Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
File: U0OOy3Xh1es-gP26waaw-vg_c-E.mft (raw, json)
Hash identifier: nRaWG1T4AhVeeZNPt0wcAZITRy+FcivDbQ22f0Dr0GE=
Subject key identifier: 0A:8F:E4:2D:0A:64:A1:FA:68:7F:E8:95:71:1D:48:D9:D3:80:1B:20
Authority key identifier: 53:43:8E:CB:75:E1:D5:EB:3E:80:FD:BA:C1:A6:B0:FA:F8:3F:73:E1
Certificate issuer: /CN=53438ecb75e1d5eb3e80fdbac1a6b0faf83f73e1
Certificate serial: 019FAABEA22CFBF8ED93560F9BF828256838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
Manifest number: 01D8
Signing time: Tue 28 Jul 2026 22:00:47 +0000
Manifest this update: Tue 28 Jul 2026 22:00:47 +0000
Manifest next update: Wed 29 Jul 2026 22:00:47 +0000
Files and hashes: 1: U0OOy3Xh1es-gP26waaw-vg_c-E.crl (hash: sqFr63DAtMK6RJYM0iHv0eZPBcjcbp66OFQMSiQzQts=)
2: WosD3hO75NeEA5i1pYu4jjBvKZk.roa (hash: OY0wCbzw4br81Lxlh7tGimlRcQLzd5IIOnNVOlypPYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:a2:2c:fb:f8:ed:93:56:0f:9b:f8:28:25:68:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53438ecb75e1d5eb3e80fdbac1a6b0faf83f73e1
Validity
Not Before: Jul 28 22:00:47 2026 GMT
Not After : Jul 29 22:00:47 2026 GMT
Subject: CN=0a8fe42d0a64a1fa687fe895711d48d9d3801b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:48:9d:70:2d:27:99:55:cd:22:af:9b:f0:f5:
3f:ac:f3:19:32:7f:08:c2:8d:4c:85:96:f7:9d:44:
0b:23:f4:88:7e:19:6d:97:70:ab:7f:cb:7f:d4:30:
1a:3d:24:c4:d5:48:db:39:56:91:36:b8:44:66:a0:
8b:13:65:13:19:65:03:72:b3:4e:27:e3:4c:a9:e8:
37:0c:5c:3c:fc:22:e4:3b:1b:d0:67:b5:d8:3f:52:
c4:da:8d:eb:5f:b6:47:9f:b7:8d:e8:57:94:4a:3b:
d4:0d:2d:ef:f0:6a:04:ba:48:b8:6a:ee:96:bb:ba:
2a:90:03:12:e7:1a:95:28:bc:b4:b3:ea:47:1e:fc:
fe:fe:87:a4:ae:7d:b2:14:ce:b6:de:c4:a0:a3:8d:
96:8c:82:36:b1:db:ea:a0:38:20:3a:84:f2:d5:6e:
5e:07:59:4d:d8:98:fa:2d:33:fe:c8:aa:7f:61:2c:
b7:d4:25:23:32:16:4c:e6:4f:14:ac:10:fe:0c:ff:
93:ce:5d:2b:5c:e1:06:02:cb:91:cf:58:a8:26:a6:
03:21:0f:50:e4:16:7c:3d:1b:aa:16:4f:44:ed:5e:
75:d7:86:2d:74:d6:fb:fb:35:ae:6d:f2:aa:c1:cd:
e3:5a:cf:e3:c5:bd:84:a4:ad:11:02:f5:0f:3c:8f:
90:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8F:E4:2D:0A:64:A1:FA:68:7F:E8:95:71:1D:48:D9:D3:80:1B:20
X509v3 Authority Key Identifier:
keyid:53:43:8E:CB:75:E1:D5:EB:3E:80:FD:BA:C1:A6:B0:FA:F8:3F:73:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:73:df:ff:a7:1a:5b:48:02:ea:16:92:fb:0f:a5:38:17:3c:
d4:d8:bc:bc:29:37:48:3d:9c:b5:3f:ba:d9:0c:e0:60:0f:d3:
08:54:33:d5:fd:2b:3b:3c:c3:ce:3b:e8:6c:2f:67:6b:3e:d2:
71:0b:e9:bb:2b:91:e6:dc:11:ef:08:38:41:31:d5:7b:00:bb:
20:c2:cf:bb:60:6c:c8:89:53:60:64:32:07:a6:c1:5d:d8:88:
9b:57:42:a4:a3:00:39:0e:61:60:98:5c:b6:04:f9:10:59:5f:
d3:0f:e3:9c:0b:92:59:7b:4f:e2:3f:5e:a7:bd:ab:60:37:8b:
51:f3:df:95:0f:12:2b:85:92:51:90:36:93:fd:e7:36:36:71:
7f:aa:f1:c4:6a:97:9b:81:a5:5a:1f:e9:b4:9a:45:f3:af:b2:
a5:da:89:01:69:32:b2:59:c5:58:6d:8a:43:5a:21:9b:cb:5e:
57:91:c8:01:48:c6:4f:a5:cc:33:72:ba:7b:d7:53:f9:b7:53:
14:a4:ce:ce:39:e9:dc:85:b3:00:03:f1:cf:6a:de:2c:ec:25:
a3:73:6f:46:ce:5d:3c:2c:a1:83:c4:42:71:1c:97:6d:a1:29:
f2:d2:bd:2f:a6:69:9e:4c:01:06:bc:e1:3e:82:12:06:e2:13:
ac:43:6a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:07:59 2026 by rpki-client