Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
File: U8vRR3BEoDQEx_xDlhwsg7unW7w.mft (raw, json)
Hash identifier: dXSeCv9OehudFutc8HSmUWkYAvWOusNb6+RQml2J8os=
Subject key identifier: BC:24:43:DC:3C:32:FC:F4:27:0A:35:9A:A7:9F:0B:D1:55:5F:E3:ED
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 01A12AD7618150A86D75A1C50208A1102A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
Manifest number: 12C9
Signing time: Sun 11 Oct 2026 12:02:00 +0000
Manifest this update: Sun 11 Oct 2026 12:02:00 +0000
Manifest next update: Mon 12 Oct 2026 12:02:00 +0000
Files and hashes: 1: U8vRR3BEoDQEx_xDlhwsg7unW7w.crl (hash: U0Mf02rC8CpKoMNHEdHg1b5XaMpMpyxW//UqTzWFarA=)
2: i-hrmAd6eP2UJtkk3SPMJzG0IR4.roa (hash: B6teHj1AoVH0G/n45VB0pZwR7t3AJ0lfJJi8U5XTRvo=)
3: zaKgjQxKOXseye7OptrYTXdeRW8.roa (hash: msUavGu33dhomVrKx+MtKYwUf9QSzxgfQ+UXycVAuNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d7:61:81:50:a8:6d:75:a1:c5:02:08:a1:10:2a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Oct 11 12:02:00 2026 GMT
Not After : Oct 12 12:02:00 2026 GMT
Subject: CN=bc2443dc3c32fcf4270a359aa79f0bd1555fe3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c4:ed:ef:18:fe:89:99:3a:86:43:76:6d:53:
d4:ba:82:1d:f7:75:79:0d:0d:05:6f:df:09:76:e5:
2b:a6:dc:2f:97:9d:bd:02:91:bf:fc:d9:bf:9d:a5:
d0:9d:6d:11:cd:78:84:c4:8d:5f:5f:93:f7:4c:90:
8c:9e:22:05:2d:dd:23:57:3a:18:93:60:4a:42:57:
b3:31:2f:99:0a:43:a4:d6:dd:d2:42:9d:9f:17:51:
8e:06:32:d5:99:20:60:66:ea:9e:d3:18:a9:88:98:
9e:89:c7:bf:67:4d:bb:7c:a0:85:60:11:a5:83:92:
cc:69:61:cc:b5:a2:f5:ef:9a:e9:54:25:96:dd:15:
b7:c8:d3:64:14:e6:b0:68:6d:9e:2e:cb:7a:cb:36:
92:c9:46:d5:e7:b3:bc:fa:dd:7c:f2:eb:eb:f0:bc:
8a:b7:93:21:4a:cc:cb:7f:4f:f6:22:4c:08:cc:c1:
69:b4:d7:89:34:62:76:55:d2:01:df:73:be:73:92:
9c:4d:33:4e:84:b6:69:ce:4f:47:1e:fa:3a:95:86:
7d:31:c4:fb:50:6a:c9:49:33:2a:2d:00:93:76:16:
35:9d:98:c0:c6:1c:6d:07:2f:6c:03:db:8f:97:25:
b1:3a:e7:30:18:57:09:4a:2f:51:2f:57:fb:55:5b:
a9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:24:43:DC:3C:32:FC:F4:27:0A:35:9A:A7:9F:0B:D1:55:5F:E3:ED
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d5:bd:4a:27:da:bf:4d:9e:02:6b:1a:03:80:64:91:2f:08:
a9:ef:df:ae:f5:30:96:9a:7b:80:ed:1a:09:9e:42:e1:10:7d:
56:7d:77:ef:f5:53:65:a2:56:10:7f:35:b0:39:27:83:cb:37:
3b:48:62:b7:99:9c:61:39:43:c7:b2:02:79:7a:fb:b2:e3:b9:
3a:4a:90:64:1d:c2:34:41:15:7e:52:28:b5:f3:5a:00:0e:0f:
0a:1b:06:6f:59:ca:1b:f9:8a:4e:4d:bd:9f:65:74:6e:52:dd:
c8:fa:eb:3b:a9:02:e0:fd:a0:8d:8e:41:d8:64:0c:45:fa:fd:
23:d9:b8:38:f1:20:fa:d7:63:b5:55:30:91:04:55:f7:12:80:
80:78:5b:3e:b2:f9:47:50:4f:3b:a3:1f:6b:62:2e:0e:ee:25:
7d:a6:2b:a9:c2:1e:51:ee:5b:c9:3d:7c:72:8d:90:61:db:32:
94:fe:04:07:5e:e3:4d:af:1e:58:1d:ae:ae:97:9a:94:49:5e:
ed:ec:63:2e:2f:49:a1:7b:df:99:65:a7:2a:e6:09:81:2e:2a:
6e:8e:92:eb:8d:22:ed:72:d5:b3:35:1c:72:c4:5e:c7:e0:e9:
09:02:bb:38:d1:3a:6c:fa:21:a4:c9:86:37:e0:cf:9a:dd:2f:
54:b1:cb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:03:03 2026 by rpki-client