Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
File: U8kSoEEbsBdFBwktDKNaka15kFw.mft (raw, json)
Hash identifier: 0wLQpaLQ9Nbav+I4SsvB0FDGUFbMOYOEwOBIGcraBa4=
Subject key identifier: 29:03:7C:B3:E0:CA:8B:62:D4:AF:D9:CC:6B:28:2A:B2:2E:55:27:A4
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Certificate issuer: /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial: 01A0C8213B86C65A4D801591B70A25F479D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
Manifest number: 1A70
Signing time: Tue 22 Sep 2026 08:00:16 +0000
Manifest this update: Tue 22 Sep 2026 08:00:16 +0000
Manifest next update: Wed 23 Sep 2026 08:00:16 +0000
Files and hashes: 1: 92JgNy2UniVvWNA6kvsz4sovFIA.roa (hash: lAqICp0tk9GujbZHx2/6RHqqJpx7oSWIDsAW5NqmUFs=)
2: CRXS8yJabkFe9zngcADmlt5Mjh8.roa (hash: V+gmBDqtYsm9sl2kIiueYpvE2PqUIfwWQ+IMlLrBBzI=)
3: Jgm412TDqz8eqc-jU7VKAy0ZDsw.roa (hash: z/uYXvq2xIRczyrsXkqCGG5d8yfec3+FGNIntpcNWWU=)
4: QbAALDYZ_RGHs07gYUQih_CDJyk.roa (hash: +Uv/ugRA2zDra5XT10jpvOYMi9ZmxhbMWKYPoPRN5bM=)
5: U8kSoEEbsBdFBwktDKNaka15kFw.crl (hash: V1CiVXW+vAnW4+BRMle/XsZd+IWPJEYZ2tfcjuvNgr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:3b:86:c6:5a:4d:80:15:91:b7:0a:25:f4:79:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
Validity
Not Before: Sep 22 08:00:16 2026 GMT
Not After : Sep 23 08:00:16 2026 GMT
Subject: CN=29037cb3e0ca8b62d4afd9cc6b282ab22e5527a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:25:38:2a:9a:b8:ce:03:04:5c:c0:a7:4f:
4b:ce:09:60:33:84:d6:28:c2:d8:1f:b1:ca:4e:31:
e0:e0:c1:0f:d9:16:89:fd:46:97:eb:03:36:ee:fe:
8a:f4:bc:33:15:d5:a2:a2:e1:cd:3c:7e:d3:ef:f5:
2d:5d:eb:3a:14:5b:89:d7:a5:c9:39:f7:4f:5e:15:
8e:55:a1:e7:bd:f1:da:2f:8e:5a:03:a2:03:e7:3b:
88:f4:69:58:62:92:af:94:97:81:65:bc:9f:82:50:
26:6a:c1:35:4f:ab:2b:30:79:48:88:e3:ba:90:f5:
c2:3c:fc:a6:36:da:09:37:c1:03:5d:2f:a6:5e:8b:
cf:eb:1b:86:5a:7c:b0:73:98:7f:a6:ac:e1:3a:9e:
97:1e:c8:a8:fc:d7:a4:f2:b6:10:1a:4a:3e:3c:c7:
5b:7f:61:16:e9:0b:f2:eb:1a:5d:a4:ad:45:3e:00:
29:b5:dc:c8:96:3a:de:66:71:e2:d1:7a:0f:aa:e1:
51:f2:ec:b7:4d:18:b7:8a:2d:e0:c2:b7:be:e4:7e:
09:5a:ca:12:23:8a:de:75:e1:11:18:d0:f5:69:cc:
57:06:bc:3f:d9:cb:5a:e3:74:67:f1:1b:09:d1:b9:
8e:52:c2:b9:99:47:7a:a0:fb:47:08:8b:54:32:6c:
de:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:03:7C:B3:E0:CA:8B:62:D4:AF:D9:CC:6B:28:2A:B2:2E:55:27:A4
X509v3 Authority Key Identifier:
keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ca:95:bd:cb:6a:7b:6c:06:b1:33:75:76:3c:20:a2:f3:81:
