Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
File: U0OOy3Xh1es-gP26waaw-vg_c-E.mft (raw, json)
Hash identifier: RVxWWe4UucwpEnn8DH3JRNazOLdtziXi9QuEbu9nYNc=
Subject key identifier: D5:3F:6A:9A:89:E3:1F:5C:FA:9C:1E:92:EA:3C:66:2E:97:45:9C:BA
Authority key identifier: 53:43:8E:CB:75:E1:D5:EB:3E:80:FD:BA:C1:A6:B0:FA:F8:3F:73:E1
Certificate issuer: /CN=53438ecb75e1d5eb3e80fdbac1a6b0faf83f73e1
Certificate serial: 01A0DB3B27DD8CD10596B7BD047B81DD9650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
Manifest number: 0279
Signing time: Sat 26 Sep 2026 01:01:22 +0000
Manifest this update: Sat 26 Sep 2026 01:01:22 +0000
Manifest next update: Sun 27 Sep 2026 01:01:22 +0000
Files and hashes: 1: 6yK0rTOIU4100VkJhvlL7615x-Q.roa (hash: 912+lG9sTeHd4OGye179bG8W3Z4J1YwKjtqF0na5AJY=)
2: U0OOy3Xh1es-gP26waaw-vg_c-E.crl (hash: dm7Vj4M4sdKawy7QygltVE00L7mGE6xMp9rGiQI7xwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:27:dd:8c:d1:05:96:b7:bd:04:7b:81:dd:96:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53438ecb75e1d5eb3e80fdbac1a6b0faf83f73e1
Validity
Not Before: Sep 26 01:01:22 2026 GMT
Not After : Sep 27 01:01:22 2026 GMT
Subject: CN=d53f6a9a89e31f5cfa9c1e92ea3c662e97459cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:51:73:18:a9:95:7f:3f:19:44:d5:59:9d:
b3:6b:b2:c3:f6:bd:be:fc:a6:b8:7a:4a:24:4f:6b:
e6:03:ec:e2:4d:d0:c8:59:e0:f2:70:e7:81:4e:60:
4c:58:46:c7:a3:a6:bf:78:70:23:90:37:f4:98:18:
39:49:da:d0:49:f6:2a:8a:39:d6:6e:ef:bc:c1:19:
eb:a6:59:f2:4f:ef:48:3a:32:3b:89:2e:03:c8:c7:
08:f0:6e:a9:16:c7:5a:0e:0b:6c:62:41:35:42:af:
6d:64:10:e9:2f:38:3c:2d:42:f5:c9:2a:1b:2e:88:
40:39:10:40:7e:6a:81:ab:7b:a1:12:70:af:a7:28:
2b:a3:1b:6a:10:e4:48:15:e1:2d:50:b7:0f:54:19:
ad:7c:67:f9:af:92:74:d5:89:f8:0f:76:14:9f:be:
47:ea:52:be:b4:26:67:36:e1:46:e5:65:67:46:34:
92:71:db:81:b4:a8:b3:d0:38:89:33:c1:26:21:99:
0d:f8:5d:0f:dd:a6:9f:ad:9d:77:31:2b:c8:38:e7:
2a:0a:7f:87:d0:a3:d9:f5:de:70:52:46:a3:80:e6:
05:53:ec:22:cd:d1:db:4c:03:f5:65:8c:78:af:b7:
75:d8:18:4b:5d:6a:57:b1:52:ab:70:a4:04:cb:78:
e1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3F:6A:9A:89:E3:1F:5C:FA:9C:1E:92:EA:3C:66:2E:97:45:9C:BA
X509v3 Authority Key Identifier:
keyid:53:43:8E:CB:75:E1:D5:EB:3E:80:FD:BA:C1:A6:B0:FA:F8:3F:73:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:45:d2:74:20:d2:bb:02:16:b9:12:c6:ca:16:9c:ad:3b:5c:
a8:66:ca:e5:45:7e:29:a6:78:14:7d:30:75:38:a1:c4:4c:de:
57:b8:6e:a5:92:98:c7:be:c9:ae:da:fc:86:45:b3:d4:c7:17:
b5:e3:eb:d0:49:d8:ce:7d:ba:69:63:da:e7:a8:36:e2:de:b8:
86:3e:a3:3b:35:4c:73:ae:a6:3d:c3:5e:1c:4b:37:9e:d8:67:
6c:54:1b:48:2b:13:69:2e:53:dd:44:30:82:28:c1:54:4c:ad:
17:d1:a9:cb:08:9c:00:b5:dd:2a:6a:32:19:98:cf:52:d4:1b:
67:a1:8d:be:47:77:69:ea:fe:dd:26:e4:d1:17:f6:05:91:e2:
e9:48:62:62:15:3c:bf:51:ac:82:b7:a7:34:18:32:21:73:57:
60:32:67:26:1f:67:1c:e8:ae:35:e9:cc:99:c6:6d:17:60:9e:
e4:f0:7f:a9:d2:3f:af:30:56:65:e8:c4:db:f1:6b:46:86:b7:
9a:ee:0b:b7:9b:00:4f:f2:44:a7:0d:86:fe:2b:b0:45:ed:1a:
05:f3:6e:a1:68:d7:38:16:f2:fe:1e:7e:5b:ed:8b:4c:68:44:
06:4c:1b:11:c1:43:1c:73:c8:f5:88:86:6c:27:ed:47:c1:b1:
4a:0b:7d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:31:07 2026 by rpki-client