Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
File: U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft (raw, json)
Hash identifier: FkibN72u+8oATKga1dHpMonHXsCsMHr9fxPJcqDpQLQ=
Subject key identifier: 83:D0:83:12:BA:7B:4C:20:9C:C5:55:C8:A2:08:76:52:4A:19:42:20
Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Certificate serial: 019FAE2D7A21BEBBD4596F91519024855B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
Manifest number: 19D3
Signing time: Wed 29 Jul 2026 14:00:43 +0000
Manifest this update: Wed 29 Jul 2026 14:00:43 +0000
Manifest next update: Thu 30 Jul 2026 14:00:43 +0000
Files and hashes: 1: 1-NYp-ANDJGWn2zBa6tZxxYGdDfA.roa (hash: ACBt4zT2KY2CKqY2w+FWy0192eghSargg1ySIXwb63Y=)
2: U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl (hash: uKz/k0VgUW7ABqv1Ycx0/zIvJeQNfM3wlIoBDvun3eU=)
3: gGTUtih5jVa-QbWTlOxD1xFHxEM.roa (hash: V1056kAulKAWgU4sgdguF4s6mRxgfRsvQzLGzFRcugQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:2d:7a:21:be:bb:d4:59:6f:91:51:90:24:85:5b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Validity
Not Before: Jul 29 14:00:43 2026 GMT
Not After : Jul 30 14:00:43 2026 GMT
Subject: CN=83d08312ba7b4c209cc555c8a20876524a194220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a8:50:65:e4:3a:f1:05:c5:cb:62:ed:53:ca:
a7:5c:b2:a9:99:1e:64:06:5a:6c:bf:a6:b2:15:e0:
38:e1:8c:0b:f6:a9:3d:13:2a:3b:8b:3a:a8:90:1e:
cf:e1:89:17:3c:2c:ef:28:63:ee:ac:4b:68:de:86:
d3:bf:8b:bf:59:0c:82:59:48:df:f9:c9:4b:da:6b:
14:f7:16:99:5a:95:54:5e:1c:ec:ad:20:ae:2d:55:
a5:3d:1d:13:12:12:33:3e:ae:0f:32:01:1e:5d:1c:
79:cc:db:0d:2e:47:c1:4c:82:91:bd:37:cc:a5:13:
43:f3:77:fb:90:51:ac:93:79:f4:02:41:e1:aa:f4:
e5:af:74:70:db:4e:fb:eb:40:86:d8:d8:74:e2:36:
34:60:d3:6f:fd:10:95:72:be:dd:2f:88:d9:a7:83:
59:5e:2a:de:0a:02:4c:d4:13:af:83:e3:1f:a7:ad:
df:50:d4:ba:9d:ec:87:6a:24:94:a3:20:e2:8d:f3:
4a:c1:87:5b:bf:33:62:ad:74:95:15:52:ea:fc:a2:
b9:3f:00:9a:c4:11:aa:47:ff:36:ca:d3:b1:80:a0:
84:91:19:75:b3:ae:33:dc:cb:b8:23:e3:70:f8:1a:
19:43:f3:0a:b1:0b:b3:37:57:b6:d6:80:e9:bf:94:
93:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D0:83:12:BA:7B:4C:20:9C:C5:55:C8:A2:08:76:52:4A:19:42:20
X509v3 Authority Key Identifier:
keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:33:76:74:65:3e:dd:cb:e4:61:2a:73:a4:40:6e:13:5c:8c:
14:9b:80:b3:c4:9c:b4:6f:54:9e:ba:97:c0:e4:8c:0d:08:1b:
1c:6c:a7:c5:15:ff:1f:51:07:16:aa:48:50:24:38:62:17:18:
e9:e5:23:d6:7b:7e:86:fa:74:77:2e:47:d8:ff:1c:65:13:96:
2e:04:cc:d3:69:70:0c:1e:c6:53:09:bb:98:54:48:a8:3b:72:
74:56:06:f3:1a:d2:b3:7f:c5:cc:68:ab:32:91:e4:4e:3b:89:
6b:ae:1f:6d:50:4d:e1:87:66:bb:ed:00:1f:3b:e0:76:41:6a:
6f:77:44:e9:78:6f:1f:f0:5d:a5:2b:08:ae:c3:25:f3:a0:f5:
71:e0:33:2f:bd:8a:42:93:38:58:75:88:05:67:db:8b:c4:71:
67:17:cc:2c:ff:53:02:1c:43:cf:e1:eb:f8:e4:87:3a:79:b9:
a3:79:14:d5:a9:29:bd:db:21:b2:a9:ab:35:0c:ff:6e:b5:f2:
19:25:d0:20:84:c4:c7:b3:8c:1a:c6:97:bb:2f:53:e7:45:12:
75:90:6c:5a:27:23:3b:42:ba:65:80:5d:5a:20:d4:5c:0f:1a:
12:da:7b:3b:b4:a9:1d:39:e1:9b:5d:69:24:1b:d4:2f:75:55:
f3:63:6f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:27:33 2026 by rpki-client