Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
File: U1UECuknhr8XJ7a07MEJO4p0Aes.mft (raw, json)
Hash identifier: hKf6ldD8A5XXLYPmmZ8/QhRBfd12njP2hLSRP1MMmQ0=
Subject key identifier: E2:A3:51:CA:3B:0A:78:D4:07:CD:A4:77:65:6D:38:3B:0E:1D:EF:DD
Authority key identifier: 53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
Certificate issuer: /CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Certificate serial: 019EC0A44EB3F28A31F8E4C908E4867BBF32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
Manifest number: 0DBD
Signing time: Sat 13 Jun 2026 11:00:53 +0000
Manifest this update: Sat 13 Jun 2026 11:00:53 +0000
Manifest next update: Sun 14 Jun 2026 11:00:53 +0000
Files and hashes: 1: U1UECuknhr8XJ7a07MEJO4p0Aes.crl (hash: tqaXQJWaL0kuSgFCc/0DIo9ZF0CHJzmvLm8FL85Fkw0=)
2: hb1tf1cv2DqeNoOeMed75lCHkr0.roa (hash: 2osj3Tca5M4y8jWIziarmiD4CXLpdYxZP6w7GJCWBu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:4e:b3:f2:8a:31:f8:e4:c9:08:e4:86:7b:bf:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Validity
Not Before: Jun 13 11:00:53 2026 GMT
Not After : Jun 14 11:00:53 2026 GMT
Subject: CN=e2a351ca3b0a78d407cda477656d383b0e1defdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:db:49:51:cd:4e:3a:14:0d:93:33:b4:bb:34:
a3:cf:9d:22:a6:5f:fe:7a:5f:d6:7b:b2:f7:57:5e:
dd:68:30:c2:65:4d:04:0f:23:97:73:8f:7c:ae:a8:
1e:14:15:e7:8e:14:76:ef:0d:cc:e1:1d:ee:90:20:
04:23:51:f8:17:ae:c9:f5:32:a2:86:51:38:96:02:
9a:73:58:d7:dc:43:04:ed:3a:dd:da:32:76:65:07:
7d:f8:a6:ea:4b:ce:20:b0:7a:b5:d7:a1:a0:ea:0d:
9a:0a:90:4f:90:88:ab:a4:51:3e:05:1c:be:2e:c9:
fa:c9:5d:30:74:86:be:33:04:85:f4:cb:97:e8:b2:
8c:e8:6c:21:ee:1c:bd:34:c2:c3:c8:6e:b5:82:e8:
f9:7c:ea:d5:39:18:a2:cc:b5:82:17:88:a6:eb:2a:
7a:31:d6:d6:ed:c5:89:ca:1d:02:f7:98:5b:79:57:
ec:7f:62:07:ee:f4:a2:47:77:1e:8d:14:53:0a:10:
a5:4a:c0:d8:8c:3b:42:63:3f:26:24:cb:b9:01:2c:
cc:f5:06:61:86:7c:79:4f:29:ac:83:21:c6:39:68:
0e:74:ad:2a:f3:e6:a0:54:9d:2c:79:2c:50:05:67:
52:10:15:7a:62:66:eb:93:d5:d1:95:b7:49:78:95:
95:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A3:51:CA:3B:0A:78:D4:07:CD:A4:77:65:6D:38:3B:0E:1D:EF:DD
X509v3 Authority Key Identifier:
keyid:53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:06:10:09:f7:2b:c7:f4:f2:53:55:f3:6a:21:0a:f0:fe:a9:
a9:5b:3a:b6:15:c5:5a:7e:4b:a4:c7:d1:95:6b:0a:ce:58:25:
0a:9b:c8:bd:7b:52:17:f3:21:2c:c9:4c:7b:27:22:2c:4a:3b:
4d:24:f1:0b:a9:b6:b6:9d:0c:31:de:5e:cb:31:d3:5e:9c:4a:
26:85:c8:f5:73:0f:91:7e:04:d2:95:68:9e:14:c9:56:dd:11:
5c:e4:fc:9c:f9:d4:a4:8a:5b:73:11:99:0b:e9:39:97:ee:0c:
75:af:c3:73:32:67:84:5a:1a:6e:83:73:2a:d8:fe:9a:0a:f7:
34:be:b8:91:33:bd:25:44:e0:d5:f3:4b:de:e1:de:ee:bc:88:
ce:65:6d:2d:75:0a:7b:6f:a2:d2:4e:08:50:49:d9:c4:21:c9:
96:5f:0a:e0:59:c6:d6:58:9e:42:ed:90:14:02:cb:a0:64:f7:
90:e6:5e:16:fe:c7:5e:d7:b0:65:fa:78:49:f2:78:b0:c1:af:
ea:44:c3:cc:13:fe:ff:00:b6:cf:88:40:a4:b9:4e:c4:ae:86:
94:26:83:30:1c:a5:a1:d6:ad:49:c5:44:94:54:97:b2:9c:d6:
dd:77:83:55:ed:41:f8:4e:ef:4e:26:89:f1:65:c1:ae:93:dc:
8e:4c:f8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:58:48 2026 by rpki-client