f6:f1:b1:5f:7e:c0:80:ed:7f:b6:3e:56:70:c6:15:17:75:f4:
97:b7:2e:d3:e5:f6:c0:6f:f7:cd:ee:87:75:69:3b:c4:8b:72:
a9:1f:86:8d:c5:03:31:5e:4b:38:b1:90:6e:e8:e5:a1:a2:cb:
3d:2e:60:93:c1:14:13:d7:09:a2:c6:e3:66:08:54:ed:9a:76:
07:4a:35:7c:ef:81:3f:ee:42:58:98:53:19:00:96:68:7f:a8:
51:71:f5:0f:47:94:4d:66:f5:e2:65:d2:9d:38:9f:b2:a3:e2:
a4:af:a6:90:6a:22:6f:4b:06:03:6f:ff:a1:94:a3:01:7d:ea:
a6:85:b2:20:9f:70:60:aa:8b:10:c2:40:e2:ba:11:9e:20:9c:
3d:21:09:fe:8b:4b:03:65:98:ad:3f:9b:2e:b1:48:50:9d:3e:
96:9e:9f:a5:3d:c1:b1:21:79:84:38:d3:42:eb:f0:16:63:26:
b4:c7:4a:c4:44:0d:a7:26:97:34:3b:9e:8e:3e:65:8b:c5:61:
f5:1a:31:64:89:9d:9e:c6:bb:ea:18:88:f9:65:10:3c:a8:cb:
b2:30:ae:65:f8:6c:41:f5:9d:b7:7e:ec:29:07:56:e2:22:5c:
df:7d:d3:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIITuGxlpNgBWRtwol9HnVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYzkxMmEwNDExYmIwMTc0NTA3MDkyZDBjYTM1YTkxYWQ3
OTkwNWMwHhcNMjYwOTIyMDgwMDE2WhcNMjYwOTIzMDgwMDE2WjAzMTEwLwYDVQQD
EygyOTAzN2NiM2UwY2E4YjYyZDRhZmQ5Y2M2YjI4MmFiMjJlNTUyN2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqElOCqauM4DBFzAp09LzglgM4TW
KMLYH7HKTjHg4MEP2RaJ/UaX6wM27v6K9LwzFdWiouHNPH7T7/UtXes6FFuJ16XJ
OfdPXhWOVaHnvfHaL45aA6ID5zuI9GlYYpKvlJeBZbyfglAmasE1T6srMHlIiOO6
kPXCPPymNtoJN8EDXS+mXovP6xuGWnywc5h/pqzhOp6XHsio/Nek8rYQGko+PMdb
f2EW6Qvy6xpdpK1FPgAptdzIljreZnHi0XoPquFR8uy3TRi3ii3gwre+5H4JWsoS
I4redeERGND1acxXBrw/2cta43Rn8RsJ0bmOUsK5mUd6oPtHCItUMmzedwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkDfLPgyoti1K/ZzGsoKrIuVSekMB8GA1UdIwQY
MBaAFFPJEqBBG7AXRQcJLQyjWpGteZBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVThrU29FRWJzQmRGQndrdERLTmFrYTE1a0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9kNzdlNjAtODkxNi00Zjk2LThlZDAt
ZTIxYzQzNmI2MmVmLzEvVThrU29FRWJzQmRGQndrdERLTmFrYTE1a0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9kNzdlNjAtODkxNi00Zjk2LThlZDAtZTIxYzQzNmI2MmVm
LzEvVThrU29FRWJzQmRGQndrdERLTmFrYTE1a0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZMqVvctq
e2wGsTN1djwgovOB9vGxX37AgO1/tj5WcMYVF3X0l7cu0+X2wG/3ze6HdWk7xIty
qR+GjcUDMV5LOLGQbujloaLLPS5gk8EUE9cJosbjZghU7Zp2B0o1fO+BP+5CWJhT
GQCWaH+oUXH1D0eUTWb14mXSnTifsqPipK+mkGoib0sGA2//oZSjAX3qpoWyIJ9w
YKqLEMJA4roRniCcPSEJ/otLA2WYrT+bLrFIUJ0+lp6fpT3BsSF5hDjTQuvwFmMm
tMdKxEQNpyaXNDuejj5li8Vh9RoxZImdnsa76hiI+WUQPKjLsjCuZfhsQfWdt37s
KQdW4iJc333TtA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:33:47 2026 by rpki-client