Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
File: U8kSoEEbsBdFBwktDKNaka15kFw.mft (raw, json)
Hash identifier: m1jei7bLkJQMkKUXmOq7eDhDblEL4M61gNAX/Ct6POc=
Subject key identifier: 59:EA:11:D2:1D:84:2A:BC:52:33:45:25:4E:65:52:A6:AC:70:2C:9E
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Certificate issuer: /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial: 019CA97D86E066B273CDAB48707FF59BCE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
Manifest number: 184C
Signing time: Sun 01 Mar 2026 13:01:41 +0000
Manifest this update: Sun 01 Mar 2026 13:01:41 +0000
Manifest next update: Mon 02 Mar 2026 13:01:41 +0000
Files and hashes: 1: 92JgNy2UniVvWNA6kvsz4sovFIA.roa (hash: lAqICp0tk9GujbZHx2/6RHqqJpx7oSWIDsAW5NqmUFs=)
2: Jgm412TDqz8eqc-jU7VKAy0ZDsw.roa (hash: z/uYXvq2xIRczyrsXkqCGG5d8yfec3+FGNIntpcNWWU=)
3: U8kSoEEbsBdFBwktDKNaka15kFw.crl (hash: o0/4tmxNbe4MsgHI79wjRuMKqt+RRYhueun4yXNKd2Y=)
4: ot9zGZ8lqbZQsxEaVPvTfXs9gBQ.roa (hash: Kks4PvcwFRu/9gLcNOW/VSN4jNFuv/TAckUM8Z6fniM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:86:e0:66:b2:73:cd:ab:48:70:7f:f5:9b:ce:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
Validity
Not Before: Mar 1 13:01:41 2026 GMT
Not After : Mar 2 13:01:41 2026 GMT
Subject: CN=59ea11d21d842abc523345254e6552a6ac702c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bc:e1:4e:1c:20:54:f7:fd:61:5c:d7:8b:10:
70:99:b9:f9:4d:a9:92:80:a8:5c:cd:c4:82:a5:a1:
de:bb:d4:f9:01:d6:7a:db:b6:e2:7b:64:ff:7f:8a:
bb:0b:db:8b:91:99:71:9a:02:f2:d1:51:51:38:5d:
6f:2b:ad:87:d6:5a:e9:43:6d:cf:24:1a:b9:0f:40:
96:2c:5c:81:ba:e2:ca:f6:78:5e:8d:cd:5b:84:86:
38:c6:81:0e:ec:9a:67:e0:a3:1f:97:8d:80:15:73:
ad:bb:7a:08:d5:36:65:36:1e:c6:09:d4:d0:45:4d:
2a:56:11:17:46:9a:69:09:d9:4b:8e:3d:2c:f1:99:
71:da:1c:a6:54:37:bf:e2:02:aa:1f:da:6c:94:3d:
d7:d0:3f:12:9e:cf:40:23:e2:ea:34:b0:91:df:79:
a9:bb:3f:71:60:a8:dd:64:76:ce:d6:52:cd:30:8e:
f0:15:03:3c:d4:09:2f:55:b5:b7:4d:ab:95:de:dc:
c6:5e:79:a1:42:7a:55:f9:2b:46:93:5b:ac:54:bc:
b6:53:fd:6a:df:00:e0:e4:35:86:fb:30:55:20:5b:
17:55:5c:bf:01:ef:29:c3:45:53:f9:89:8a:5f:1d:
b2:b0:8c:50:da:92:ca:af:4b:fb:87:0f:6f:3b:72:
32:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EA:11:D2:1D:84:2A:BC:52:33:45:25:4E:65:52:A6:AC:70:2C:9E
X509v3 Authority Key Identifier:
keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:30:25:04:4f:91:47:a0:05:fc:14:b8:75:26:02:83:9f:37:
51:d5:70:77:02:e2:af:4a:ea:a3:e0:ad:60:be:c4:6f:a7:f8:
a9:64:1a:f7:a3:c3:f3:2f:95:88:4e:c3:8a:3e:f7:91:5f:6a:
cf:40:19:15:56:ee:14:bc:fc:44:27:5f:76:ca:01:e3:bd:44:
07:ce:bb:c8:35:95:9f:bf:78:68:f7:c1:a7:9c:d7:20:88:11:
ed:fe:9f:74:6f:07:fc:ef:a0:9d:54:2e:2b:ee:38:e8:9b:fa:
56:67:ac:e9:44:c5:60:71:b5:b9:7a:eb:77:93:81:a6:b5:a1:
4f:f7:ac:ba:6f:a9:31:87:a4:23:d3:1a:19:00:5c:38:4a:10:
b4:65:cf:04:94:cf:d9:ac:50:43:73:b3:ef:b9:47:86:50:60:
cf:f8:e6:0e:18:e1:df:a8:01:b5:3c:7d:97:a1:8f:ce:c6:c9:
1b:c3:6a:ea:e3:ac:c2:64:a0:a3:97:75:e9:79:45:0e:6a:4f:
97:cf:c3:16:43:e3:fa:50:26:31:f8:9b:9b:4e:e4:9f:d3:14:
b9:70:5f:69:2e:c9:e8:2b:30:39:85:d7:9f:38:6a:e7:86:81:
23:4d:a1:59:c3:78:9d:b2:b4:2d:4e:1a:db:4d:63:be:ef:a7:
b2:4e:4d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:46 2026 by rpki-client