Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
File: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft (raw, json)
Hash identifier: O/MZ2OwP2pmao5HGqaVwG2vT4w8MR5YfXlzv8UafD68=
Subject key identifier: 65:EC:91:CA:70:E0:A1:2F:DE:5D:3A:04:91:12:98:0B:22:04:E1:57
Authority key identifier: 53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
Certificate issuer: /CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Certificate serial: 01A0E5BECFF1CD22170F8FCA2C0CD7D63963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
Manifest number: 1A79
Signing time: Mon 28 Sep 2026 02:01:22 +0000
Manifest this update: Mon 28 Sep 2026 02:01:22 +0000
Manifest next update: Tue 29 Sep 2026 02:01:22 +0000
Files and hashes: 1: IhNm1XAjTUBP_UYjIGIEELcWiWc.roa (hash: TcGN7ZBSR/KDo/mk7XwRToavEZ6usSTJYaYD26UCIPE=)
2: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl (hash: cHJ00deL4doug6QcSFbbySxLfag1oil22btZpVjArJw=)
3: mjm_jL6FnCZyLJAmMfTaUZL_DF4.roa (hash: 7TBTThhJXxwuqJMKV3smo+3dSUEAzVVTW36ntOu96Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 02:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:be:cf:f1:cd:22:17:0f:8f:ca:2c:0c:d7:d6:39:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Validity
Not Before: Sep 28 02:01:22 2026 GMT
Not After : Sep 29 02:01:22 2026 GMT
Subject: CN=65ec91ca70e0a12fde5d3a049112980b2204e157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:4b:0b:69:ce:af:d8:49:89:a2:e0:53:4b:
59:ee:e8:2a:bf:8c:a8:3f:0f:36:c0:33:f3:a4:be:
4f:f2:08:c0:22:a6:a9:20:37:51:fb:99:14:3d:49:
3b:fd:86:a0:46:cf:c4:00:59:d1:2f:2b:fb:66:62:
a1:11:24:74:9e:d2:53:4d:39:e2:cc:83:32:81:ba:
ba:45:2d:6a:91:f0:e4:ef:8b:f5:9f:bf:5b:2e:16:
f9:e4:c6:56:de:a5:33:e7:db:f2:dc:3e:93:37:72:
64:5f:a2:2b:b3:7a:62:5a:9f:38:e0:4e:16:d8:30:
11:5b:a9:d8:90:7f:d4:91:42:28:57:48:87:59:b7:
cf:ff:3c:e7:e6:e3:ba:11:28:12:d3:70:b0:1d:6f:
1e:de:7b:1d:77:25:cf:8f:53:44:ff:7a:c5:d2:67:
45:a7:65:1c:18:db:d2:b9:7e:6a:c0:53:03:da:e2:
db:89:a9:bc:7e:53:90:07:78:91:1f:cf:bd:a3:46:
8c:b7:ca:f6:e2:af:de:a7:54:9c:43:9d:d0:08:8c:
4e:29:d2:36:eb:2a:87:bf:65:a3:a6:3f:5a:34:a6:
b8:6f:10:8d:ea:1e:c6:d7:a9:ea:93:62:a7:f0:90:
91:92:22:19:72:5c:6a:d1:bc:93:e4:06:ca:5e:7d:
08:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EC:91:CA:70:E0:A1:2F:DE:5D:3A:04:91:12:98:0B:22:04:E1:57
X509v3 Authority Key Identifier:
keyid:53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b1:a6:30:b7:63:02:6c:fa:32:56:b5:5b:71:51:1d:f3:55:
bd:7e:3f:fe:69:f7:7e:11:4f:63:0b:8d:c7:9c:d1:1b:fd:a2:
97:eb:3e:f3:ba:60:64:fb:79:82:19:e2:a8:4a:b9:71:27:f5:
aa:2b:1c:e8:81:a5:57:95:83:65:8c:57:31:86:02:60:39:fe:
4b:87:8f:f4:51:89:75:a4:01:56:fe:a6:95:05:77:11:c7:b4:
04:b1:39:c8:cf:12:82:13:61:77:fa:53:4a:da:df:67:0e:2a:
a6:9f:aa:e5:6d:15:0a:53:78:fe:f0:f8:ef:11:26:ed:02:83:
00:ab:b8:08:c0:ae:c9:d3:b7:88:44:b2:4e:76:5b:df:fc:82:
f8:33:3a:43:f4:6f:2d:7e:bc:69:78:64:56:53:31:20:fa:b5:
bd:2a:ad:bd:fa:49:7c:4f:b8:85:c4:77:b9:1e:77:bc:d4:ca:
96:c9:c0:99:de:a2:4d:5a:11:aa:36:b3:e6:09:27:03:ab:65:
ff:3f:9d:a6:cf:b9:54:0c:f1:53:04:d9:24:9d:17:f7:87:ae:
bd:d9:66:0a:08:9f:35:a3:41:58:e4:d9:0a:ab:a1:03:e3:10:
fa:a5:e9:a9:82:60:ac:bc:17:c5:0f:f4:73:9b:1f:63:1c:34:
2a:83:23:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 13:31:53 2026 by rpki-client