Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
File: U8kSoEEbsBdFBwktDKNaka15kFw.mft (raw, json)
Hash identifier: zNIxLNcOBo98nxBOlkngjaMpmgij0CB4rvTHbvZDQSs=
Subject key identifier: 3E:1E:9C:03:7D:46:D8:B1:0C:C4:EF:D8:45:27:82:82:4D:68:D6:47
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Certificate issuer: /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial: 019D98F5275F9DD7025C1D6527553F1CE962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 01:01:36 +0000
Manifest this update: Fri 17 Apr 2026 01:01:36 +0000
Manifest next update: Sat 18 Apr 2026 01:01:36 +0000
Files and hashes: 1: 92JgNy2UniVvWNA6kvsz4sovFIA.roa (hash: lAqICp0tk9GujbZHx2/6RHqqJpx7oSWIDsAW5NqmUFs=)
2: Jgm412TDqz8eqc-jU7VKAy0ZDsw.roa (hash: z/uYXvq2xIRczyrsXkqCGG5d8yfec3+FGNIntpcNWWU=)
3: U8kSoEEbsBdFBwktDKNaka15kFw.crl (hash: 2qG2vs19EC3GtMprDLJJGy8CeBCJRWdZ5DTfk4+Q6AE=)
4: ot9zGZ8lqbZQsxEaVPvTfXs9gBQ.roa (hash: Kks4PvcwFRu/9gLcNOW/VSN4jNFuv/TAckUM8Z6fniM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:27:5f:9d:d7:02:5c:1d:65:27:55:3f:1c:e9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
Validity
Not Before: Apr 17 01:01:36 2026 GMT
Not After : Apr 18 01:01:36 2026 GMT
Subject: CN=3e1e9c037d46d8b10cc4efd8452782824d68d647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:74:4e:a4:d5:7e:d1:b5:4d:33:70:3b:a0:
13:d0:10:a6:6c:8b:4c:05:3d:98:72:74:77:01:16:
2f:33:b6:73:eb:48:8a:d1:71:7b:56:fc:8c:cf:13:
e9:99:a6:de:56:f4:3d:24:ac:e1:3a:a2:93:30:e5:
f6:21:c4:70:8b:fc:c4:35:34:08:42:50:d4:c4:9d:
b9:a4:87:5a:7e:5f:84:5e:8f:0a:a3:fd:b8:2c:69:
f5:e0:97:a4:7d:11:57:c9:62:96:6f:b4:55:50:50:
de:c2:8a:62:70:d8:bc:8a:c6:58:bb:f0:b5:ec:b2:
c0:b8:35:96:6f:a5:af:f2:f2:4c:d8:9e:ec:3b:56:
a5:70:c6:09:7d:56:a6:fa:dc:c2:a7:2e:78:06:83:
58:12:bb:0a:7a:7d:38:24:45:dd:55:e0:7d:3e:d7:
eb:6d:c5:60:02:bb:69:a9:90:2b:3a:f3:e6:20:10:
d4:c4:25:74:46:14:a4:fd:75:27:2e:f2:df:2d:1f:
6e:62:2e:7f:d2:4f:c6:27:1d:19:a4:dc:ef:5d:c6:
74:9c:f9:53:a6:ea:5d:8a:63:2c:e2:44:50:ef:d9:
79:11:65:bb:89:69:fa:92:45:c7:ef:56:e5:7e:20:
95:45:55:02:ee:ac:d0:cb:c2:47:32:82:ce:b4:56:
3a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1E:9C:03:7D:46:D8:B1:0C:C4:EF:D8:45:27:82:82:4D:68:D6:47
X509v3 Authority Key Identifier:
keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:8f:fe:80:06:ae:bd:7e:23:2a:e2:c9:d4:dc:68:0e:9c:85:
c3:73:37:b7:1f:d0:65:42:c1:6a:2f:54:f7:93:4d:d5:e3:b7:
2a:94:c0:19:d7:cc:d9:73:d5:49:5f:52:d6:f9:33:3c:4c:29:
f1:aa:b2:4f:bc:ae:14:35:e7:cd:f3:fc:fa:6a:b6:f7:9f:4a:
af:f1:ea:ca:d5:18:6d:36:46:d8:a1:20:44:97:6d:e9:fe:97:
47:a4:24:f7:59:2b:1e:ce:44:6b:91:71:60:61:fb:c8:47:6a:
26:7e:a1:ab:7e:11:ad:07:1c:e6:21:86:69:21:ed:b9:f5:5a:
74:1e:2a:3f:df:89:e4:a5:e1:34:32:32:df:f7:8f:df:c3:30:
de:32:c6:94:da:d2:21:60:f0:77:5f:56:97:3b:43:de:5d:65:
c9:be:62:7d:d6:81:cb:c0:56:99:55:49:3e:54:d7:ae:76:e4:
d5:46:98:e1:be:e5:bd:37:a5:31:9b:43:b5:46:b0:1c:91:b8:
1d:46:6f:ce:ca:66:6c:10:d1:97:66:81:b4:94:2d:5d:00:02:
09:fb:f1:31:48:8f:9c:ec:f3:e8:0f:dc:c1:79:5d:22:a4:90:
61:7c:16:15:42:c2:d7:4d:b8:39:7e:c5:62:b2:f9:23:80:12:
d0:ef:77:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:30 2026 by rpki-client