Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
File: U4Vcjs6b1vjjlAICISzgmwX1-KA.mft (raw, json)
Hash identifier: 9wbrNZOEKWTt1B3Ffz2+8wGBIKWOz6TXUkeSWEpJ1W4=
Subject key identifier: 71:3A:BE:E3:56:B4:06:AE:C1:E7:94:08:77:64:91:33:05:BC:01:7E
Authority key identifier: 53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
Certificate issuer: /CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Certificate serial: 019FAA1A525D72D4605D2F0E915135CC36E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
Manifest number: 1666
Signing time: Tue 28 Jul 2026 19:01:19 +0000
Manifest this update: Tue 28 Jul 2026 19:01:19 +0000
Manifest next update: Wed 29 Jul 2026 19:01:19 +0000
Files and hashes: 1: U4Vcjs6b1vjjlAICISzgmwX1-KA.crl (hash: GAT8FPeiakLh/vr3NAxCJwxqfjCFalTmszjyxqKVR3k=)
2: wOCmhg5ukUDjqYrrNe8HL0c6WHY.roa (hash: py0DTzjoQh1bUaOEwoDGjjlil3qVagDVLMDa9WBCMVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:52:5d:72:d4:60:5d:2f:0e:91:51:35:cc:36:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Validity
Not Before: Jul 28 19:01:19 2026 GMT
Not After : Jul 29 19:01:19 2026 GMT
Subject: CN=713abee356b406aec1e794087764913305bc017e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:54:6c:dc:74:41:55:ec:85:b3:fa:d5:8f:d7:
c0:62:d5:ed:a1:f9:c0:9f:ad:e2:da:ef:5f:98:78:
49:85:03:0f:24:fc:8a:e6:ba:ee:6f:69:e4:95:f4:
b0:28:51:93:e5:57:c6:85:c8:fb:f5:9f:0a:7d:b8:
6d:72:d8:89:c4:09:3d:79:c0:85:0d:1b:0e:a2:c9:
93:94:05:44:77:15:70:02:7a:7a:36:44:86:46:7a:
8a:bd:33:3d:9d:03:b3:a1:e0:b6:d6:53:e5:5f:79:
34:2b:8e:20:20:6b:13:16:8e:21:b2:d2:80:27:91:
33:5a:bf:c2:88:81:59:22:0f:de:b7:1d:8e:6a:68:
9e:da:0a:67:c4:20:67:bd:35:c7:6a:72:7c:28:f3:
01:8c:32:db:cb:09:d8:7b:13:0c:47:04:7c:44:e1:
f1:8c:59:d3:ce:9e:57:07:64:84:a5:fe:c3:cf:dd:
12:fd:c1:75:5a:99:40:43:ab:5e:54:39:e1:ed:26:
66:e7:e5:51:50:c8:13:9a:b7:1a:f8:ec:c9:70:d0:
d9:a0:38:ed:55:88:0f:49:89:b9:9f:97:13:b7:69:
56:06:87:d7:49:5b:5a:eb:ef:8e:b1:6c:2f:db:5f:
1f:f6:8b:e9:d3:2f:35:47:3f:ad:d4:6b:8d:51:a9:
8a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3A:BE:E3:56:B4:06:AE:C1:E7:94:08:77:64:91:33:05:BC:01:7E
X509v3 Authority Key Identifier:
keyid:53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:1e:ad:2a:e6:dd:9a:5a:44:72:53:fc:2c:31:42:ca:dd:e4:
6e:56:c4:e8:73:e8:32:2b:ef:56:34:32:cc:58:9b:f3:60:1b:
e7:47:b9:66:a8:fa:b7:d1:bf:4c:dd:de:93:a9:9a:3a:d2:c8:
53:fa:9d:75:07:6e:10:ec:6c:06:08:0d:96:e4:c1:62:5a:0a:
5f:0f:59:bd:9e:16:12:7b:39:de:8c:ee:37:2c:0a:b4:26:7d:
57:15:94:55:ec:c7:34:bb:7d:d7:fd:f5:ac:68:36:d3:25:25:
2a:0d:ef:48:71:88:1d:c1:c5:36:9a:56:10:09:07:11:59:3b:
53:85:a1:68:1d:ff:18:1b:38:53:98:70:26:81:8f:da:ab:91:
c1:2e:63:0e:df:ff:02:24:17:9a:9a:6d:30:0d:11:87:ea:40:
05:8f:e4:d3:bd:92:52:5e:47:72:cb:7e:6b:91:9f:51:1d:f9:
8e:14:94:53:50:12:9a:f9:b5:20:3d:bb:18:87:6f:fc:74:93:
c3:83:57:05:03:92:fd:f7:9b:e0:ac:e7:fb:c0:d9:e4:c3:0f:
9c:88:3d:c8:7c:db:3f:2e:e6:b1:3c:e2:3b:10:1c:03:0a:81:
ef:75:d3:cd:bf:17:9f:0f:b0:4d:d3:37:cb:6a:00:ed:a6:c5:
d6:85:b5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:28:41 2026 by rpki-client