Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
File: U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json)
Hash identifier: gVnvAxmEH4DXocUgM8eAorV7JQb+sr2mc9R25tug4bs=
Subject key identifier: 3C:CE:CC:CC:F7:63:1B:D6:09:A1:6B:7D:97:3E:68:F1:82:DE:68:86
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial: 019EB8EA534FD6772AB1B7889F8F76581DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
Manifest number: 1014
Signing time: Thu 11 Jun 2026 23:00:24 +0000
Manifest this update: Thu 11 Jun 2026 23:00:24 +0000
Manifest next update: Fri 12 Jun 2026 23:00:24 +0000
Files and hashes: 1: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: ZWZx/FETyBf4OVUt2XwTHsMRruEC5HAeokXM7jDq+h0=)
2: WzohaVzPLEBKuPQD-sbPCaZXcnQ.roa (hash: SIJFdx4blAk5vec/FV7gfH5KB998Y+98D4gZTEETEKk=)
3: nM6XYB2iwgJ17oTR8XmeIg2xI2M.roa (hash: 1o7tQyZeZiqzL+ktcifE7MOOMo51KCeyAAEwmbZDyZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:53:4f:d6:77:2a:b1:b7:88:9f:8f:76:58:1d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Validity
Not Before: Jun 11 23:00:24 2026 GMT
Not After : Jun 12 23:00:24 2026 GMT
Subject: CN=3cceccccf7631bd609a16b7d973e68f182de6886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:9a:1e:62:82:b5:f7:08:57:68:66:2e:d6:57:
ae:d0:69:99:c3:e2:54:51:a7:be:35:f3:7d:bf:34:
ad:32:b8:80:68:09:f7:e0:61:73:52:47:83:a2:06:
7b:eb:51:65:8b:ea:48:4c:05:95:62:e4:78:f9:dd:
c1:5d:e7:37:fc:cd:6e:4b:d1:26:ab:59:be:c4:32:
58:54:be:5c:50:e5:39:69:78:d2:4d:17:36:39:9a:
84:b7:8c:17:6d:98:7b:2c:83:ef:08:65:55:f0:16:
4e:a0:ab:22:9f:58:3b:72:86:41:f7:aa:fc:d4:e4:
14:95:31:45:59:66:6f:4b:d0:27:d3:af:ba:0f:19:
6b:3b:3d:45:eb:81:3e:f6:20:d7:89:22:2f:11:46:
bf:c4:4f:6b:d4:ea:91:d6:1c:75:dd:f9:c4:0b:90:
3a:2c:a5:85:54:9d:6f:a9:ef:5e:fd:6e:90:bf:8a:
c9:ea:5f:30:ce:9c:44:44:d0:c6:95:9d:ce:2f:06:
3a:04:3b:c1:e8:4e:04:95:d6:ac:ba:35:2b:2b:73:
48:51:41:a1:ce:28:70:cf:87:d0:0b:64:07:12:f1:
10:05:0e:f6:71:10:0d:d0:20:4b:42:29:72:02:65:
8f:1f:25:a6:38:83:f9:00:6c:66:6f:bd:16:c4:6a:
4f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CE:CC:CC:F7:63:1B:D6:09:A1:6B:7D:97:3E:68:F1:82:DE:68:86
X509v3 Authority Key Identifier:
keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c2:52:a5:80:54:cb:91:a4:26:c4:40:fc:af:17:74:6e:0d:
c3:71:b9:80:f2:b5:db:10:4f:b4:1a:01:af:ac:d3:a5:73:22:
e9:fa:8b:a1:ca:d4:6e:83:76:f8:a1:cc:1e:a5:44:9f:72:9d:
32:ae:4f:19:b8:67:fe:d7:a3:27:25:ab:ae:25:05:2b:d3:0f:
ed:51:09:a0:aa:cb:c4:6b:82:95:f8:14:8c:4f:4c:ac:c1:74:
a6:3e:8e:84:16:8e:a2:35:95:f8:98:86:31:46:22:0d:42:78:
b0:fe:7b:64:e6:33:eb:e3:af:c9:aa:0d:f8:7c:47:31:f1:5e:
f2:d6:92:97:15:aa:fa:7c:5b:c4:b1:f4:64:e0:a0:62:a0:00:
29:da:c0:4f:7e:e2:6a:23:46:1e:97:28:63:a7:fb:51:83:4a:
56:7b:f1:58:d7:da:75:0c:db:e6:79:a7:2f:ab:b1:9f:e9:4b:
ce:c4:97:5e:91:32:25:c2:60:af:01:32:ba:fb:c4:18:2e:b4:
bf:cd:bc:f7:cc:07:f3:0c:13:79:63:bd:38:47:aa:ed:0c:9b:
1e:1e:6a:66:09:f4:b0:4d:f6:7b:cc:86:ca:0a:af:37:33:f0:
52:29:1a:f3:55:fe:0d:de:a3:e7:48:b9:eb:54:d1:7a:13:f3:
9a:ba:77:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:23:38 2026 by rpki-client