Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
File: U8vRR3BEoDQEx_xDlhwsg7unW7w.mft (raw, json)
Hash identifier: 3SShF1XALDkXWUZD9CChYYXqX/sua8b98oizn9aF/NE=
Subject key identifier: 94:C4:99:C4:01:92:6B:3E:BE:00:BA:12:94:D3:91:76:49:A5:DE:15
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 019E50D9BDC2B18E0818E30812EC84E7D81B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
Manifest number: 114F
Signing time: Fri 22 May 2026 18:01:47 +0000
Manifest this update: Fri 22 May 2026 18:01:47 +0000
Manifest next update: Sat 23 May 2026 18:01:47 +0000
Files and hashes: 1: U8vRR3BEoDQEx_xDlhwsg7unW7w.crl (hash: A9nEYD+imWjA5ZqO9KHfUiWp4Dm9PkyRKqG7+YbF8gg=)
2: i-hrmAd6eP2UJtkk3SPMJzG0IR4.roa (hash: B6teHj1AoVH0G/n45VB0pZwR7t3AJ0lfJJi8U5XTRvo=)
3: zaKgjQxKOXseye7OptrYTXdeRW8.roa (hash: msUavGu33dhomVrKx+MtKYwUf9QSzxgfQ+UXycVAuNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:50:d9:bd:c2:b1:8e:08:18:e3:08:12:ec:84:e7:d8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: May 22 18:01:47 2026 GMT
Not After : May 23 18:01:47 2026 GMT
Subject: CN=94c499c401926b3ebe00ba1294d3917649a5de15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2e:b4:b8:98:24:16:39:47:ef:eb:13:ad:97:
37:0d:6a:43:9e:42:e1:df:9d:ac:ed:81:4e:a8:96:
a1:e8:83:41:08:5f:2f:b6:7c:22:9d:44:76:8b:09:
4e:f7:fa:35:0c:03:d0:9d:c6:0a:9f:e8:9f:a2:61:
4a:d5:aa:3b:93:29:c9:2c:75:cf:14:6b:43:ab:0f:
f4:fd:36:99:be:2d:f6:78:82:3f:46:df:0b:18:ec:
f8:1c:10:26:86:9d:b3:6a:d7:07:a0:3a:6b:af:3f:
e8:c4:1c:1b:ce:d8:8d:e5:62:4f:ee:7f:b5:4b:9d:
9b:a9:38:9a:db:91:d7:5c:54:4c:74:b0:e3:e1:23:
ea:51:bd:eb:75:57:85:70:b8:66:cf:9a:4a:a5:8e:
f7:1f:bf:46:24:1f:57:8e:29:ec:de:a4:8c:69:c1:
c8:8d:fc:79:17:f1:54:0b:ed:4b:ac:38:1a:29:ca:
76:54:37:40:a6:18:15:f5:a2:1c:98:a4:76:7f:e5:
15:f2:63:23:bd:2f:eb:5b:eb:43:21:cb:87:e4:73:
d1:da:29:d3:2e:56:1b:e0:9b:6a:5a:e3:ee:f2:f6:
c1:36:5e:70:91:ca:e1:a9:21:8c:10:e2:02:1a:b6:
7e:2f:ef:32:18:08:03:d4:72:4a:70:53:c4:8d:2f:
b2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C4:99:C4:01:92:6B:3E:BE:00:BA:12:94:D3:91:76:49:A5:DE:15
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d2:fe:08:6b:13:1d:ad:d3:2d:02:21:4c:dd:6a:04:58:3d:
e7:a0:5c:ac:7b:c0:17:4e:d2:b8:74:d8:53:1e:5b:d5:9a:61:
80:43:2d:05:a0:9e:a5:b2:03:da:6b:62:4e:cd:6f:c8:73:19:
39:cb:5b:5a:13:ac:9b:4c:13:33:d0:dc:8e:86:91:4b:84:31:
32:3c:5d:d4:57:ba:40:27:9a:c6:0a:10:41:81:75:86:3c:e1:
bf:eb:ed:c2:d3:f8:5d:59:a2:ae:7f:1a:e1:6e:f2:02:90:8e:
02:c2:96:24:a8:ca:c8:69:d0:31:00:33:0e:a7:83:aa:71:12:
70:14:53:9b:d2:39:e1:4d:87:6e:4f:f0:99:1e:ce:52:01:d8:
b4:e4:78:63:0f:fb:66:01:5f:74:76:bf:00:cd:28:2b:a4:ff:
21:66:e3:4b:bf:05:67:58:17:95:73:16:6f:12:10:2a:bc:d8:
6f:1c:2d:25:a6:67:a6:f8:39:f9:63:49:e4:e6:49:42:ac:c2:
2c:8e:5f:fb:b6:da:3a:ee:77:24:78:2d:08:50:df:55:a1:2e:
55:3e:ed:7f:67:9a:a5:88:95:69:1a:ae:19:80:23:bf:31:8c:
1a:22:cb:69:d4:b4:fa:b6:6d:c3:30:58:0c:42:61:47:89:cf:
96:02:f1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:48:13 2026 by rpki-client