Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
File: U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json)
Hash identifier: vWQusrwyBzh3uUqgXUlm5Ul9IWMj6H+JT+X6Ho2RPio=
Subject key identifier: 21:AD:B9:F3:FB:F4:21:45:66:58:36:3E:34:A3:F1:BF:2A:19:BE:4B
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial: 01A08A558F117A40F902F95B5C9FE6FB4A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
Manifest number: 1105
Signing time: Thu 10 Sep 2026 08:00:57 +0000
Manifest this update: Thu 10 Sep 2026 08:00:57 +0000
Manifest next update: Fri 11 Sep 2026 08:00:57 +0000
Files and hashes: 1: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: GjRiwpGqEg6iF145FGAb9CQv/yDS/6ITuZw+uTWw/A0=)
2: WzohaVzPLEBKuPQD-sbPCaZXcnQ.roa (hash: SIJFdx4blAk5vec/FV7gfH5KB998Y+98D4gZTEETEKk=)
3: nM6XYB2iwgJ17oTR8XmeIg2xI2M.roa (hash: 1o7tQyZeZiqzL+ktcifE7MOOMo51KCeyAAEwmbZDyZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:8f:11:7a:40:f9:02:f9:5b:5c:9f:e6:fb:4a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Validity
Not Before: Sep 10 08:00:57 2026 GMT
Not After : Sep 11 08:00:57 2026 GMT
Subject: CN=21adb9f3fbf421456658363e34a3f1bf2a19be4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c5:4d:e8:be:b4:d0:12:19:fd:5d:c9:06:8c:
52:9f:cd:96:63:f6:fc:5b:e5:de:4d:f1:df:9c:48:
be:75:01:27:42:49:3a:d3:62:c4:eb:1c:d0:25:be:
6b:93:10:fc:11:fe:36:08:45:c0:eb:e3:ca:c4:f5:
cb:7b:b1:ac:8e:28:d3:c5:db:02:d2:b1:3f:2e:16:
57:0f:be:30:fd:e2:83:94:05:c1:95:f5:60:f4:18:
57:e7:16:1c:a9:de:48:fe:cd:82:d1:38:e2:c0:21:
7c:1d:b8:7b:d3:8b:b6:57:f9:7a:70:bc:13:f7:b0:
bc:6d:a1:75:eb:fa:af:33:da:4e:5b:be:0d:9c:ff:
70:a6:26:04:eb:61:72:70:de:26:c0:3e:1e:42:df:
4b:9c:9f:35:8f:96:43:47:68:46:cb:f6:65:2d:e4:
db:10:c0:2b:e4:e5:43:45:26:36:d3:6c:57:bb:c6:
19:05:b4:06:8a:3b:c1:fd:c9:7c:69:fe:ee:43:d0:
3d:cf:97:6c:1d:f1:f7:a4:59:32:70:99:5c:92:f9:
bf:6c:f0:3e:41:db:a5:1c:bf:a7:c8:ea:78:c0:e7:
14:ff:ef:8f:ab:db:4b:ec:b1:fa:ee:5c:f7:78:74:
1b:7d:b7:5d:fa:2d:59:37:84:cc:f7:1c:c7:bd:f4:
c2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AD:B9:F3:FB:F4:21:45:66:58:36:3E:34:A3:F1:BF:2A:19:BE:4B
X509v3 Authority Key Identifier:
keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:bf:c5:87:01:7d:e8:69:9e:3d:7d:90:f0:17:e5:84:0b:03:
71:c3:71:7a:bd:dc:a8:fb:43:e3:6e:ae:50:ac:b6:9b:bc:98:
be:fd:c6:37:1e:34:9f:b6:c7:88:01:dc:5f:d8:4d:9a:06:db:
ec:4d:f3:51:43:2e:90:de:75:fd:f5:20:23:cf:57:3f:fe:a0:
e3:e1:54:92:8d:6a:78:1b:13:85:54:34:ca:1b:2b:8d:2f:de:
c1:87:f9:40:aa:fc:aa:9a:ef:d5:3b:77:5a:f6:57:dc:b3:35:
cf:5b:d5:43:fc:d6:d6:8d:cf:7c:36:94:da:7c:6f:51:fc:24:
f9:7d:fa:0e:6c:07:25:4b:f1:f7:78:5a:0a:92:6f:fb:37:a4:
3e:49:06:6b:58:e4:10:a7:5d:3d:36:ce:93:9b:bf:73:e7:4d:
12:72:9f:a4:aa:ed:7e:db:3b:e7:ca:27:ec:71:e9:62:ba:db:
d0:5b:c2:27:a1:52:65:78:10:83:09:63:42:12:44:19:97:72:
5c:3e:bf:cc:4d:89:a2:a5:fd:44:35:89:f5:5d:f2:c6:61:8b:
50:bd:12:3b:9b:38:1a:5a:28:b0:f5:c6:d1:07:06:82:a7:83:
a7:da:04:ac:8d:b7:67:81:42:94:4f:67:1b:66:53:db:79:2b:
09:03:a6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:34:22 2026 by rpki-client