Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
File: U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json)
Hash identifier: AU3pve8JlthEWaRNiYdhc2J/hDm6lzMmnWqiX5nZBvM=
Subject key identifier: D6:FB:CD:56:BF:B6:BA:35:6E:BE:9E:F7:D6:A2:E0:02:7E:B1:09:24
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial: 01A1818740D88B6D4F88850382C7CA28687D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
Manifest number: 1185
Signing time: Wed 28 Oct 2026 08:01:27 +0000
Manifest this update: Wed 28 Oct 2026 08:01:27 +0000
Manifest next update: Thu 29 Oct 2026 08:01:27 +0000
Files and hashes: 1: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: oTOS+PncZasgt8fqJWqqo1RgNZWM6Q6FU4L5nWka9iI=)
2: WzohaVzPLEBKuPQD-sbPCaZXcnQ.roa (hash: SIJFdx4blAk5vec/FV7gfH5KB998Y+98D4gZTEETEKk=)
3: nM6XYB2iwgJ17oTR8XmeIg2xI2M.roa (hash: 1o7tQyZeZiqzL+ktcifE7MOOMo51KCeyAAEwmbZDyZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:87:40:d8:8b:6d:4f:88:85:03:82:c7:ca:28:68:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Validity
Not Before: Oct 28 08:01:27 2026 GMT
Not After : Oct 29 08:01:27 2026 GMT
Subject: CN=d6fbcd56bfb6ba356ebe9ef7d6a2e0027eb10924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6f:54:53:a4:43:1b:e7:aa:4f:b2:c6:79:6b:
b5:15:5c:69:ea:0a:98:36:4f:9a:d7:78:26:e4:99:
cd:4b:c9:d6:c7:f4:5a:38:99:3a:05:6c:b4:59:c0:
ec:cc:73:9f:61:b6:c3:4f:c5:16:cc:9c:b7:ea:0b:
8e:18:ad:f3:6c:03:00:84:60:7b:e6:ac:b2:dc:b2:
f3:1c:ba:82:71:7e:06:7f:04:fc:fb:aa:d7:ba:dc:
ea:4c:e1:56:95:0e:35:ac:3a:bc:27:fc:31:d4:ad:
71:03:10:1b:13:f0:9a:8d:fc:aa:b0:13:ae:b2:28:
92:77:fd:90:14:2b:5b:f2:07:e5:7e:83:eb:e5:c6:
b1:d8:9d:0b:6c:cc:bb:08:cf:c7:47:99:12:2f:6f:
c5:37:96:c4:4f:d6:18:d7:10:49:d8:ee:8c:85:fd:
b0:76:8e:ea:af:31:13:8d:b8:86:6c:96:b5:a9:d4:
06:0b:f0:9b:47:b9:92:b3:08:2d:1a:b8:45:e4:d3:
c3:1c:de:12:81:ee:79:3a:39:68:74:ba:f9:96:a1:
d5:49:84:a2:60:4e:fd:5d:e7:15:32:b4:76:df:40:
d4:70:45:c9:a5:8b:2f:6b:fe:43:a7:91:0e:ed:4a:
30:8c:0b:91:8e:dc:ff:3b:6c:ae:b0:62:f7:90:6e:
d3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FB:CD:56:BF:B6:BA:35:6E:BE:9E:F7:D6:A2:E0:02:7E:B1:09:24
X509v3 Authority Key Identifier:
keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:cc:41:03:11:96:7d:98:9e:b3:c0:84:27:1a:b9:24:d1:c3:
8a:11:18:ff:bd:ae:f3:c5:62:8b:e6:03:d0:f6:89:ac:21:7d:
31:8b:b0:1c:28:2b:28:0c:cc:9b:15:c1:54:42:a7:17:e2:c0:
21:62:c8:1c:c5:bd:38:e6:91:40:3a:e2:7a:ad:fd:2c:0c:5f:
92:67:70:78:0c:9e:a9:9f:cc:16:14:89:b9:84:38:b2:55:36:
95:ff:c3:0c:db:32:46:19:66:fa:c6:8f:d9:52:50:3f:f5:bc:
70:77:0b:cb:e0:72:e0:49:f2:d0:8e:45:ce:b1:c2:cf:c5:a3:
8d:99:d8:1e:a8:93:a4:3e:10:e7:82:6e:9e:c3:56:24:b1:9e:
34:6c:30:d4:d9:23:fe:bc:5e:18:3a:cd:97:ca:6a:63:1d:13:
94:63:58:13:f6:bb:95:48:f4:49:7b:11:93:f6:ce:39:d3:f8:
74:fc:15:23:2d:a5:3d:89:25:17:c9:7f:64:cf:2f:79:3d:e5:
d7:5f:17:de:34:4a:40:9d:3b:32:2e:5f:f3:92:19:db:04:e9:
d6:17:4a:7c:a4:b8:c4:a3:be:36:4d:0e:6c:5e:aa:14:e0:1a:
02:b5:18:ac:69:ca:80:3a:bc:f6:d0:b9:76:94:32:0a:c4:57:
20:ae:52:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:38:00 2026 by rpki-client