Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
File: U8vRR3BEoDQEx_xDlhwsg7unW7w.mft (raw, json)
Hash identifier: eTlnQY+kwICe3gRWuMlHwLh9yUZB6pNJgxCoCXH2sNQ=
Subject key identifier: D4:8B:8E:69:C4:9F:FB:E4:B3:43:B6:1E:38:92:99:3E:89:3C:55:91
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 019FAA87DB8C410FCD121628DDD8D2CEE1CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
Manifest number: 1202
Signing time: Tue 28 Jul 2026 21:00:57 +0000
Manifest this update: Tue 28 Jul 2026 21:00:57 +0000
Manifest next update: Wed 29 Jul 2026 21:00:57 +0000
Files and hashes: 1: U8vRR3BEoDQEx_xDlhwsg7unW7w.crl (hash: atrSKhZYPpSO05YMm4fMGAhUJcaKWkQYjTBd7RdXG74=)
2: i-hrmAd6eP2UJtkk3SPMJzG0IR4.roa (hash: B6teHj1AoVH0G/n45VB0pZwR7t3AJ0lfJJi8U5XTRvo=)
3: zaKgjQxKOXseye7OptrYTXdeRW8.roa (hash: msUavGu33dhomVrKx+MtKYwUf9QSzxgfQ+UXycVAuNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:db:8c:41:0f:cd:12:16:28:dd:d8:d2:ce:e1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Jul 28 21:00:57 2026 GMT
Not After : Jul 29 21:00:57 2026 GMT
Subject: CN=d48b8e69c49ffbe4b343b61e3892993e893c5591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:31:a3:5e:5f:a7:ed:03:4d:26:af:c0:3c:
e9:f3:7f:ff:d1:20:2c:4b:d0:e8:9f:c9:90:2e:33:
97:75:23:bb:b0:66:86:8e:75:74:9f:41:4d:61:df:
f5:38:6b:52:da:89:cc:d2:3a:23:dc:ab:6a:ec:60:
e5:0f:ea:66:ca:e1:2a:26:bd:23:dd:e3:9c:09:50:
98:d5:46:3b:6e:aa:11:1f:4a:79:f2:a4:94:fb:d3:
8f:c6:6d:12:d3:0b:a6:b3:e0:e1:f5:92:47:00:36:
f8:6d:66:43:c3:46:7b:19:59:cc:be:7a:07:69:97:
23:4e:d7:81:cc:8b:e9:8c:a1:00:ab:10:25:46:cd:
ff:9c:8a:76:e0:65:ae:ac:e2:39:5c:9c:0c:6b:32:
2a:0a:1d:d9:99:cb:5c:6a:dc:56:dd:63:b4:30:1b:
82:46:76:af:ac:d7:c8:85:b8:9d:31:18:b8:13:44:
80:21:98:fe:70:77:e7:5e:2e:76:93:e5:4b:b0:ae:
bf:83:f4:24:db:32:b9:0c:68:b4:8c:71:02:c2:9b:
a9:04:8c:35:99:71:e4:07:10:39:42:46:41:5f:1c:
39:09:8e:82:1e:14:83:34:4f:95:2a:b4:c8:72:26:
bd:49:9b:9b:1c:ec:11:79:ad:e5:2e:11:59:d3:53:
9a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8B:8E:69:C4:9F:FB:E4:B3:43:B6:1E:38:92:99:3E:89:3C:55:91
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f1:93:bf:d6:39:d5:0e:b8:61:ed:7b:f6:41:f2:e4:b3:e8:
03:c1:74:bf:43:36:ec:8d:38:5a:f8:55:15:ae:89:e3:cd:0b:
49:88:d1:b7:7b:9a:24:33:3d:d9:34:4a:d6:27:02:e9:d4:69:
88:fc:a8:f1:60:a1:07:70:bc:db:20:4f:79:31:78:ee:ff:6e:
8f:20:cd:87:aa:1c:b4:69:ba:cd:2c:64:14:a0:1c:cf:04:74:
ad:03:31:3f:20:25:b7:fe:1f:86:7c:79:d4:cd:eb:45:e2:10:
77:c1:8d:b0:6b:54:00:aa:60:0f:cc:14:58:bc:b2:65:9f:a7:
99:6e:2b:83:43:78:c4:39:94:49:58:bb:84:ca:c9:f3:ac:bd:
69:f6:1f:a9:23:ee:ec:f0:67:cb:d1:56:57:dc:4b:44:e8:d4:
b2:71:aa:2d:6f:b3:02:e4:a3:be:fc:35:ee:7f:75:2b:d1:7b:
5f:23:d9:d6:95:03:45:2f:ce:7e:ae:8b:84:69:97:f7:88:01:
2b:fd:e9:7c:36:ec:da:e3:05:35:07:94:b0:74:ee:4f:7d:bc:
bb:fb:87:5a:5c:2d:4a:61:bd:fd:82:c9:88:90:f3:c5:a9:e9:
fa:5d:c6:da:e9:28:a5:a4:96:75:19:53:a8:62:f7:68:74:ba:
1d:9d:1d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:53 2026 by rpki-client