Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
File: U8kSoEEbsBdFBwktDKNaka15kFw.mft (raw, json)
Hash identifier: ZMFBBODI1Gr+3kRt0OJgb/Ei2bf6c36Y+r/hem1I6Ag=
Subject key identifier: DA:A9:FA:89:B4:AE:0D:3F:3B:77:23:5E:2C:38:85:46:47:E6:5B:B6
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Certificate issuer: /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial: 019FAA505F3F830D8263A4BF22287FEC2AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
Manifest number: 19DC
Signing time: Tue 28 Jul 2026 20:00:21 +0000
Manifest this update: Tue 28 Jul 2026 20:00:21 +0000
Manifest next update: Wed 29 Jul 2026 20:00:21 +0000
Files and hashes: 1: 92JgNy2UniVvWNA6kvsz4sovFIA.roa (hash: lAqICp0tk9GujbZHx2/6RHqqJpx7oSWIDsAW5NqmUFs=)
2: CRXS8yJabkFe9zngcADmlt5Mjh8.roa (hash: V+gmBDqtYsm9sl2kIiueYpvE2PqUIfwWQ+IMlLrBBzI=)
3: Jgm412TDqz8eqc-jU7VKAy0ZDsw.roa (hash: z/uYXvq2xIRczyrsXkqCGG5d8yfec3+FGNIntpcNWWU=)
4: QbAALDYZ_RGHs07gYUQih_CDJyk.roa (hash: +Uv/ugRA2zDra5XT10jpvOYMi9ZmxhbMWKYPoPRN5bM=)
5: U8kSoEEbsBdFBwktDKNaka15kFw.crl (hash: BfHY29md/vh24uBFVU9n3CZPHmC3JQxE6FfTQrKViwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:5f:3f:83:0d:82:63:a4:bf:22:28:7f:ec:2a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
Validity
Not Before: Jul 28 20:00:21 2026 GMT
Not After : Jul 29 20:00:21 2026 GMT
Subject: CN=daa9fa89b4ae0d3f3b77235e2c38854647e65bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:75:d0:9d:c7:97:dc:da:c9:ca:13:c3:28:03:
f8:9a:2a:0b:c9:b2:b2:92:29:91:b2:56:f5:dd:59:
ad:ba:4c:13:47:84:12:5f:5b:cf:e1:e8:38:b3:5b:
9c:9e:8c:92:19:e2:ca:a0:1c:3e:01:e2:dc:27:59:
a8:69:c8:3c:40:a9:e6:bd:c6:cc:e4:26:cb:7b:d5:
1e:c6:c8:fb:41:ba:c3:3c:ce:42:d8:c1:f8:79:fc:
b3:59:44:a2:1f:dd:e3:9b:ba:ad:d2:08:14:69:1f:
dd:82:55:c4:32:78:63:b9:79:00:dd:ee:ce:0c:11:
60:a3:70:b7:b9:c7:c7:4e:9e:bb:0d:49:a8:d6:ce:
61:1d:28:b8:06:9a:cc:22:f4:fc:6a:ff:c1:29:77:
f0:47:0c:25:b6:9e:94:47:6c:50:1d:c7:36:0a:64:
38:87:b0:ae:ef:f9:65:40:17:aa:96:f9:65:52:0d:
6d:51:96:34:83:37:b1:7f:1d:b3:52:25:d5:56:c9:
10:16:93:53:84:ce:25:00:e6:86:01:ac:e0:6c:34:
51:a3:75:b6:e3:66:3a:58:a0:53:1f:ad:85:ab:4e:
43:cf:92:c8:0b:48:de:11:a5:57:3f:03:69:25:51:
4b:ee:82:54:40:89:df:d6:ab:4d:41:a7:74:ac:6d:
7a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A9:FA:89:B4:AE:0D:3F:3B:77:23:5E:2C:38:85:46:47:E6:5B:B6
X509v3 Authority Key Identifier:
keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a3:de:87:2f:3d:a2:cc:f7:62:e3:3f:1d:48:0e:ea:47:c2:
72:8d:30:cb:5b:63:b3:ae:4c:2c:6b:5a:f8:a7:5b:0e:9d:24:
63:d5:d2:45:b4:a1:9f:f0:a0:33:65:d9:f4:c1:6d:e0:1f:39:
04:cd:48:29:f8:9f:de:f7:23:1e:3b:e4:b1:a4:a0:8c:3d:d4:
7f:d8:74:d0:39:0c:69:f4:6e:3b:61:bd:87:8b:a9:27:47:ae:
50:36:e7:6a:2c:72:63:fa:48:c0:d9:31:82:96:e7:ab:8c:e2:
93:a3:48:fe:11:fc:5d:89:1e:ae:b2:63:2f:f9:b1:89:7c:4c:
e3:d8:2a:7f:a9:eb:33:31:81:e7:b1:31:84:3b:7b:48:38:2c:
a5:f6:f6:49:f1:01:5b:a6:c5:49:3e:b5:72:16:37:9a:51:a3:
0c:e5:12:48:a8:af:05:d7:b8:69:2b:99:f8:62:88:d0:fa:4e:
33:42:5f:eb:5f:01:da:6d:5f:25:04:f6:72:2e:d1:2e:6f:eb:
00:cd:f6:59:0f:7c:f3:58:d3:78:64:a9:50:8c:b6:fb:72:4f:
f4:a9:b7:c6:05:8b:02:68:f4:04:9a:81:b5:b8:90:2b:93:3a:
3a:c2:6b:df:f7:c5:c3:4e:c1:01:42:a6:f4:a5:e1:2b:5b:24:
71:e0:f3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:25:29 2026 by rpki-client