Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
File: U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft (raw, json)
Hash identifier: dfJyHX5Zdna9zUPeT3vt+NTopGAeX4/FXlXZWlQ4kcc=
Subject key identifier: 9A:6C:C1:32:ED:FE:19:37:C0:7E:FA:10:7D:9E:42:B9:6C:F2:A1:57
Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Certificate serial: 01A0E7098F7820E32DA09D7A4B3D76715AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
Manifest number: 1A75
Signing time: Mon 28 Sep 2026 08:02:38 +0000
Manifest this update: Mon 28 Sep 2026 08:02:38 +0000
Manifest next update: Tue 29 Sep 2026 08:02:38 +0000
Files and hashes: 1: 1-NYp-ANDJGWn2zBa6tZxxYGdDfA.roa (hash: ACBt4zT2KY2CKqY2w+FWy0192eghSargg1ySIXwb63Y=)
2: U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl (hash: ixBR6NFZHN/2n3ijpICur5VCtRnLHiDDGDrSMSiSNhI=)
3: gGTUtih5jVa-QbWTlOxD1xFHxEM.roa (hash: V1056kAulKAWgU4sgdguF4s6mRxgfRsvQzLGzFRcugQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:09:8f:78:20:e3:2d:a0:9d:7a:4b:3d:76:71:5a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Validity
Not Before: Sep 28 08:02:38 2026 GMT
Not After : Sep 29 08:02:38 2026 GMT
Subject: CN=9a6cc132edfe1937c07efa107d9e42b96cf2a157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:20:f3:71:32:61:31:67:94:9e:db:20:91:50:
48:ff:1d:ea:86:2b:bc:43:85:5c:f0:2e:55:d2:15:
ac:9e:aa:7e:09:ba:9c:e0:b9:15:a3:7a:79:7a:9b:
e8:d3:58:8d:bc:ba:bb:c1:08:13:e8:3c:c3:ff:a2:
14:92:ab:ad:bc:bb:57:96:1b:fd:7e:42:04:0d:6e:
9f:ec:fb:ec:31:9a:35:fa:ea:58:cf:11:f7:76:75:
ef:88:34:0f:d8:c8:56:5f:ec:ed:a2:29:78:84:2a:
36:79:db:1f:d1:66:2f:01:db:31:16:33:46:c7:9c:
ae:e6:a7:9d:5d:de:0e:12:64:dc:76:76:21:e3:7f:
d6:33:ed:44:91:02:03:23:29:5e:a7:f7:a0:fb:f9:
74:c1:dd:37:34:a4:f4:24:31:ff:74:76:cf:99:ca:
b5:79:64:19:8d:eb:40:01:50:c5:00:f9:0c:c1:b6:
ce:66:6a:b5:56:ff:ea:67:25:51:ca:5a:ba:87:14:
c0:55:b8:a9:16:19:45:2d:75:6b:0e:a3:b2:6a:42:
87:0a:92:21:a1:e0:61:4b:64:11:45:a6:1f:ac:2e:
2b:7e:e5:5c:34:65:c6:a0:4e:4f:69:17:2b:34:9d:
9f:76:f3:21:b0:58:b1:1d:d7:e6:85:3b:1a:29:4d:
52:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6C:C1:32:ED:FE:19:37:C0:7E:FA:10:7D:9E:42:B9:6C:F2:A1:57
X509v3 Authority Key Identifier:
keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:98:da:20:89:4b:23:bf:1b:12:a6:51:e6:e3:94:8a:27:c3:
e7:15:27:79:45:dc:bc:03:ec:9e:57:9c:41:32:62:ca:a7:b7:
70:f1:46:ff:e9:5a:ab:55:1c:6a:43:b3:ca:91:c1:6b:d5:a4:
40:1b:bb:e7:a0:53:d8:62:2e:7e:b2:65:69:df:54:90:66:a8:
0c:b6:3e:74:00:3a:f2:e4:e3:e7:d8:06:2f:54:6e:8d:2b:e6:
c1:2e:29:30:9f:78:26:5b:31:69:cf:6a:a5:df:ed:65:b4:e3:
5b:78:0d:5e:83:a1:2e:f4:65:ac:12:3a:07:99:d3:3c:1f:2b:
a2:bb:5d:3a:f1:10:48:fc:d6:a8:de:70:19:11:2b:dc:88:6f:
b4:ea:8a:29:fd:eb:42:68:d1:cd:d8:f3:d4:82:5a:76:7a:27:
eb:a9:56:5c:51:5b:79:fe:e2:fb:85:cf:7e:ec:a8:e8:15:fb:
4e:eb:e9:3a:f2:30:74:86:35:6f:f9:a1:11:d7:3b:9c:7c:b6:
08:0d:fb:0a:67:e0:4f:59:3f:4b:b7:79:e2:f5:d5:5e:e9:e9:
3f:fd:d6:26:a4:b7:b0:6b:50:c6:3e:d7:dc:84:94:75:2f:cb:
03:53:0c:1d:f4:44:a6:7b:58:05:af:e6:c8:f0:b7:00:56:a7:
18:92:cc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:11:26 2026 by rpki-client