Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
File: U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json)
Hash identifier: EU4jk251XUnATDU6xjjmlWKCZvwOg+9ItFJhHkoYaQk=
Subject key identifier: 59:1B:67:CD:16:D4:B8:83:27:09:E5:00:10:40:1E:8C:57:32:E9:1B
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial: 019D389C4AEB29B5644D65698592E528A584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
Manifest number: 0F4D
Signing time: Sun 29 Mar 2026 08:00:59 +0000
Manifest this update: Sun 29 Mar 2026 08:00:59 +0000
Manifest next update: Mon 30 Mar 2026 08:00:59 +0000
Files and hashes: 1: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: bGJBsXO97IAn/eyi0r1NmHBCDtO2AMK5cEA7WjVVCYE=)
2: WzohaVzPLEBKuPQD-sbPCaZXcnQ.roa (hash: SIJFdx4blAk5vec/FV7gfH5KB998Y+98D4gZTEETEKk=)
3: nM6XYB2iwgJ17oTR8XmeIg2xI2M.roa (hash: 1o7tQyZeZiqzL+ktcifE7MOOMo51KCeyAAEwmbZDyZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:4a:eb:29:b5:64:4d:65:69:85:92:e5:28:a5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Validity
Not Before: Mar 29 08:00:59 2026 GMT
Not After : Mar 30 08:00:59 2026 GMT
Subject: CN=591b67cd16d4b8832709e50010401e8c5732e91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c6:9d:fb:51:8a:5a:0a:6f:33:65:f0:6a:a6:
94:d2:d9:05:59:84:b6:71:6a:28:da:84:6d:7c:d5:
bd:0a:9e:47:9e:f7:7f:45:35:bd:90:f3:43:06:65:
23:10:bc:c5:c0:cf:67:4d:33:e2:ee:b7:dd:37:5a:
a7:be:db:fe:ce:d6:76:80:f2:1a:6f:11:8d:13:7e:
82:a3:1b:59:e6:fe:1c:46:0f:aa:a3:c8:35:72:07:
c8:60:bf:49:44:35:f7:80:fd:88:ab:4b:01:a1:2a:
90:b0:36:23:96:05:d0:d4:72:0f:11:7f:59:ed:90:
a0:4c:b3:0c:89:c2:05:50:36:03:ec:ee:7e:6e:82:
de:57:b3:63:16:be:a7:4c:95:b8:ca:8e:fc:c9:e1:
22:56:09:42:44:90:ea:26:42:e3:3d:d7:3e:02:b9:
83:24:51:04:bf:07:dc:5b:db:52:71:fc:97:d9:aa:
39:da:db:e1:59:08:89:95:79:22:5a:73:d6:f2:e6:
f3:d3:51:13:54:6e:d8:f9:b6:5d:ea:62:09:82:72:
5d:e9:b1:e2:b2:15:65:c4:33:1c:16:bb:a4:68:28:
dc:94:3f:6c:e9:12:8d:02:35:a3:59:42:8f:97:4f:
5a:fb:c5:2b:5d:f3:85:f1:b5:34:14:b2:66:59:a0:
47:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1B:67:CD:16:D4:B8:83:27:09:E5:00:10:40:1E:8C:57:32:E9:1B
X509v3 Authority Key Identifier:
keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:82:e1:4d:0e:dd:3b:3c:d6:5d:fa:21:d6:4e:e1:f7:9d:ac:
be:2b:0b:d6:26:93:ae:20:19:a6:98:a6:7e:02:f9:8d:a7:37:
b4:58:9c:76:7b:7b:8d:e9:79:1a:96:37:f0:c0:07:56:af:d6:
df:ea:d5:1e:00:39:35:04:0d:53:7a:5f:49:2e:7e:7e:6d:98:
9d:a7:77:3c:28:31:d0:8c:7d:a9:74:e1:9f:aa:45:4c:f1:ce:
0a:e7:a2:16:56:1d:1a:42:15:f7:2b:3f:3e:7d:db:d8:1b:cc:
1a:7e:c8:37:1c:0d:a1:ab:b5:75:6b:dc:dc:c0:2b:69:9e:cd:
52:06:0f:a9:12:38:68:e1:d6:b3:8c:83:5f:89:bb:53:71:c0:
aa:52:02:f2:9f:63:77:e2:b3:84:98:35:95:4c:7a:ae:05:10:
49:38:f5:f2:6f:bb:99:96:36:f7:86:9d:3f:a3:bc:2f:f1:2c:
16:1f:6f:ed:bd:9e:7e:20:7c:72:9a:e1:b5:e2:88:93:98:6f:
af:53:09:6e:83:fb:f8:e6:c6:17:8f:73:e2:8b:52:12:b3:24:
e5:e8:b5:4e:3c:5c:d4:50:dc:67:0a:14:cc:90:7b:19:be:09:
b0:83:84:05:df:3e:7f:97:b9:de:ad:56:76:9f:90:ca:d4:1f:
ca:e2:ef:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:00 2026 by rpki-client