Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
File: U6EliQpK8JJFWrx7tav-SM2FLAY.mft (raw, json)
Hash identifier: b6ABVCfp8Z2OU0XUcpqIW3XRFZMy5/hG7j8zGWJ8QAI=
Subject key identifier: CE:05:5B:87:11:71:6B:44:A4:61:F4:2C:9D:53:D8:5C:20:00:01:E5
Authority key identifier: 53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
Certificate issuer: /CN=53a125890a4af092455abc7bb5abfe48cd852c06
Certificate serial: 01A0CDB57D0F41D91F57EB6844B9412970BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
Manifest number: 0AAA
Signing time: Wed 23 Sep 2026 10:00:18 +0000
Manifest this update: Wed 23 Sep 2026 10:00:18 +0000
Manifest next update: Thu 24 Sep 2026 10:00:18 +0000
Files and hashes: 1: 8otHkib5_3i41JyAw70LeXUh0QU.roa (hash: 0qAK41CxT/RWAwJIryforayLl8dembnwnfhhCABuNu8=)
2: GYkAYH4GlgFxJb3HfEIiU4VdRLs.roa (hash: mPmyrDhwtpph0YzGy8Rd73AkujDJmoGuUoDG6KNajn8=)
3: U6EliQpK8JJFWrx7tav-SM2FLAY.crl (hash: sSKVxVHkCqGQYmntjU/qEu/KlmeVBxNNYzw3//qeMBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:7d:0f:41:d9:1f:57:eb:68:44:b9:41:29:70:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a125890a4af092455abc7bb5abfe48cd852c06
Validity
Not Before: Sep 23 10:00:18 2026 GMT
Not After : Sep 24 10:00:18 2026 GMT
Subject: CN=ce055b8711716b44a461f42c9d53d85c200001e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c9:69:ab:ee:21:53:8b:5f:f6:bf:e0:03:60:
ea:82:69:50:42:5b:70:e9:66:4d:aa:78:21:1d:fd:
59:1c:3d:a8:fc:45:2f:db:dd:af:bf:c0:1c:00:e6:
3a:50:25:77:9b:c6:b2:be:f0:fb:26:ff:63:1b:19:
91:84:ea:8d:c6:a4:f5:fe:34:20:41:b8:4b:c8:49:
55:d7:1e:d1:ba:e7:af:c6:ce:4b:7e:00:a2:93:39:
aa:43:fb:3c:a7:31:73:ac:2e:21:9f:51:e2:30:86:
7f:69:21:e5:50:eb:db:57:a7:86:c7:5a:7a:dc:89:
a9:da:8b:09:50:df:a6:6e:f2:a1:3d:d1:ea:a1:71:
e8:b5:bb:90:95:28:a9:a9:ad:bb:99:50:38:08:47:
b7:89:90:7d:75:3d:84:90:1b:68:54:82:55:43:cb:
16:81:a7:14:30:ed:7f:84:4e:0a:ba:42:f2:cd:8a:
5f:37:98:34:c6:0c:88:02:ec:13:92:e3:da:84:fc:
e6:75:7b:bf:94:23:3a:17:0c:06:55:31:53:25:02:
e3:c6:5b:98:95:70:3c:ee:48:86:cd:c3:d6:46:05:
8e:93:21:a3:b2:f4:d6:28:85:9b:b6:ac:b6:03:be:
20:78:52:fc:ef:29:79:2f:59:ab:59:21:14:05:bd:
f0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:05:5B:87:11:71:6B:44:A4:61:F4:2C:9D:53:D8:5C:20:00:01:E5
X509v3 Authority Key Identifier:
keyid:53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b8:82:f5:46:56:8f:da:32:8b:2e:fa:e8:4a:0a:af:92:5b:
