Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
File: U4Vcjs6b1vjjlAICISzgmwX1-KA.mft (raw, json)
Hash identifier: UxaxkPGg+i8r69BY6/BRsGK6cd7CXyQpVM08RyCtPp4=
Subject key identifier: AB:A1:2D:46:7F:D1:AD:06:E4:49:8F:60:B7:B1:C5:64:FC:C8:4A:0F
Authority key identifier: 53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
Certificate issuer: /CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Certificate serial: 019EC06E342DCE8F0118FF733260E85AB930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
Manifest number: 15ED
Signing time: Sat 13 Jun 2026 10:01:48 +0000
Manifest this update: Sat 13 Jun 2026 10:01:48 +0000
Manifest next update: Sun 14 Jun 2026 10:01:48 +0000
Files and hashes: 1: U4Vcjs6b1vjjlAICISzgmwX1-KA.crl (hash: l1eYS8/IPI2dz5x7wAY0kqN4gKNu+Aby6l+zYVpfRXI=)
2: wOCmhg5ukUDjqYrrNe8HL0c6WHY.roa (hash: py0DTzjoQh1bUaOEwoDGjjlil3qVagDVLMDa9WBCMVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6e:34:2d:ce:8f:01:18:ff:73:32:60:e8:5a:b9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Validity
Not Before: Jun 13 10:01:48 2026 GMT
Not After : Jun 14 10:01:48 2026 GMT
Subject: CN=aba12d467fd1ad06e4498f60b7b1c564fcc84a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a7:f4:18:26:b3:13:0a:76:25:52:c5:16:b4:
3d:7f:f9:50:d2:0b:30:39:10:80:ed:0c:30:d6:58:
66:c3:3b:83:b0:89:65:81:ce:20:08:63:0d:a2:25:
4d:de:22:e9:ae:16:1b:f6:0c:3d:a1:7e:8d:7c:99:
94:86:64:ca:05:74:3b:00:c7:60:4a:a9:9b:68:a3:
f3:09:95:fb:a2:9e:4f:a6:3f:16:98:60:9b:86:ca:
15:54:f5:dd:92:d2:8a:e5:01:4d:99:51:9e:e1:29:
64:09:d9:9a:3f:7e:c8:28:89:f3:53:f0:65:6d:cb:
75:3a:f0:1c:92:52:e5:fc:b2:b3:e0:44:05:28:8f:
ad:4c:e2:d7:b4:01:e3:c7:9c:fa:5e:63:51:71:b9:
50:7a:85:dc:42:60:47:a6:3c:d2:ef:75:0a:97:25:
8f:66:4a:7d:fc:aa:12:b5:49:03:ff:11:23:62:cc:
77:ea:ca:3c:4c:97:53:6a:66:e9:bc:8d:9d:8b:a0:
0b:55:a4:6f:9f:33:2e:6a:9d:de:fb:68:e0:be:d2:
ac:02:cf:83:8b:bd:6e:58:91:e8:f0:09:f4:55:03:
92:f9:8e:f1:cc:aa:df:a6:42:0d:c1:26:c1:97:58:
d6:89:28:2b:e4:38:67:c9:9f:54:46:0c:5b:6e:32:
3c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A1:2D:46:7F:D1:AD:06:E4:49:8F:60:B7:B1:C5:64:FC:C8:4A:0F
X509v3 Authority Key Identifier:
keyid:53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:56:c1:46:4a:b8:2c:50:aa:36:bf:fb:d2:9a:dd:b8:95:33:
ff:3e:a9:80:27:ae:a1:37:07:26:b6:bc:8e:1e:61:81:c6:00:
b7:17:fe:2d:d2:35:6d:79:00:fb:c3:1a:eb:b8:1f:c4:f3:70:
c5:50:3b:03:05:28:dc:ed:c1:44:a2:2b:9c:b7:cd:98:92:05:
76:e0:cd:54:12:af:11:d5:e0:83:ff:bc:44:59:1e:5f:af:1d:
17:18:e3:73:52:59:e1:59:d3:c7:1a:b4:ba:58:53:d0:11:20:
f6:cf:43:19:09:af:37:23:e6:7f:e7:44:21:a9:39:4a:34:c7:
e8:c2:17:de:d8:38:0d:96:68:a7:8c:ba:c8:c7:38:b4:ed:dd:
04:67:27:c9:9c:0c:7c:8f:85:12:74:29:ce:23:e1:19:9a:2d:
a9:3f:8c:d3:38:9f:8e:db:ba:b1:3d:9c:6d:85:28:84:0a:92:
03:44:59:9a:51:0a:c1:85:c0:ca:11:af:ed:53:bb:a8:6e:6c:
6b:47:5c:65:28:93:dd:bd:6a:11:3f:47:2d:67:ec:ea:dd:46:
75:77:cd:65:e2:78:03:08:9d:b4:5c:b7:33:66:ac:77:c1:88:
25:b6:a6:70:70:e9:60:6e:9a:01:84:c6:94:2d:80:6b:ac:68:
4a:03:81:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:12:51 2026 by rpki-client