Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
File: U8vRR3BEoDQEx_xDlhwsg7unW7w.mft (raw, json)
Hash identifier: /p3pvAWHX+dTKyqydEVUE4IFcptngS9OI121ZCh/l8s=
Subject key identifier: 33:92:39:6F:CE:6F:56:A3:1E:02:B2:D0:72:AE:7F:D2:8E:B3:B8:00
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 019CA9EB4E86175539A18B43972A02AEA603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
Manifest number: 1074
Signing time: Sun 01 Mar 2026 15:01:36 +0000
Manifest this update: Sun 01 Mar 2026 15:01:36 +0000
Manifest next update: Mon 02 Mar 2026 15:01:36 +0000
Files and hashes: 1: U8vRR3BEoDQEx_xDlhwsg7unW7w.crl (hash: 9FWd8O0cNIz/DTI9fOBwAuKqByY2kWgQvuYXnL6ZK5A=)
2: i-hrmAd6eP2UJtkk3SPMJzG0IR4.roa (hash: B6teHj1AoVH0G/n45VB0pZwR7t3AJ0lfJJi8U5XTRvo=)
3: zaKgjQxKOXseye7OptrYTXdeRW8.roa (hash: msUavGu33dhomVrKx+MtKYwUf9QSzxgfQ+UXycVAuNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:4e:86:17:55:39:a1:8b:43:97:2a:02:ae:a6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Mar 1 15:01:36 2026 GMT
Not After : Mar 2 15:01:36 2026 GMT
Subject: CN=3392396fce6f56a31e02b2d072ae7fd28eb3b800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bd:9a:49:12:28:37:dd:36:2d:79:c1:99:e0:
97:17:e8:34:4e:33:5c:36:90:7b:2e:b3:56:0c:3e:
b4:cc:5e:76:a5:b2:75:20:0d:91:14:d9:a2:1d:03:
94:fe:ab:36:d5:70:18:3d:26:b4:fd:8e:22:e6:b6:
22:e8:ae:8a:20:cd:77:d4:eb:a7:0f:17:e4:0e:c9:
fd:fd:d9:d5:a7:55:27:06:e6:4a:f7:54:79:e0:0d:
f5:41:1e:a7:73:c3:14:6c:82:8a:b0:71:d7:f9:67:
68:1c:7c:7d:12:68:c3:16:e2:7b:a9:97:2b:8f:72:
5d:41:8a:b8:51:8b:e2:d6:ab:30:1e:28:79:0f:80:
9c:db:fc:fc:38:fd:d7:c1:1d:d3:08:b9:0b:ea:46:
a8:9d:81:99:62:28:18:99:50:1e:ae:d9:c6:75:a9:
ea:c6:15:3b:82:24:15:b6:9a:37:8e:01:37:86:9a:
5a:ec:92:c8:92:c6:e8:c0:80:a5:f6:96:2b:af:a4:
ca:65:e9:fd:b0:2f:71:46:f1:f2:9b:95:9d:06:a4:
5f:2a:be:48:4d:29:7e:7d:8e:55:83:84:30:ce:71:
ef:70:7f:8e:f6:7b:84:5f:ec:5e:14:d4:dd:1f:ea:
e9:96:ae:ae:38:32:dd:4f:61:6b:02:5c:9e:7b:53:
73:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:92:39:6F:CE:6F:56:A3:1E:02:B2:D0:72:AE:7F:D2:8E:B3:B8:00
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f9:9f:56:68:0c:52:67:6c:71:db:b8:10:04:7f:bb:ec:02:
a6:ae:84:d8:d5:f7:2d:ca:06:28:78:70:f3:30:91:26:dd:60:
97:38:b2:6e:20:46:e1:c1:fe:33:b2:ff:63:98:3b:dd:30:cc:
b0:da:36:f9:97:9a:fa:71:f2:78:16:7e:cb:e3:30:5f:bc:dc:
80:b2:3d:43:e0:58:5f:48:1b:95:86:30:56:97:1e:11:e7:3e:
09:ee:19:17:d8:0a:cd:d5:c4:d7:81:16:52:55:0d:9e:26:ae:
c9:38:13:54:b8:5b:df:e2:1c:b6:1b:da:6d:d3:64:c5:63:7c:
47:35:2e:36:51:d7:04:c7:ae:6e:51:94:d7:17:f2:e4:1f:04:
75:ba:6d:cd:69:1a:72:f7:22:31:87:98:4f:ce:9f:38:2e:c1:
96:8f:bd:b5:cc:77:fb:43:22:48:23:4d:e7:41:4b:24:69:d7:
de:06:59:9a:8d:c9:0e:a6:43:7f:63:44:5f:d2:26:7e:22:87:
fb:8d:99:c7:11:a3:23:9a:8b:65:78:c4:d0:0c:45:c1:73:e1:
f2:0e:86:9e:94:86:f6:62:44:8c:ca:0e:60:86:86:81:b2:9d:
27:5a:89:b4:3c:f7:cb:91:59:42:dc:1c:03:36:9b:ac:e4:81:
ee:c8:dc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:23 2026 by rpki-client