Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
File: U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json)
Hash identifier: Zt3S5B0iRGZ/l3ixvadB5AdrHlSEi/kDuM001/Uuk5Y=
Subject key identifier: 6D:2C:78:37:E0:5B:CD:94:04:95:58:F3:97:7C:2A:34:1D:B1:4B:EE
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial: 019EC292A759BE8133BB7F00EA3364B4EC98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
Manifest number: 1019
Signing time: Sat 13 Jun 2026 20:00:51 +0000
Manifest this update: Sat 13 Jun 2026 20:00:51 +0000
Manifest next update: Sun 14 Jun 2026 20:00:51 +0000
Files and hashes: 1: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: KLVm59lNRlN2urhNbj8/ZT59WZj+YS1/DgCLBYiLrR8=)
2: WzohaVzPLEBKuPQD-sbPCaZXcnQ.roa (hash: SIJFdx4blAk5vec/FV7gfH5KB998Y+98D4gZTEETEKk=)
3: nM6XYB2iwgJ17oTR8XmeIg2xI2M.roa (hash: 1o7tQyZeZiqzL+ktcifE7MOOMo51KCeyAAEwmbZDyZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:a7:59:be:81:33:bb:7f:00:ea:33:64:b4:ec:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Validity
Not Before: Jun 13 20:00:51 2026 GMT
Not After : Jun 14 20:00:51 2026 GMT
Subject: CN=6d2c7837e05bcd94049558f3977c2a341db14bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:65:0b:d1:a1:b1:aa:62:a6:16:bc:b3:06:
cc:1e:b2:96:4e:da:12:30:8d:c8:f4:29:9f:16:93:
18:04:ac:19:f1:8f:70:a8:12:32:73:69:e1:c7:04:
31:be:db:af:70:d7:10:38:3a:78:bc:60:95:56:88:
27:a6:b8:5f:a6:68:1f:ed:f5:ee:86:7a:f3:57:b1:
fc:56:ff:62:b0:19:20:61:18:10:a6:cc:c0:b4:a5:
7c:b5:08:a2:fb:45:91:3d:8a:a2:f7:40:ef:40:c2:
7a:a3:64:45:74:09:bd:a8:cb:ee:b5:fd:db:29:df:
81:9f:81:8a:66:b7:04:90:f4:94:2c:42:91:78:50:
e1:f2:ad:e5:a2:cc:38:36:c9:1a:bf:f0:ed:81:9b:
b2:73:21:30:19:f8:a7:fc:90:dd:0a:92:8c:d9:c7:
e8:cb:ba:b8:94:0e:96:09:8a:a8:ef:1b:ee:09:58:
45:35:5a:5d:67:c9:c8:14:65:2b:4b:37:dd:2e:11:
e6:04:64:0a:7e:38:62:e1:23:d3:17:93:48:91:71:
cd:62:22:da:eb:1f:37:73:ab:30:9c:eb:a3:f2:fa:
c6:65:91:39:31:78:74:40:aa:a2:59:33:ad:9b:bb:
ce:26:90:47:f3:84:7a:06:0c:68:99:fc:53:0f:b6:
e7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2C:78:37:E0:5B:CD:94:04:95:58:F3:97:7C:2A:34:1D:B1:4B:EE
X509v3 Authority Key Identifier:
keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:87:1a:ca:d4:f9:8d:7d:38:f8:2d:17:40:8c:46:b5:1b:31:
82:05:1d:de:fd:65:95:04:64:f3:77:ba:ff:c3:61:69:e0:98:
f0:17:7f:08:f4:26:ec:7a:bb:88:cd:bb:c6:78:8a:25:15:15:
a2:ff:50:98:2a:dd:60:24:3e:f6:d0:dd:3d:c6:6a:0f:ef:52:
25:6d:3a:8f:e4:04:84:69:f4:cb:52:92:80:9d:be:68:b8:b8:
1f:13:44:d1:20:c7:d1:66:e7:0b:dd:96:a4:41:c8:c0:5a:da:
04:f3:d3:b2:0e:5d:a2:a4:35:23:68:f3:cf:ec:47:f6:6f:d6:
6e:1a:96:0d:59:18:d4:48:bf:b6:98:be:d9:41:e4:f3:33:86:
8c:3a:91:f4:0a:d2:b8:28:ff:b0:75:91:e8:34:ac:5f:64:92:
84:2e:8d:b7:10:3a:3b:4b:a3:3f:7f:8e:6b:f9:ac:9a:52:f8:
d9:91:fe:89:92:b6:ab:ed:d6:a7:e9:1c:64:e6:8c:81:76:f2:
82:55:b3:36:fc:3f:9b:03:76:8b:34:b5:89:d9:75:fd:73:22:
b9:33:be:d1:cf:9d:43:0d:6d:8d:93:33:42:51:eb:d8:8c:9c:
7c:01:aa:8a:fc:32:76:1b:7c:20:b6:d1:c4:09:9a:a8:01:2b:
f3:3c:15:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:54:27 2026 by rpki-client