Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
File: U8DiB45PPrpfh5UD_dgJw4O7dig.mft (raw, json)
Hash identifier: eKJmwr+szmDnbCltKNbzogLwsy6wExeJSoRNkd0dsk4=
Subject key identifier: 67:EC:FB:A2:5D:A5:CB:76:F7:C7:BB:E7:3D:A5:4A:F4:B3:44:0C:D4
Authority key identifier: 53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
Certificate issuer: /CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Certificate serial: 019D9886DB464425A01D4DAC8DADDC09785C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
Manifest number: 12BE
Signing time: Thu 16 Apr 2026 23:01:07 +0000
Manifest this update: Thu 16 Apr 2026 23:01:07 +0000
Manifest next update: Fri 17 Apr 2026 23:01:07 +0000
Files and hashes: 1: 1-GMVzwMDxSiYZaD7figfVQ0BMo8.roa (hash: 6cucZyQkv8Clqp8Dmj2mB2zHAVxhCmtUwPlqKFCqEpw=)
2: U8DiB45PPrpfh5UD_dgJw4O7dig.crl (hash: Yj1rYnFakH3xSPDaRLi3P/t06JdKxL3pk/WwgtU3ikU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 23:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:db:46:44:25:a0:1d:4d:ac:8d:ad:dc:09:78:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Validity
Not Before: Apr 16 23:01:07 2026 GMT
Not After : Apr 17 23:01:07 2026 GMT
Subject: CN=67ecfba25da5cb76f7c7bbe73da54af4b3440cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:70:3b:68:5e:e0:27:db:ae:01:9d:0e:1d:74:
78:ba:f0:53:ff:8f:f8:dc:68:2f:a7:ea:80:d7:68:
e8:53:57:fa:cf:e1:75:5b:6e:9c:3f:d8:be:77:5b:
f0:ec:c5:5b:09:14:73:df:64:5e:d1:9a:3c:24:ba:
a6:37:12:b9:ad:e3:4d:35:ed:a4:19:b4:fe:ce:1b:
d5:9c:2f:06:41:43:e2:c4:d7:93:11:5c:48:1f:f1:
9d:19:25:b6:da:a0:cc:c9:ff:37:b2:cd:f4:83:84:
40:74:21:93:e9:3f:c1:cd:bc:1d:83:24:b7:51:86:
81:f6:1f:c6:12:1c:44:37:33:63:27:df:2a:04:c8:
7e:42:b1:28:d9:d2:25:26:6a:3c:74:32:3c:4b:83:
32:07:76:29:ac:d8:2f:e2:ce:6e:d2:c2:d4:21:53:
3d:7a:fd:f9:35:44:88:f4:d2:c6:ed:68:78:f0:67:
32:46:5f:39:68:49:7d:8c:6f:56:66:4f:8f:23:60:
b7:48:1c:4c:9a:6f:66:a9:71:11:66:2c:57:d6:3a:
ae:d3:82:d7:51:fd:10:8c:06:ea:77:c8:09:9e:1d:
e9:5c:e5:1f:00:1b:64:19:ee:61:73:f5:3c:f6:fb:
70:2a:52:be:e3:f4:0a:e7:04:8c:f0:9c:90:c3:cd:
ec:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EC:FB:A2:5D:A5:CB:76:F7:C7:BB:E7:3D:A5:4A:F4:B3:44:0C:D4
X509v3 Authority Key Identifier:
keyid:53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:64:97:77:40:a3:83:bb:f1:ac:85:cb:22:51:92:01:95:84:
4f:a1:40:4c:7e:52:3a:50:d2:23:10:dc:22:0d:b7:d4:c5:be:
d8:f1:71:01:30:19:2b:c1:e9:df:15:06:1d:de:0f:c5:2d:b2:
79:81:d7:28:8d:40:e2:5d:d3:06:d1:f3:12:80:7f:ba:f1:d3:
f9:0e:46:46:8e:e6:ac:e4:dd:5f:de:01:5b:b0:5a:9a:41:44:
2d:01:72:71:33:49:21:9d:17:23:be:23:88:ec:66:c6:d6:2e:
19:43:d7:a3:38:4e:85:93:16:a2:b7:1c:e2:14:66:c1:ec:aa:
0d:54:32:68:ee:7c:2c:c1:05:0e:4b:a3:df:05:14:16:20:73:
d6:28:98:e9:41:76:2e:7a:97:3a:b8:1a:f6:04:36:85:a8:ac:
dd:35:09:7d:75:8f:4c:eb:58:09:74:d7:3a:09:6b:94:fd:23:
c9:6d:9f:f6:db:bd:66:fb:f7:62:01:c2:4f:49:89:20:e6:fe:
1a:48:33:e5:66:15:48:6c:81:ea:ab:c0:49:22:6f:11:6f:d3:
cf:f3:e8:bd:ff:05:e0:03:81:db:0c:3b:37:54:a2:ca:65:84:
72:c8:b3:f3:fd:2a:00:60:e8:0f:95:61:79:1d:97:85:22:f6:
70:1f:c1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:27:49 2026 by rpki-client