Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
File: U8vRR3BEoDQEx_xDlhwsg7unW7w.mft (raw, json)
Hash identifier: EnrWTfi7qLki96b9Vn7IFYDUoEoT221yR5NacQP9Mcc=
Subject key identifier: E2:DE:78:A5:32:08:2C:B6:E7:B0:27:A3:62:0C:B5:93:AF:BD:41:05
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 01A02620B0E0F08A2A506705B37C61F03B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
Manifest number: 1242
Signing time: Fri 21 Aug 2026 21:01:11 +0000
Manifest this update: Fri 21 Aug 2026 21:01:11 +0000
Manifest next update: Sat 22 Aug 2026 21:01:11 +0000
Files and hashes: 1: U8vRR3BEoDQEx_xDlhwsg7unW7w.crl (hash: VLS19H3sAAItsknBXC2R8EiOYiaHF2qtLfjQvJtu3Ak=)
2: i-hrmAd6eP2UJtkk3SPMJzG0IR4.roa (hash: B6teHj1AoVH0G/n45VB0pZwR7t3AJ0lfJJi8U5XTRvo=)
3: zaKgjQxKOXseye7OptrYTXdeRW8.roa (hash: msUavGu33dhomVrKx+MtKYwUf9QSzxgfQ+UXycVAuNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:20:b0:e0:f0:8a:2a:50:67:05:b3:7c:61:f0:3b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Aug 21 21:01:11 2026 GMT
Not After : Aug 22 21:01:11 2026 GMT
Subject: CN=e2de78a532082cb6e7b027a3620cb593afbd4105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:5d:47:28:9f:a3:8d:d8:c9:09:02:1d:ee:
d7:bd:2f:84:e6:bd:ff:7f:2d:f1:ff:6c:92:ca:0d:
88:37:43:41:0b:51:c2:53:be:49:09:bc:40:51:e9:
9a:13:99:f2:eb:00:70:35:38:cb:40:63:ca:0a:9e:
2c:11:f0:fa:d7:24:c6:7d:00:22:dc:81:04:6a:10:
b5:9e:75:89:4d:66:8c:d1:32:81:f2:62:2a:01:ff:
32:cb:dd:09:65:d5:15:8f:0d:58:1a:d1:0e:be:3f:
6e:46:ad:e5:b8:20:69:fb:3f:b9:cd:77:57:61:d3:
13:d3:0d:38:fe:bb:43:15:90:8e:16:36:0a:c5:2a:
e4:83:1e:16:23:5a:ca:bf:80:14:9d:de:0e:3d:db:
a1:c2:9a:50:26:1c:64:6d:70:fc:63:d8:40:bc:e5:
a2:16:b2:a6:a3:5c:59:90:8d:43:1c:9c:33:e2:ff:
5c:f2:32:56:80:9c:e3:4a:6e:83:7f:44:a9:cc:61:
ab:d5:af:bd:f0:4d:b3:46:b5:a2:e1:ff:bd:9f:d0:
80:52:72:b4:8b:64:d8:21:f9:fc:b1:49:bc:f5:93:
03:3e:12:8f:c2:a9:4f:ad:29:05:c5:94:d4:ea:e7:
5d:b8:45:4c:eb:05:8e:93:5a:1e:32:8a:f4:5d:48:
9d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DE:78:A5:32:08:2C:B6:E7:B0:27:A3:62:0C:B5:93:AF:BD:41:05
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:c1:f0:60:f7:b0:8d:f3:fd:40:7b:06:60:20:c5:85:38:61:
2d:ac:f2:3b:f1:2b:c2:db:18:63:2a:3e:40:4e:09:46:7c:97:
44:a1:f8:05:d6:c5:f1:f3:2a:ad:eb:e8:65:7b:32:c0:9a:5a:
98:9f:4c:34:d7:c8:29:87:c9:77:55:e1:92:b0:e6:84:df:44:
0c:b6:a8:f1:98:7d:7d:62:b3:18:f5:9d:ec:6d:10:ff:ca:9c:
f5:45:20:7e:d9:cc:8a:a3:d5:31:f9:15:b9:f4:3c:5c:76:26:
7d:54:00:20:9a:a9:b7:35:44:1a:dd:99:70:b3:6c:07:2d:e2:
72:b0:ea:62:6d:d8:8a:f0:12:31:c4:37:ff:84:69:dc:76:de:
02:a8:ef:11:71:8a:1a:be:63:04:8f:b0:11:fb:5c:a7:92:d7:
24:73:74:42:73:5d:84:aa:37:17:58:c5:1e:44:dc:2a:21:b5:
c1:f6:4c:7b:06:48:76:bd:2d:40:48:99:3e:86:ed:66:2b:4d:
9d:e3:7f:6f:28:0b:ed:54:af:e6:52:5c:16:f7:7e:f6:71:bc:
7b:ae:24:76:3c:93:da:cf:dd:25:2e:13:b7:26:f0:f6:56:5b:
e0:e6:8e:e3:4d:ae:fc:5d:79:10:c4:75:96:21:3d:6e:27:30:
f6:4c:96:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:09:45 2026 by rpki-client