Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
File: U8NcqD_N9xskTtgDrEaOFFPYJo8.mft (raw, json)
Hash identifier: QUmoqTmcx84A7wASr1rZPLMc3tR+9jGluh6/RxeYp/M=
Subject key identifier: 8D:1C:34:44:94:6F:64:1A:02:FF:39:C2:FB:88:A8:F2:49:69:97:79
Authority key identifier: 53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
Certificate issuer: /CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Certificate serial: 01A132C6F06FFADCB99FBC7935969412D90E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
Manifest number: 0CE4
Signing time: Tue 13 Oct 2026 01:01:00 +0000
Manifest this update: Tue 13 Oct 2026 01:01:00 +0000
Manifest next update: Wed 14 Oct 2026 01:01:00 +0000
Files and hashes: 1: 0P9xPfTELLOLsIkje98I5DI3JMM.roa (hash: /5GbceYSZZKUMKDpKsep1xA2kefROVR28hBE+53Ms/s=)
2: U8NcqD_N9xskTtgDrEaOFFPYJo8.crl (hash: l9qFSVcmyQKF002tXaHUL1FKELcn5Vbg921D3iHSGO0=)
3: pfH2GwBcvDoKyHCIT0cM2iz_ms0.roa (hash: Mm7/tRb+RTedsr3+m2DHJUxAaM0FcO0MUgT9eZ4XDVI=)
4: zMo_08BFuPtuYYrEDlRKq-rmGBo.roa (hash: vZCIJPH6khDNzPRPnP73DDsgX8UFqI/TfAzpfgqnDZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:c6:f0:6f:fa:dc:b9:9f:bc:79:35:96:94:12:d9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Validity
Not Before: Oct 13 01:01:00 2026 GMT
Not After : Oct 14 01:01:00 2026 GMT
Subject: CN=8d1c3444946f641a02ff39c2fb88a8f249699779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f6:54:56:fb:75:57:e8:ff:e4:26:e1:b7:b2:
e7:4c:41:54:12:33:2c:37:cb:21:eb:46:c1:72:f0:
1e:7e:89:ed:2b:b5:32:89:11:59:50:2b:8d:da:dc:
68:dd:a7:56:bf:cb:37:f2:e2:e0:f1:12:9c:67:0c:
42:0a:cb:98:09:a3:b1:ba:5e:bc:31:7a:2f:e4:80:
7d:24:6d:20:21:49:9d:6b:ef:4a:30:82:9f:6e:8f:
81:b2:fa:b4:73:13:3b:80:3a:b6:ed:85:0d:5d:e5:
2b:f2:bf:b6:26:fb:38:94:d8:68:2b:35:96:8f:88:
b3:75:c0:85:ad:03:74:30:4c:ba:03:55:a2:da:78:
6b:0c:d4:02:1c:ef:fc:f2:f3:f9:6e:c9:10:9d:57:
f3:90:91:2b:75:ba:99:7d:88:c2:c4:7d:07:bc:dc:
68:ad:99:02:a5:71:aa:8f:3b:de:ef:dc:88:84:28:
0d:b8:05:73:7d:66:f0:23:14:5c:80:13:87:25:a0:
e6:e1:a6:d8:1d:30:37:66:36:58:1b:40:c9:fb:42:
9d:dd:e2:6b:29:aa:02:78:c8:f2:b3:24:1c:d0:36:
a8:51:c9:40:c5:36:73:26:ff:37:07:9f:84:15:12:
1d:5c:2a:e0:b3:42:29:37:94:e8:66:1d:40:5b:5e:
8f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1C:34:44:94:6F:64:1A:02:FF:39:C2:FB:88:A8:F2:49:69:97:79
X509v3 Authority Key Identifier:
keyid:53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:9e:1d:fc:2a:88:a0:9d:1c:1e:d4:b6:9a:02:cd:85:e2:6b:
83:56:07:b0:f1:67:e2:a5:b8:18:fb:41:4f:47:8e:8d:5e:21:
a7:d9:86:55:15:d1:10:a9:96:0c:5a:ae:f4:a4:b1:b8:22:91:
44:55:a9:26:7c:23:92:dc:ad:e6:81:27:03:99:41:d5:99:b4:
db:fd:f1:db:98:22:f1:d7:92:29:ae:29:81:1b:a1:4f:68:a1:
1a:b0:15:be:18:0b:19:9a:c4:9f:d4:c7:e5:33:37:54:d0:b3:
73:41:3f:f9:38:da:a5:c4:e1:ed:d7:21:37:82:c0:8a:37:c9:
a6:90:94:bd:5e:c1:2c:2d:37:53:e3:be:68:90:e9:b8:f3:ae:
4e:a3:e3:f0:cf:42:77:2a:9d:15:25:c9:20:07:6f:22:d3:e3:
15:f7:73:e6:ed:e1:17:80:fc:00:8d:6b:ba:ad:7a:79:60:f9:
18:6f:a9:93:e7:e9:1a:24:b6:6f:1b:f8:ad:dc:8a:c6:6e:fb:
3e:24:15:db:c1:cb:2c:3e:46:06:77:e1:99:de:a4:d9:e7:cc:
59:21:94:00:ae:c5:51:e3:b0:4c:12:dd:43:a9:1e:e7:27:43:
1d:e5:39:f7:2c:bb:f5:77:5b:a6:b0:ec:f4:ef:43:99:ab:67:
f1:e1:ce:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:20:24 2026 by rpki-client