Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
File: U4Vcjs6b1vjjlAICISzgmwX1-KA.mft (raw, json)
Hash identifier: LzilCGhd+YRiHUN0XjUVUGntdEs1MihL8/mh6hj+r/o=
Subject key identifier: 8E:87:04:51:A4:84:12:4C:0D:26:7B:E2:FD:54:97:6C:C9:3F:C2:C9
Authority key identifier: 53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
Certificate issuer: /CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Certificate serial: 019CAB6B9DAB7C9757F852A0EA4A9938FDFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
Manifest number: 14D9
Signing time: Sun 01 Mar 2026 22:01:22 +0000
Manifest this update: Sun 01 Mar 2026 22:01:22 +0000
Manifest next update: Mon 02 Mar 2026 22:01:22 +0000
Files and hashes: 1: U4Vcjs6b1vjjlAICISzgmwX1-KA.crl (hash: /TuYTVUKUV8XL5/pmodqEoy7v++dPgyxCa5Og7dMKio=)
2: wOCmhg5ukUDjqYrrNe8HL0c6WHY.roa (hash: py0DTzjoQh1bUaOEwoDGjjlil3qVagDVLMDa9WBCMVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:9d:ab:7c:97:57:f8:52:a0:ea:4a:99:38:fd:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Validity
Not Before: Mar 1 22:01:22 2026 GMT
Not After : Mar 2 22:01:22 2026 GMT
Subject: CN=8e870451a484124c0d267be2fd54976cc93fc2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:bf:53:41:55:31:68:30:1f:85:a5:88:a5:
89:fb:d7:1e:9f:f5:7b:31:12:ce:7a:e7:0e:04:f8:
aa:e3:f7:c1:be:86:3a:7b:7e:9c:2e:73:1a:7e:b8:
2e:09:83:95:1a:b9:d9:9d:48:fa:b2:76:9f:a7:c7:
a9:9d:b4:1a:0f:09:d7:5b:0a:9e:71:cb:a4:41:aa:
68:b3:54:40:b0:36:4d:ae:b0:de:e9:4b:3f:9f:fe:
a1:4c:91:c3:3f:20:2f:cd:70:f9:67:8b:0f:de:2e:
18:e7:65:da:6b:44:ec:08:30:72:43:43:6a:d7:15:
d0:0f:8b:bd:a8:3d:e4:14:58:64:a7:88:16:3e:97:
27:8f:f1:ec:d0:c1:75:1b:b2:88:79:8e:7b:93:d3:
05:c7:84:8b:78:c9:99:bc:a8:0a:3c:e0:81:00:9a:
cb:d8:fe:31:2e:1d:85:83:bb:8d:14:60:e6:db:2a:
d7:26:11:0b:8d:84:5b:1c:de:e8:8a:71:a7:58:c0:
07:a1:81:23:9f:f6:ef:89:2a:03:f8:8e:77:11:66:
24:7b:7e:24:8e:00:c6:dd:97:bf:e2:b1:f4:5d:55:
15:6c:b3:21:b6:5e:42:5d:1b:62:ca:ad:78:1a:52:
c5:9a:0a:98:d3:14:b8:92:4d:83:58:cc:80:ea:53:
38:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:87:04:51:A4:84:12:4C:0D:26:7B:E2:FD:54:97:6C:C9:3F:C2:C9
X509v3 Authority Key Identifier:
keyid:53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:68:65:48:5c:fd:c7:2d:fd:d6:95:53:49:dd:3c:10:cb:8f:
6e:d1:a7:28:73:b7:08:61:dc:eb:33:00:bd:56:90:2b:96:99:
16:d9:a4:67:ae:ae:fb:83:e1:52:dc:65:77:0d:fe:d4:b3:d5:
a6:dd:6e:94:e9:38:0b:75:17:9a:09:3e:1f:07:f0:fb:ae:09:
1a:de:fa:50:43:48:d3:11:c6:1f:f2:14:f5:21:8f:34:5e:94:
20:fd:4f:be:e5:7e:bd:f8:89:15:ac:98:5f:36:23:bf:5e:17:
cd:f8:43:b8:1c:c2:8d:1f:aa:e8:fb:63:30:f0:bc:b3:c7:71:
ce:17:fe:f4:11:e7:e9:d6:bc:5c:d9:0d:5c:a2:46:2b:4b:fc:
78:c2:f2:aa:80:96:89:f1:a9:98:b6:06:fa:29:f0:9e:45:7d:
10:06:20:fb:e4:a7:cb:fb:2c:82:23:ab:61:3c:a5:d0:42:a2:
7a:ad:38:50:95:a6:5a:f2:9e:80:0c:78:de:04:3b:a8:47:d4:
97:65:68:2e:0b:b6:8a:6c:bf:1c:36:08:c7:1d:a4:28:85:7a:
26:91:5e:b7:6d:ae:1d:c2:ac:b0:b7:58:35:1c:63:6b:a7:75:
1e:67:38:b2:4d:66:ec:88:a9:80:b4:fb:d2:fd:1e:18:a0:e3:
ab:ef:24:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:50 2026 by rpki-client