Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
File: U-8ohOShM1XbZJo0k1J8RCKJc7g.mft (raw, json)
Hash identifier: hiX6TWJyHNmb7HFGH+m46/L06HT3CtYWz7lNGZtC6ZA=
Subject key identifier: 98:D1:2A:FA:BC:6D:1E:24:83:56:EA:7E:7B:59:77:91:72:95:F5:53
Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8
Certificate serial: 019CAC0FE25A2D949CF8BAC058F7A53E7377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
Manifest number: 1345
Signing time: Mon 02 Mar 2026 01:00:47 +0000
Manifest this update: Mon 02 Mar 2026 01:00:47 +0000
Manifest next update: Tue 03 Mar 2026 01:00:47 +0000
Files and hashes: 1: E-486E0-raIhh0cU7uEvlJrtVq8.roa (hash: vna5ocXCF4M8ZuD7JNv3pkr7ZzkpCUbGfeYWFBWtRTs=)
2: U-8ohOShM1XbZJo0k1J8RCKJc7g.crl (hash: OGtBEKvjNSFX0VVgW6STKt+K1ZiRkpGPPsZ+4XdWN3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:e2:5a:2d:94:9c:f8:ba:c0:58:f7:a5:3e:73:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8
Validity
Not Before: Mar 2 01:00:47 2026 GMT
Not After : Mar 3 01:00:47 2026 GMT
Subject: CN=98d12afabc6d1e248356ea7e7b5977917295f553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:4e:fa:06:df:38:19:ed:1b:9c:23:85:57:
5a:8d:c5:8b:a6:41:62:44:50:3c:91:3c:d1:d3:77:
d1:39:5b:69:f7:a9:cf:ad:98:8d:c9:ff:32:47:2b:
12:06:0e:27:d0:66:3b:b0:79:08:07:41:c7:18:49:
f5:ae:ea:10:85:cf:cd:b0:b5:fb:e2:59:92:c4:fd:
37:05:4c:69:18:04:56:5d:7c:b6:ee:8c:4d:84:3f:
95:a6:51:d6:3c:a2:11:ad:0d:5a:4f:13:18:fb:71:
8a:d3:cf:6d:da:e6:d9:42:e7:20:55:16:2b:71:f1:
35:23:76:83:4a:b8:26:d8:c1:82:1d:8d:61:5d:31:
60:40:40:ec:4d:69:75:8b:1c:eb:ef:79:26:3f:ec:
d0:69:62:3f:f7:52:a2:40:1d:5c:9f:04:6a:55:52:
2e:42:1d:32:85:8c:9e:6a:5a:3d:52:df:20:35:92:
92:0e:93:7a:78:03:2d:6a:96:f9:01:d5:7e:09:90:
17:91:a7:e4:55:a7:42:e0:e8:be:ec:01:28:0d:38:
ec:4d:b9:68:f8:d7:0e:a2:39:ce:f6:88:fb:f4:b4:
3b:da:f3:2f:fc:98:bf:9b:57:4b:55:bb:9b:bd:77:
6e:bd:22:00:07:25:1b:36:67:5d:86:0e:5f:aa:15:
73:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D1:2A:FA:BC:6D:1E:24:83:56:EA:7E:7B:59:77:91:72:95:F5:53
X509v3 Authority Key Identifier:
keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:fd:da:a2:ca:20:ab:31:49:4c:26:82:bc:e5:ba:a4:a7:8e:
72:42:41:49:c9:6a:8f:96:83:77:8b:5d:08:0a:1c:0a:50:a1:
73:cb:b6:3e:f4:87:b6:ef:b9:a7:d2:f0:09:b5:5c:41:b3:a4:
ae:ab:de:a5:bf:91:64:b8:bf:86:b3:17:ca:3e:4f:d4:41:c5:
1e:bd:94:e1:19:ac:9c:45:2c:d8:c7:8b:25:b4:00:cf:75:f5:
e1:24:89:03:8b:a9:71:bf:70:53:8b:2c:15:ac:f8:b0:bb:d0:
85:31:3e:67:93:23:78:b0:6f:c5:9e:e4:4f:d1:91:80:48:ed:
e3:2a:7b:b0:16:30:ef:d9:2d:2c:f0:4c:4d:14:b6:37:b2:6a:
ec:34:93:3a:78:54:8b:1f:7d:9e:86:32:cc:c8:c2:6d:bd:9a:
65:7d:7b:05:b0:a6:fd:a7:22:0d:f2:75:86:be:29:91:e7:b8:
af:60:dc:5e:93:c9:a7:1d:d0:e6:cd:75:f5:73:8f:4e:07:4f:
a5:80:e7:e9:7a:0e:90:88:3a:26:8f:a8:82:d9:4e:d2:91:fe:
74:c4:6c:d4:a5:1d:b3:05:62:84:f9:77:33:6f:32:c0:de:3a:
57:d4:21:27:b0:29:7c:5e:f2:ce:7f:03:6c:85:a0:88:1f:3a:
9e:d7:b4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:58 2026 by rpki-client