Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
File: U8DiB45PPrpfh5UD_dgJw4O7dig.mft (raw, json)
Hash identifier: ap5yXV+c0QB09SdGedER+kEdHQTj3I5pV5lgCPfZnC4=
Subject key identifier: B7:B9:16:03:68:71:94:C9:C0:D1:6C:E7:87:AF:AC:31:2C:B6:92:5F
Authority key identifier: 53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
Certificate issuer: /CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Certificate serial: 01A0CF368D8EE2AFEF2617EE5FEE3327B85A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
Manifest number: 1468
Signing time: Wed 23 Sep 2026 17:00:53 +0000
Manifest this update: Wed 23 Sep 2026 17:00:53 +0000
Manifest next update: Thu 24 Sep 2026 17:00:53 +0000
Files and hashes: 1: 1-GMVzwMDxSiYZaD7figfVQ0BMo8.roa (hash: 6cucZyQkv8Clqp8Dmj2mB2zHAVxhCmtUwPlqKFCqEpw=)
2: U8DiB45PPrpfh5UD_dgJw4O7dig.crl (hash: /DriJhal7w5oO8dGi3vsLEMyRjRI/AWx5zPe3ZGJVx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:8d:8e:e2:af:ef:26:17:ee:5f:ee:33:27:b8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Validity
Not Before: Sep 23 17:00:53 2026 GMT
Not After : Sep 24 17:00:53 2026 GMT
Subject: CN=b7b91603687194c9c0d16ce787afac312cb6925f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e0:61:48:45:c8:9a:c2:fa:3d:be:11:f9:3a:
ca:4a:4c:f8:3f:38:46:89:3c:5e:51:fc:f4:4c:07:
be:98:e6:05:6c:ff:d7:dd:06:a8:ca:3b:49:df:93:
ba:2e:2f:2b:97:05:f7:69:14:41:b8:76:10:d1:bf:
a1:76:27:1e:a4:01:61:69:b3:9f:fd:53:4a:22:ee:
20:68:0a:05:85:eb:07:d9:91:17:51:dd:03:5e:65:
97:e2:dd:59:79:58:98:f8:dc:5c:45:2f:d8:1c:73:
8b:a6:ee:9d:1b:ab:c9:f3:3d:81:d6:74:40:94:ae:
c4:b3:7a:cf:f2:7c:e4:4d:c7:31:53:6c:4b:c8:01:
ba:ca:19:16:bf:ba:25:7b:f0:ab:bc:af:fc:9b:5d:
ed:bd:4d:2a:f3:e1:71:bc:0e:02:8d:5d:90:d8:f9:
03:e2:05:e2:d6:eb:0f:b0:30:11:b8:4f:7a:ac:82:
68:e3:81:f0:f9:f7:aa:0a:c7:2a:13:5d:77:6a:21:
6c:de:f1:d2:fc:ed:15:40:c6:49:0e:1e:13:83:9f:
ab:38:3b:46:9e:8b:dd:14:c8:1a:52:51:25:bd:8c:
a8:c2:cc:ee:bc:d2:e1:6b:b5:d9:07:01:f7:a4:df:
e9:66:00:7d:08:3e:2c:80:59:a0:0e:33:8b:7b:e1:
fc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B9:16:03:68:71:94:C9:C0:D1:6C:E7:87:AF:AC:31:2C:B6:92:5F
X509v3 Authority Key Identifier:
keyid:53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:59:34:05:f1:2c:1c:8e:b3:9c:90:c2:b4:76:b2:3e:04:b5:
be:6c:bc:97:2c:ee:c8:c0:b1:81:97:b5:61:af:d2:28:38:f2:
76:9f:c5:a4:4b:a2:0e:f2:5c:09:4e:65:60:1a:e2:f4:b0:6c:
ee:34:1b:b5:d2:47:d0:a5:63:48:fa:5d:c9:03:13:df:08:51:
34:c1:c3:f1:33:2a:8d:28:71:b7:8e:27:7c:9d:1f:07:12:4f:
ac:3e:9f:68:ff:75:f2:8e:b2:9d:d2:75:9c:19:19:b8:77:ca:
93:76:bf:6e:20:e8:52:88:85:25:31:d8:8d:6f:8d:0a:d2:d4:
c9:30:20:57:9b:ef:60:c3:4f:c2:7f:75:ef:24:f6:41:10:25:
ad:ba:73:c0:02:fe:45:b6:4a:4f:44:08:c0:b4:90:c0:09:ae:
33:a9:ed:eb:39:b6:25:e7:b8:ee:47:38:e6:a8:fa:da:86:8a:
ba:d6:e4:a0:d0:ea:69:74:06:63:8c:20:ce:39:11:57:84:69:
16:7a:d4:6f:45:d4:22:09:3e:25:5a:19:5d:53:c9:4e:95:4f:
2a:30:9c:8d:10:3e:64:94:89:d3:c1:c2:17:4a:5b:0a:dd:29:
58:97:8c:45:1f:b6:69:0b:20:63:66:2c:26:33:7f:75:ea:7b:
e6:d0:2f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:37:52 2026 by rpki-client