d3:e4:14:cb:95:50:de:23:c6:3f:8c:8b:95:13:9e:26:e7:10:
af:ef:a3:c1:c6:9f:2b:93:cf:8b:c8:ed:d1:56:79:a0:ff:16:
55:83:b0:e6:2a:82:f6:a5:e6:ad:8d:3c:07:36:78:d7:7e:b3:
83:0b:8f:94:97:3f:86:d1:c9:05:c4:d2:0d:83:82:c3:5b:58:
29:61:09:b0:a6:92:c5:4f:d7:c7:fe:4b:21:73:f4:2d:80:ba:
e0:04:42:fe:8a:15:7e:bf:8a:31:1f:39:f2:35:92:91:da:fe:
06:ad:f9:aa:00:0c:6d:f5:06:d7:7b:62:ef:c7:81:91:28:e0:
6a:8d:cd:46:cc:a9:aa:8a:01:bd:0c:47:c7:e8:8f:98:45:e3:
ea:1f:7b:d1:a4:5e:63:00:27:60:d9:98:97:ca:06:b5:9b:fd:
39:8f:c1:05:2e:6d:ef:0c:ee:55:80:37:b7:43:bd:f4:31:f6:
7a:88:4a:27:ee:4c:32:06:d5:7e:85:85:97:15:81:ad:96:8d:
7b:29:36:5c:a0:65:87:c9:b8:4e:28:11:44:95:13:00:d1:ac:
7a:71:e1:44:cb:1b:b5:23:16:ad:5b:d7:da:31:ff:82:e6:e6:
2c:90:a9:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNtX0PQdkfV+toRLlBKXC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYTEyNTg5MGE0YWYwOTI0NTVhYmM3YmI1YWJmZTQ4Y2Q4
NTJjMDYwHhcNMjYwOTIzMTAwMDE4WhcNMjYwOTI0MTAwMDE4WjAzMTEwLwYDVQQD
EyhjZTA1NWI4NzExNzE2YjQ0YTQ2MWY0MmM5ZDUzZDg1YzIwMDAwMWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8lpq+4hU4tf9r/gA2DqgmlQQltw
6WZNqnghHf1ZHD2o/EUv292vv8AcAOY6UCV3m8ayvvD7Jv9jGxmRhOqNxqT1/jQg
QbhLyElV1x7Ruuevxs5LfgCikzmqQ/s8pzFzrC4hn1HiMIZ/aSHlUOvbV6eGx1p6
3Imp2osJUN+mbvKhPdHqoXHotbuQlSipqa27mVA4CEe3iZB9dT2EkBtoVIJVQ8sW
gacUMO1/hE4KukLyzYpfN5g0xgyIAuwTkuPahPzmdXu/lCM6FwwGVTFTJQLjxluY
lXA87kiGzcPWRgWOkyGjsvTWKIWbtqy2A74geFL87yl5L1mrWSEUBb3whQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4FW4cRcWtEpGH0LJ1T2FwgAAHlMB8GA1UdIwQY
MBaAFFOhJYkKSvCSRVq8e7Wr/kjNhSwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTZFbGlRcEs4SkpGV3J4N3Rhdi1TTTJGTEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82MmZmNzEtYzRmMi00OTI5LTg4OTkt
YzM4MzMwY2JkOTY1LzEvVTZFbGlRcEs4SkpGV3J4N3Rhdi1TTTJGTEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi82MmZmNzEtYzRmMi00OTI5LTg4OTktYzM4MzMwY2JkOTY1
LzEvVTZFbGlRcEs4SkpGV3J4N3Rhdi1TTTJGTEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkriC9UZW
j9oyiy766EoKr5Jb0+QUy5VQ3iPGP4yLlROeJucQr++jwcafK5PPi8jt0VZ5oP8W
VYOw5iqC9qXmrY08BzZ4136zgwuPlJc/htHJBcTSDYOCw1tYKWEJsKaSxU/Xx/5L
IXP0LYC64ARC/ooVfr+KMR858jWSkdr+Bq35qgAMbfUG13ti78eBkSjgao3NRsyp
qooBvQxHx+iPmEXj6h970aReYwAnYNmYl8oGtZv9OY/BBS5t7wzuVYA3t0O99DH2
eohKJ+5MMgbVfoWFlxWBrZaNeyk2XKBlh8m4TigRRJUTANGsenHhRMsbtSMWrVvX
2jH/gubmLJCpIg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 18:22:22 2026 by rpki-client