Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
File: U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json)
Hash identifier: QoWCf9+dDZHPOf/ptW/RmkYlIvpLV5fUhrXMkGehxz8=
Subject key identifier: 61:F4:9C:AA:9D:23:4D:8F:29:3A:30:09:61:60:28:27:B9:77:45:D8
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial: 019CABA2186DEEEBEBBAC3E6888996A49D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
Manifest number: 0F04
Signing time: Sun 01 Mar 2026 23:00:52 +0000
Manifest this update: Sun 01 Mar 2026 23:00:52 +0000
Manifest next update: Mon 02 Mar 2026 23:00:52 +0000
Files and hashes: 1: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: /oGGFv1Ito9xcZVE/tSwVJvr8PEza105wBMZTM9RY+I=)
2: WzohaVzPLEBKuPQD-sbPCaZXcnQ.roa (hash: SIJFdx4blAk5vec/FV7gfH5KB998Y+98D4gZTEETEKk=)
3: nM6XYB2iwgJ17oTR8XmeIg2xI2M.roa (hash: 1o7tQyZeZiqzL+ktcifE7MOOMo51KCeyAAEwmbZDyZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:18:6d:ee:eb:eb:ba:c3:e6:88:89:96:a4:9d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Validity
Not Before: Mar 1 23:00:52 2026 GMT
Not After : Mar 2 23:00:52 2026 GMT
Subject: CN=61f49caa9d234d8f293a300961602827b97745d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f6:97:b9:d0:54:b7:94:90:c8:e3:6c:26:9d:
7b:38:b9:56:24:c6:3c:08:f8:5e:b1:8f:b9:1b:e2:
6d:d3:c1:e6:86:65:ee:81:3e:61:9f:92:0d:9f:c5:
e1:80:18:fb:0e:8c:4d:9a:95:b5:c0:bd:87:88:19:
ee:47:82:88:4f:d7:0c:7e:54:c4:a4:69:af:eb:71:
70:04:b0:ee:ae:d7:e7:e8:39:64:24:1a:99:9e:5e:
b4:94:22:a7:6c:1b:f3:84:8e:4a:ef:b6:b1:4b:cd:
45:71:21:2f:09:16:d3:34:7f:ee:5b:23:fa:83:58:
b2:1d:36:b9:b2:d4:88:f1:04:21:13:d4:b8:fa:82:
c6:b4:64:f3:8a:12:04:00:f7:4a:28:3c:a0:8e:7d:
63:c9:51:fc:1a:c5:97:f7:70:06:d5:5f:57:34:9d:
de:2b:be:65:7a:2f:f6:68:19:ec:73:32:47:83:49:
0b:4e:e1:25:6e:cb:d2:08:09:97:5b:12:65:84:be:
ef:a9:ec:1c:4d:0b:00:05:32:18:25:d0:31:ea:2d:
0e:5f:13:1e:91:ab:42:09:f5:95:93:a7:cd:d7:2a:
3d:e8:76:bc:a5:24:b7:f9:61:6d:e6:31:8a:e0:58:
3e:5f:ec:3f:a1:cd:0a:36:43:33:85:96:dc:d3:45:
bf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F4:9C:AA:9D:23:4D:8F:29:3A:30:09:61:60:28:27:B9:77:45:D8
X509v3 Authority Key Identifier:
keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:2a:b3:88:53:96:35:c1:3c:46:b9:c8:1c:c7:cc:53:b3:d6:
55:62:5e:0a:75:60:3b:c2:bf:47:06:c6:7b:a5:fb:b3:32:29:
4b:4e:33:e8:9e:e5:98:ea:b1:d5:e8:44:72:4e:6e:46:1d:ed:
cd:b4:78:5d:63:46:e2:03:46:0d:ce:ea:27:ad:06:ef:96:19:
d0:b4:b4:f6:d1:74:30:29:62:43:11:2a:dc:8e:8b:66:06:9e:
77:54:e6:a5:62:3f:83:c6:d5:11:dc:0c:b6:88:f3:cd:d1:d0:
f7:fc:c3:0b:00:bf:42:02:b3:fd:58:7e:2d:ac:d4:67:5f:ac:
96:03:a0:4c:e3:66:7a:bc:17:2f:de:10:dc:94:1f:2e:6a:1d:
b0:1d:a8:b0:79:31:c7:9c:e9:c8:0a:04:ae:98:75:b3:86:71:
7a:6f:cd:7d:26:62:95:00:17:49:1f:94:44:22:e0:5d:bd:a0:
38:8f:47:5d:4e:9a:d6:80:8b:13:9f:f4:8c:39:d1:93:28:1d:
b6:d9:01:ab:1c:8c:34:18:d0:dd:6c:db:e2:dd:eb:42:91:2b:
28:3b:e7:51:66:f2:93:e9:b4:68:ed:ef:7c:d8:05:80:33:a1:
f2:8f:0c:22:a5:03:cd:22:8d:f4:68:f3:8e:83:ff:af:a5:1c:
83:41:de:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:13 2026 by rpki-client