Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
File: U8dzEuDSzshFoEYThF-KG-Jjw5k.mft (raw, json)
Hash identifier: TizeaVMZ6Jio3z1q/54mSF+afmh8YUgflKRtdsZXvo0=
Subject key identifier: 3F:5D:F6:BB:46:FC:98:0F:39:CF:39:3A:30:D6:BE:91:BC:76:CC:84
Authority key identifier: 53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
Certificate issuer: /CN=53c77312e0d2cec845a04613845f8a1be263c399
Certificate serial: 019D98F4E6BBC3C4934CE0E88C60E858ED65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 01:01:19 +0000
Manifest this update: Fri 17 Apr 2026 01:01:19 +0000
Manifest next update: Sat 18 Apr 2026 01:01:19 +0000
Files and hashes: 1: LMMdVEDfefO9DMTodcqsmRU-LHM.roa (hash: hRe5cV7EwZ0Fcxo17tUpXTTj4tA391QQdgKYjlbkJTk=)
2: U8dzEuDSzshFoEYThF-KG-Jjw5k.crl (hash: ohZ7VjW9O3A7GCTRtSIvsXcjgVg6GHFKiuxmjqJpt9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:e6:bb:c3:c4:93:4c:e0:e8:8c:60:e8:58:ed:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c77312e0d2cec845a04613845f8a1be263c399
Validity
Not Before: Apr 17 01:01:19 2026 GMT
Not After : Apr 18 01:01:19 2026 GMT
Subject: CN=3f5df6bb46fc980f39cf393a30d6be91bc76cc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:63:92:3e:97:ea:a5:7f:b8:4a:f0:a4:45:d1:
9b:3f:4b:6e:70:32:e2:ff:79:27:08:f8:26:1a:c6:
02:f7:ad:df:30:40:fe:94:46:95:16:de:78:86:71:
aa:4b:4b:01:1a:25:43:9b:f9:94:8d:b2:60:99:3f:
cd:a4:eb:6f:b5:3d:d7:2b:40:c4:33:df:60:e4:42:
98:12:6e:ba:b7:fb:fc:54:66:8f:be:21:0a:e0:8a:
b1:ab:8e:2d:d3:f8:eb:2a:de:4e:8c:2c:9f:9e:6f:
08:eb:36:a8:21:fb:6c:9c:51:fd:89:d6:9c:cd:9f:
62:a6:7a:cb:a7:55:c8:f0:59:79:22:75:b6:ae:99:
54:37:3b:d2:1a:14:98:04:c6:ea:3d:9b:fa:20:a9:
17:8f:65:1c:3f:7c:4f:74:b5:55:4a:39:78:0e:6b:
b5:96:0d:0f:a2:81:84:16:b2:48:76:0c:fc:aa:b0:
18:93:77:27:68:4e:54:1f:5f:9c:78:75:65:8b:d7:
b7:d0:29:41:76:0c:67:0c:4e:7a:d6:82:11:d3:02:
80:5a:85:a3:30:5c:43:4c:03:eb:67:4c:5f:3d:2f:
d4:46:77:70:87:06:6d:64:3f:29:ae:b9:2e:c9:d1:
29:29:92:7f:0e:6f:95:f1:a0:0f:71:dc:31:d9:f4:
73:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5D:F6:BB:46:FC:98:0F:39:CF:39:3A:30:D6:BE:91:BC:76:CC:84
X509v3 Authority Key Identifier:
keyid:53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1b:73:cb:ce:76:be:cd:1f:da:36:5d:94:f8:f2:c2:78:52:
86:48:01:ef:aa:21:53:f1:cc:67:72:66:06:65:80:b9:7d:93:
d3:8f:eb:28:82:3f:b7:79:f9:e3:a4:af:b7:f7:30:29:b5:1d:
a7:65:20:b4:22:91:cc:71:6c:b5:57:fe:e8:91:28:23:8f:c5:
f1:2f:3c:2f:9d:bc:6e:1f:1a:c9:3c:02:38:cf:e0:53:00:91:
93:51:2d:d5:54:11:1b:40:07:da:6b:ab:fc:08:76:0f:17:bb:
b9:2e:4c:31:ab:a2:1f:9c:96:6e:4f:4e:2f:f6:b0:7d:b6:e1:
01:7d:22:eb:80:7e:bf:9d:42:e7:b5:bf:eb:a7:2f:de:d3:91:
93:f5:f6:84:91:b0:a1:7f:80:83:60:e8:20:c1:b1:3d:b2:93:
b9:03:87:5c:80:c1:b5:89:14:fb:0e:2e:01:a7:99:f5:cb:b5:
10:c9:04:b4:df:b0:b8:af:1c:dd:5f:60:81:49:10:79:1e:89:
6e:76:75:de:60:fe:fe:c2:83:d6:fa:72:1c:26:d2:74:15:f0:
2a:9f:1d:d5:f4:39:90:46:61:bc:de:0c:99:08:3d:3d:46:7e:
65:76:70:8f:4c:ee:8f:5c:a2:55:68:e5:ab:79:6a:2a:96:5e:
07:0d:17:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:08 2026 by rpki-client