Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
File: U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft (raw, json)
Hash identifier: MhxJzaGRdz+q6Tu9YPRRiDRyM1zBbjJk2iMxjzCSDO4=
Subject key identifier: 10:8C:CB:B0:AE:02:B9:72:9C:3E:35:5D:08:84:34:32:11:F0:11:8C
Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Certificate serial: 019EC4811F6D6391366A6F597EA2AAD4DCE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
Manifest number: 195A
Signing time: Sun 14 Jun 2026 05:00:56 +0000
Manifest this update: Sun 14 Jun 2026 05:00:56 +0000
Manifest next update: Mon 15 Jun 2026 05:00:56 +0000
Files and hashes: 1: 1-NYp-ANDJGWn2zBa6tZxxYGdDfA.roa (hash: ACBt4zT2KY2CKqY2w+FWy0192eghSargg1ySIXwb63Y=)
2: U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl (hash: hGdomlmW87aRErA/tuGDiAkGzkYzhA31l96eI4a2Dys=)
3: gGTUtih5jVa-QbWTlOxD1xFHxEM.roa (hash: V1056kAulKAWgU4sgdguF4s6mRxgfRsvQzLGzFRcugQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:81:1f:6d:63:91:36:6a:6f:59:7e:a2:aa:d4:dc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Validity
Not Before: Jun 14 05:00:56 2026 GMT
Not After : Jun 15 05:00:56 2026 GMT
Subject: CN=108ccbb0ae02b9729c3e355d0884343211f0118c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:68:03:1d:35:a1:84:50:fb:43:98:ec:01:bc:
f3:b0:00:56:9d:23:f4:ad:33:ff:71:7f:31:36:11:
a6:33:47:7d:b3:35:fb:18:1c:d0:7d:02:83:43:66:
31:99:43:88:01:53:96:3d:90:90:5f:19:52:50:e3:
02:2b:66:55:db:dc:0b:74:69:d3:02:06:ff:a9:59:
e5:30:c4:b4:84:6a:ad:4c:97:f3:d5:f1:f7:3b:7d:
c2:f3:86:41:38:b5:ee:bb:81:ec:2e:0a:f8:f6:b9:
82:9e:61:97:75:f1:70:9d:49:02:07:b3:79:ee:f3:
5f:c8:cd:ff:b4:de:0b:55:7f:3f:96:7f:9d:70:c6:
47:18:6d:a0:e8:b3:64:c8:c1:c9:20:4c:0c:8b:b9:
08:e5:f3:c2:be:01:85:03:9c:d1:25:d8:3e:93:db:
5e:97:0a:b5:1e:eb:70:cc:4f:2a:1a:fe:c9:a4:eb:
aa:91:ad:39:1c:ec:d8:e5:c9:a2:c7:7e:8b:c9:5c:
4a:ef:c2:e4:10:12:bb:f6:8b:56:c7:be:f5:16:ed:
ac:95:18:4c:db:39:6f:15:d5:bf:fc:86:ee:b0:da:
5d:91:f4:7d:62:80:f6:0c:7a:c3:7c:9c:2b:ad:d0:
88:3f:01:35:16:9a:41:39:e5:ad:c3:46:8b:7c:19:
86:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8C:CB:B0:AE:02:B9:72:9C:3E:35:5D:08:84:34:32:11:F0:11:8C
X509v3 Authority Key Identifier:
keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:df:9d:8e:0b:fa:4a:65:97:71:b9:40:d8:b0:78:6d:8d:15:
ee:69:e8:d4:f3:b5:3a:25:c6:37:ff:1d:de:e0:2d:c1:af:f2:
53:9e:da:e2:e2:af:5f:74:d1:cf:3b:fa:2c:34:3a:e6:32:c4:
d1:94:e4:67:92:a4:67:19:77:b6:5d:b6:60:3e:13:f7:d1:c9:
b5:d5:6a:59:b5:96:43:e9:a6:5e:4f:7f:60:f8:c1:ef:88:59:
a4:83:2b:91:e8:c0:52:ca:43:50:d2:1b:57:ab:1e:c6:2a:80:
cc:8e:3d:7b:13:7c:83:26:6b:a2:d3:a1:57:09:4c:d8:ff:b8:
73:b2:43:d3:99:0a:21:0c:aa:3c:3c:77:47:aa:7c:57:e5:7a:
d1:ae:64:93:92:14:52:ae:ae:fd:18:c9:8a:2e:91:01:af:f1:
a9:4e:ad:e4:81:08:92:a6:12:c6:ff:cc:4d:6a:8e:cf:e7:8c:
fc:c6:bc:33:f8:ed:08:0a:5c:bd:85:3c:c3:fb:be:ee:6f:4d:
99:77:18:92:37:71:1c:2e:b0:f3:bd:ec:8a:77:15:29:95:aa:
61:c8:96:e7:45:45:42:20:38:c3:13:2f:d1:e2:ef:25:98:30:
07:a1:42:42:72:c9:9d:a0:91:15:6c:6d:fb:54:71:6b:64:f7:
70:42:1f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:07 2026 by rpki-client