Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
File: U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json)
Hash identifier: fdhWHcNIR3Pbg7+V07BfMEUZCxLCUSAzCXWB1BI1KiQ=
Subject key identifier: 32:0B:E7:22:26:1D:03:B4:38:9A:B0:7B:D5:2F:7F:53:BD:37:35:4E
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial: 019D992AF7171BFD52985D553A43D069F273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
Manifest number: 0F7F
Signing time: Fri 17 Apr 2026 02:00:22 +0000
Manifest this update: Fri 17 Apr 2026 02:00:22 +0000
Manifest next update: Sat 18 Apr 2026 02:00:22 +0000
Files and hashes: 1: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: XV+Mz4bkzTlI8XOV5jpldpzzd+cwxmVhHw1FZJ1fpeI=)
2: WzohaVzPLEBKuPQD-sbPCaZXcnQ.roa (hash: SIJFdx4blAk5vec/FV7gfH5KB998Y+98D4gZTEETEKk=)
3: nM6XYB2iwgJ17oTR8XmeIg2xI2M.roa (hash: 1o7tQyZeZiqzL+ktcifE7MOOMo51KCeyAAEwmbZDyZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:f7:17:1b:fd:52:98:5d:55:3a:43:d0:69:f2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Validity
Not Before: Apr 17 02:00:22 2026 GMT
Not After : Apr 18 02:00:22 2026 GMT
Subject: CN=320be722261d03b4389ab07bd52f7f53bd37354e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:86:69:66:63:ba:47:35:22:98:b0:c8:eb:d7:
2f:ea:2c:c5:04:48:0c:2f:5a:ff:8c:01:a3:95:ef:
22:aa:3d:31:0f:c3:c0:5e:23:13:bf:a1:18:9e:38:
ed:62:28:60:bd:a3:0a:0a:c9:43:13:9e:0b:57:91:
a3:43:d9:22:46:cf:19:54:62:1e:3c:be:c6:84:c4:
c2:18:bc:e3:fb:e2:fd:cc:66:d8:30:1e:d9:3e:9e:
c0:28:e9:73:5e:41:bd:40:ad:77:3d:40:6b:d0:3b:
56:5d:46:52:8d:0d:0b:e7:f6:83:ed:61:2f:4f:0c:
2d:06:c6:4c:83:33:d5:06:c5:60:f8:ea:57:1a:b4:
9b:65:0d:58:fc:b1:10:8f:e8:3e:26:d3:87:fb:19:
27:0b:9a:59:4b:4d:f8:91:65:8a:c5:21:f6:26:9c:
e2:08:7e:22:aa:6a:eb:6d:83:42:95:dc:a4:9f:8f:
62:c2:28:94:2d:93:47:08:58:cb:a5:ec:92:b4:d4:
1c:22:0b:c9:71:11:68:9f:3e:ca:bc:8d:8c:2f:a2:
6b:92:69:ce:8d:12:0c:38:24:d5:02:af:3d:f6:c4:
53:ba:12:57:ba:93:f7:93:1f:d2:2d:5e:22:07:01:
72:42:a7:6f:6b:28:f2:ff:2c:2e:73:9a:ed:e3:41:
c2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0B:E7:22:26:1D:03:B4:38:9A:B0:7B:D5:2F:7F:53:BD:37:35:4E
X509v3 Authority Key Identifier:
keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5e:63:77:88:b1:7a:1f:b6:4d:c6:e9:d8:4e:95:2d:fa:30:
db:8d:06:ad:c5:f2:67:15:04:f7:4d:c4:84:98:75:9d:81:4c:
94:60:99:df:aa:23:cc:a5:6d:61:f4:98:fc:50:29:85:f3:45:
20:e1:d0:06:70:77:5e:18:11:fb:60:31:be:e5:df:6c:ae:6d:
ab:77:e2:ed:36:39:c7:e7:fe:38:95:6b:a3:b7:48:41:8b:3d:
e7:79:69:8c:50:46:76:e5:dc:ab:6e:cd:86:94:07:0d:01:85:
87:99:fd:c1:e2:ec:bd:92:5c:74:29:de:e1:33:9d:9f:fb:93:
9b:19:37:ee:6d:a7:d9:98:71:1b:39:65:f0:f1:c4:8d:9e:99:
5c:ef:47:cd:63:3a:6e:37:2b:6c:ff:a5:a1:68:7d:c5:cf:19:
9b:ce:e9:6c:12:61:70:bb:27:fb:c2:9e:2b:b8:e4:05:50:ff:
53:4d:d2:38:d4:3d:36:6b:5f:5c:c1:54:dd:b0:1a:69:c7:fc:
42:f9:68:2d:a8:4e:e3:5d:79:e1:04:5c:1d:4a:b8:38:de:17:
31:39:de:36:bb:b2:96:be:57:de:ae:18:56:ca:19:88:75:2f:
f2:27:d6:24:d0:37:51:48:32:bb:be:1d:4c:de:cf:41:48:8e:
57:a0:78:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:23:05 2026 by rpki-client