37:4d:ae:81:
e6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:90:46:3F:30:3B:0E:DF:32:FD:E0:4C:95:B9:55:40:18:A8:07:2E
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:00:0b:06:28:96:d4:37:be:64:b0:7b:94:56:5a:f3:e6:09:
d9:2b:e8:fd:ce:6a:a3:ee:ad:9b:0d:a4:5d:fb:5a:75:0c:97:
77:b5:92:20:34:1b:30:52:22:80:57:2a:32:99:4b:12:52:6c:
37:18:cf:85:3e:4f:78:b3:42:9c:46:3e:4a:ba:86:d4:63:3f:
5e:81:39:12:96:93:cd:08:29:29:6c:0e:26:eb:80:f3:0f:25:
5c:85:90:03:0f:97:f0:33:71:9a:f0:31:3d:49:db:68:59:17:
7b:9c:9e:4e:fd:a3:46:64:46:d0:26:8a:da:ae:b1:74:b3:8d:
25:d3:22:b3:4b:83:1f:6b:e2:4d:26:fe:41:aa:98:b7:00:62:
e0:a0:89:81:20:40:55:fd:51:46:d0:85:81:49:b2:30:8f:bb:
03:fa:7d:c9:ea:00:0b:97:a7:1d:48:be:fd:a5:a2:bf:28:b4:
0e:a6:3a:75:85:e8:5c:74:40:5c:76:d0:8d:43:82:6c:67:e0:
44:9a:d4:df:cd:ee:7b:f5:32:b5:ac:0c:2a:e1:26:c3:8d:c2:
c6:02:38:7a:14:b3:a0:7c:a6:63:1f:d6:e2:3e:05:4e:0f:36:
68:dc:59:e3:48:a4:17:54:f8:f4:32:42:6f:62:db:aa:ea:a3:
fc:7f:49:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:57 2026 by rpki-client