
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
File: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft (raw, json)
Hash identifier: 7YcifUlGBBwBC1JRlg2uQLD2Ti9LBUjNtuyh9THMqGY=
Subject key identifier: B3:68:18:EB:12:E6:CE:F4:75:3E:4C:47:8B:20:BE:7F:0A:A3:F8:7C
Authority key identifier: 53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
Certificate issuer: /CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Certificate serial: 01A0E7781C200D886CDE7DBFC19BF1E4061F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
Manifest number: 1A60
Signing time: Mon 28 Sep 2026 10:03:23 +0000
Manifest this update: Mon 28 Sep 2026 10:03:23 +0000
Manifest next update: Tue 29 Sep 2026 10:03:23 +0000
Files and hashes: 1: NnLh8TC21_I7aIxYqBVOxMDsYn8.roa (hash: abZc4byKeRvjtv7jM3QRQhlxOH/1CVxvgCdUA7yEv1Y=)
2: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl (hash: /qqXqCkb6hr8WAZdxQHpOMWUpbHhWiTYItbcd1qaUSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:78:1c:20:0d:88:6c:de:7d:bf:c1:9b:f1:e4:06:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Validity
Not Before: Sep 28 10:03:23 2026 GMT
Not After : Sep 29 10:03:23 2026 GMT
Subject: CN=b36818eb12e6cef4753e4c478b20be7f0aa3f87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d1:6c:f9:5d:27:7c:51:ce:7f:34:82:4c:f3:
60:5f:60:74:c2:71:8d:1a:33:62:e7:a7:6b:32:f2:
ad:20:23:aa:43:d3:53:56:7b:f4:12:f4:f1:1d:db:
27:bd:02:15:c8:c2:0c:22:85:ec:85:91:ea:e4:fc:
b8:ba:5a:58:5c:f2:ee:1f:d5:a2:75:75:49:99:1c:
4a:17:39:c5:3a:f4:8a:09:58:08:2e:af:5e:d0:9c:
6c:b0:29:32:e9:23:a3:28:9d:ec:2e:1a:a4:d4:c2:
1e:47:1f:7d:51:f8:23:a5:b9:62:82:c1:64:d3:a1:
dc:ea:8a:1c:36:f6:5c:44:5d:0c:64:7f:e4:24:e1:
9f:31:11:91:12:49:77:31:58:47:c5:1f:8c:59:a8:
50:a0:92:c5:24:81:9d:ba:e7:16:aa:20:36:c9:9a:
af:a4:79:4e:e8:44:cc:05:09:a5:41:1f:51:16:08:
b2:59:a0:25:01:3f:f1:c4:3c:da:b2:1b:0d:00:0c:
57:d2:59:db:fe:7c:36:09:7e:8e:29:97:59:64:61:
d4:c9:b8:13:8e:8c:e4:8c:38:65:f0:e5:c9:cd:6e:
d4:4e:af:9e:57:de:e1:33:6b:5f:44:c6:31:8a:2d:
90:00:4e:7e:5e:0b:2b:94:1e:51:34:fd:09:ba:b3:
bc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:68:18:EB:12:E6:CE:F4:75:3E:4C:47:8B:20:BE:7F:0A:A3:F8:7C
X509v3 Authority Key Identifier:
keyid:53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:9f:6c:d0:26:1b:87:b2:89:56:8c:1f:1e:3b:a6:45:d8:1b:
01:fe:76:a8:4a:76:cb:c2:41:f4:30:a9:44:34:62:94:8b:ba:
5c:ec:03:e4:e8:6c:d9:d8:bf:87:56:24:7d:07:a6:62:b3:19:
f3:b1:74:d1:91:5a:53:f5:30:9c:c1:03:96:2f:0e:6a:9a:98:
4d:a6:06:43:5d:dd:6b:e6:a6:93:bd:13:35:71:a0:7d:1d:b1:
e1:23:d1:9f:27:2b:45:75:20:ac:f8:d5:c3:ce:e9:88:2f:f1:
0f:c7:b8:a2:33:00:f5:67:76:b8:3a:13:bb:26:92:d7:63:a0:
2d:7a:de:5d:f7:4b:c6:42:80:8f:bf:2c:40:40:0b:b3:40:d4:
c3:68:a7:71:7e:2d:3e:00:1d:a6:d7:7c:9e:89:ff:c4:27:8b:
e3:05:1e:6f:17:f5:63:e2:3d:db:11:0d:ce:4d:9c:e7:2e:7b:
7f:f7:e6:dd:0d:a6:6a:e6:bb:60:da:f5:47:be:0f:8f:2d:67:
a0:c4:a1:16:96:38:34:01:a8:26:23:0b:98:36:76:c4:64:9e:
8f:14:a0:e8:6c:6d:95:5e:38:d8:ae:85:5d:9d:34:c0:c6:18:
6d:6c:4c:f1:13:ad:1a:27:26:83:45:f2:38:b3:ad:50:45:a8:
36:98:83:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:16:41 2026 by rpki-client