Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
File: U_rXyaSF_rKReT654tuY9BjlxLg.mft (raw, json)
Hash identifier: XdmW1oFJT+tQJ3+3w0JQYsfdad5HELZcnWBhZ9m+bU8=
Subject key identifier: 7F:5B:0E:72:24:CA:74:F2:F0:1B:27:BC:0F:4C:E7:6F:39:94:6D:04
Authority key identifier: 53:FA:D7:C9:A4:85:FE:B2:91:79:3E:B9:E2:DB:98:F4:18:E5:C4:B8
Certificate issuer: /CN=53fad7c9a485feb291793eb9e2db98f418e5c4b8
Certificate serial: 01A040BC5B43E068CCB5F272D4A2FE8C7E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
Manifest number: 0326
Signing time: Thu 27 Aug 2026 01:01:20 +0000
Manifest this update: Thu 27 Aug 2026 01:01:20 +0000
Manifest next update: Fri 28 Aug 2026 01:01:20 +0000
Files and hashes: 1: U_rXyaSF_rKReT654tuY9BjlxLg.crl (hash: jJsnuRqKVMyX8qM15+EKlfGx9KRDGET0hmalQFfly0s=)
2: Yg4X9H4DWGGKD8H5YRPUUkoYlHw.roa (hash: 9JB+Ut5rRiBxCY40cvzaauAZdMWzFKX4dxG7GlKOoZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:bc:5b:43:e0:68:cc:b5:f2:72:d4:a2:fe:8c:7e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53fad7c9a485feb291793eb9e2db98f418e5c4b8
Validity
Not Before: Aug 27 01:01:20 2026 GMT
Not After : Aug 28 01:01:20 2026 GMT
Subject: CN=7f5b0e7224ca74f2f01b27bc0f4ce76f39946d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ce:a3:6e:dd:73:50:52:1b:1d:e4:e9:59:83:
e6:39:6e:bc:ef:56:f8:d2:55:77:d5:e8:58:5b:ad:
06:ef:9e:0a:0f:51:ef:31:b4:fc:65:b6:0a:e8:a8:
87:09:c7:8b:29:0a:96:df:33:f4:5d:1e:c0:51:cb:
87:5b:52:8a:47:9d:c0:ce:5b:84:12:43:de:4d:dc:
e9:cb:ac:24:ca:44:a0:89:46:38:cf:85:2f:70:4b:
06:b0:5b:bb:39:79:66:87:35:7d:df:03:ff:f9:a8:
69:a6:f1:a5:7d:75:2a:13:dd:03:a0:a0:41:d2:8c:
dd:cc:33:aa:89:3a:0c:4a:42:c7:d2:40:e1:36:4b:
0c:7a:30:96:9e:82:fd:12:1a:62:cf:87:44:7a:ab:
0d:64:3e:ed:b2:bd:12:52:91:dd:ff:08:cd:d6:43:
0f:0d:e9:f5:25:b1:26:3b:7a:23:9b:66:5f:2b:a8:
3a:88:e6:90:42:d6:24:6c:02:d8:9f:b3:f7:a4:46:
cb:de:d0:57:48:29:aa:da:d1:c8:e1:35:e4:5e:53:
f8:7f:15:b1:e4:a7:79:a0:f2:b5:40:7c:06:d1:8f:
7a:01:d9:0d:ae:e7:90:16:1e:8c:8d:5a:82:c5:b4:
bb:6e:78:2f:42:86:bd:86:58:42:1c:4b:fa:c8:bc:
6b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5B:0E:72:24:CA:74:F2:F0:1B:27:BC:0F:4C:E7:6F:39:94:6D:04
X509v3 Authority Key Identifier:
keyid:53:FA:D7:C9:A4:85:FE:B2:91:79:3E:B9:E2:DB:98:F4:18:E5:C4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4b:0d:ae:56:f6:42:30:b5:77:7c:65:8a:21:cb:5b:cb:d0:
c5:f5:4b:07:a1:c4:f9:0c:c3:3e:00:f2:00:0f:ec:c9:af:4b:
84:a9:ce:70:99:96:ca:48:00:75:45:0f:09:f2:4f:c9:cd:bb:
9e:49:20:a1:fa:ad:1d:39:2c:6e:80:16:6a:0a:1a:86:a8:9d:
3b:0a:c6:13:4a:3e:32:0d:0f:8f:f2:70:b2:fe:29:5b:9e:2e:
8e:b3:00:b3:13:5b:9a:91:a4:9e:5a:e1:bf:35:33:bd:a1:f2:
94:e2:38:f2:aa:e2:66:73:a1:95:36:ae:53:e9:d3:2e:13:60:
98:63:a4:6b:07:19:21:f4:4b:89:65:26:85:0a:cd:6b:df:1e:
50:8e:f9:83:3a:31:11:04:5c:a8:7c:c8:27:a4:5a:b2:13:0f:
19:6c:0d:65:62:cb:a0:c1:4f:4d:97:f0:ae:85:fb:02:a8:0d:
69:28:f6:be:f7:2d:97:56:5f:d5:c4:e3:e5:b2:c7:7a:7d:d0:
a5:06:45:01:73:e7:aa:ef:28:81:1f:81:2d:1c:43:e5:f7:94:
c2:3e:9a:10:bc:7a:9a:2a:4a:04:b6:cb:1a:c1:06:a7:21:b4:
cb:34:a0:82:74:41:18:ab:6d:91:04:6e:a2:1d:d7:67:21:a7:
35:76:6c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:52:41 2026 by rpki-client