Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
File: U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json)
Hash identifier: L+x0r6iyDssB6r1HoZD9kq9Lt+xw+DoF9PqTr16c0Mg=
Subject key identifier: 16:62:1C:7E:14:8A:57:25:1C:81:DB:5D:C0:A9:8E:32:D9:03:B2:FB
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial: 019FA29709197C9D7B21D434DAA7EB87BCB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
Manifest number: 108D
Signing time: Mon 27 Jul 2026 08:00:34 +0000
Manifest this update: Mon 27 Jul 2026 08:00:34 +0000
Manifest next update: Tue 28 Jul 2026 08:00:34 +0000
Files and hashes: 1: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: +RXKD02BipdbiCQLi+mbEBjDzkSF/eWSG5xHE8IQfwo=)
2: WzohaVzPLEBKuPQD-sbPCaZXcnQ.roa (hash: SIJFdx4blAk5vec/FV7gfH5KB998Y+98D4gZTEETEKk=)
3: nM6XYB2iwgJ17oTR8XmeIg2xI2M.roa (hash: 1o7tQyZeZiqzL+ktcifE7MOOMo51KCeyAAEwmbZDyZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:09:19:7c:9d:7b:21:d4:34:da:a7:eb:87:bc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Validity
Not Before: Jul 27 08:00:34 2026 GMT
Not After : Jul 28 08:00:34 2026 GMT
Subject: CN=16621c7e148a57251c81db5dc0a98e32d903b2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5a:ab:6e:b9:45:38:30:ab:59:fa:61:93:03:
65:26:4f:1a:a0:3f:fc:10:66:fd:64:8d:f6:c7:58:
b4:ee:4e:30:c5:58:e5:34:a8:d3:63:40:f9:b6:81:
7c:3e:cf:53:19:66:c2:f4:2b:5c:0d:52:ac:ea:ce:
ac:7c:bc:aa:fd:31:d5:45:a2:81:b8:ca:95:34:13:
85:67:4f:20:75:96:bd:51:8d:ab:7a:bf:df:47:d2:
6d:4c:1f:db:46:15:6c:4e:e6:9d:e4:3f:5f:01:e9:
31:20:e5:19:81:b2:46:db:3b:b8:d8:f3:46:a6:10:
59:bb:50:f8:aa:ed:9f:e4:48:16:f4:b9:c6:59:a3:
84:f0:0d:17:f2:84:05:21:a6:57:7c:02:ac:91:ce:
57:29:92:f0:27:ca:0e:69:4a:74:7d:36:26:2e:d9:
0e:02:18:8f:75:cf:b9:07:ac:4c:8e:8c:25:22:95:
80:85:61:20:98:d0:e9:46:11:3f:6e:62:47:99:e4:
ca:c0:93:9e:36:f7:5b:57:ef:e5:d8:b1:9c:28:8f:
1d:d1:47:17:ef:b5:90:42:ec:32:66:a5:fe:d4:b4:
2c:ff:15:53:e2:33:c0:89:12:cf:86:d7:6e:e6:f9:
ff:47:dc:c5:f1:31:d3:94:49:8b:f2:37:12:45:7a:
62:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:62:1C:7E:14:8A:57:25:1C:81:DB:5D:C0:A9:8E:32:D9:03:B2:FB
X509v3 Authority Key Identifier:
keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8e:96:20:c2:e1:e3:53:e7:19:da:4e:fc:e5:6e:c0:ae:28:
7d:f8:0c:ed:3b:38:4b:77:2d:46:70:0c:5c:ac:79:6f:33:39:
a7:7e:ac:6e:e8:4c:78:b8:15:9e:40:f3:c9:7e:ae:21:e3:58:
62:f6:12:55:5e:98:e5:b0:0e:20:fc:50:ac:89:3f:dd:79:f9:
99:c4:e8:0f:49:f2:35:d6:fb:d5:08:b8:27:05:e1:93:06:0e:
58:2b:8d:7b:2e:3c:e6:dd:1e:bc:d3:0f:54:64:93:23:6c:28:
0c:ef:14:48:09:74:13:31:84:8f:8e:5e:ca:81:6d:40:a1:4c:
59:ff:dc:e0:8d:8f:78:5d:d0:32:61:0c:e4:55:f2:a9:9b:7a:
45:ac:9b:52:51:d1:ee:dd:4d:e0:7d:c7:57:4c:80:f8:12:11:
68:30:8c:86:2d:b0:e5:eb:17:e6:50:ff:b1:bb:c9:a7:3a:cb:
9c:2f:f0:99:b6:c3:ca:41:49:9a:ab:44:a3:69:7f:88:8b:75:
9e:58:88:6d:33:63:bf:8a:23:3a:4b:db:ea:af:d7:89:92:f2:
37:19:59:f6:99:04:89:70:02:57:e9:8a:44:8a:c7:e6:c5:69:
ae:a1:63:18:0d:98:dd:f5:7c:99:1c:d2:1b:ef:da:24:d0:88:
30:5e:27:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:28:51 2026 by rpki-client