Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
File: UYje2s3CQLSy94bxI0LgqD2K6A8.mft (raw, json)
Hash identifier: XDWHr5BSjc6HOuR/2ydnERhlbWADjBYsBkjJBcRN7mI=
Subject key identifier: B2:B5:CE:E3:13:43:77:98:52:B9:AF:C5:9D:52:E8:11:DE:CE:24:65
Authority key identifier: 51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
Certificate issuer: /CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Certificate serial: 01A0D124ACC578268B10CD1EC9719F4D8CF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
Manifest number: 1A77
Signing time: Thu 24 Sep 2026 02:00:36 +0000
Manifest this update: Thu 24 Sep 2026 02:00:36 +0000
Manifest next update: Fri 25 Sep 2026 02:00:36 +0000
Files and hashes: 1: UYje2s3CQLSy94bxI0LgqD2K6A8.crl (hash: Y49McjlSjK/LpH7FT46p/uXu++2V8j9zl4514G99hik=)
2: c9MRmnhU7G5UbCBGEHdpLFzsaXY.roa (hash: lmKAJaGimhpXG3IgAt2SCEHhEUBaeY2YUPKf/h17Txk=)
3: y1DTp2rwk07pO-FFEpxBdt4lOAI.roa (hash: RyVjgq9r229KujgssDD8ON6aKi9KzAQn4Dy7pqoxpgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:ac:c5:78:26:8b:10:cd:1e:c9:71:9f:4d:8c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Validity
Not Before: Sep 24 02:00:36 2026 GMT
Not After : Sep 25 02:00:36 2026 GMT
Subject: CN=b2b5cee31343779852b9afc59d52e811dece2465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:23:0c:fb:de:a9:d6:56:9b:87:b0:09:e8:12:
7d:fb:8d:8e:1d:dd:68:d0:37:fb:de:cb:a9:cc:d2:
54:58:a1:92:1c:f9:3e:57:0a:a5:46:f1:89:91:eb:
18:c2:96:9b:ab:d4:7a:b4:08:09:26:eb:8a:3c:8c:
94:b3:1f:60:aa:6e:26:53:45:08:50:49:a4:6d:38:
76:3e:a2:54:f0:43:97:c7:e8:2a:68:f3:c8:50:13:
87:86:74:35:4a:1c:f6:ae:fd:9a:d3:03:e1:1b:fc:
96:98:69:d6:80:d2:df:cb:0f:8a:3a:25:60:44:ab:
14:c6:20:23:59:04:23:40:59:cf:e1:a2:94:98:3f:
38:4e:56:82:0d:65:5f:c5:0c:34:4a:e1:b0:79:4f:
5f:be:43:9f:2f:e2:70:63:df:03:06:d9:d1:34:4f:
4a:bf:f6:1c:8f:cd:31:0a:4d:c9:81:b9:f1:95:e1:
46:39:df:c7:4f:c9:16:d1:04:2d:be:1e:83:dd:1b:
e1:0b:9f:34:f4:cf:cf:fb:da:1f:a4:6b:1a:ac:3d:
f9:ec:62:26:6c:9f:d2:91:a4:e5:b1:a5:c9:dd:7c:
2b:c2:4b:31:de:81:e8:cd:05:8f:56:6f:b6:0f:0b:
d3:c0:c6:47:f4:a6:c1:2c:7c:0d:5a:95:e3:b1:b5:
84:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B5:CE:E3:13:43:77:98:52:B9:AF:C5:9D:52:E8:11:DE:CE:24:65
X509v3 Authority Key Identifier:
keyid:51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1e:e6:41:88:b9:09:f8:1c:bc:94:10:8d:90:df:11:4e:4f:
4e:e3:1b:be:81:e9:c2:c6:7f:ca:60:58:8a:5b:2a:69:96:03:
04:bb:a8:ce:2b:4a:d5:b4:85:75:9b:d9:21:da:c7:35:e6:ef:
5a:13:c5:26:a5:86:2e:88:3c:d5:f5:78:07:a2:4b:78:19:ed:
f7:12:30:98:6c:16:b7:ae:bd:ed:e3:39:88:2e:f5:80:65:90:
5c:1a:0c:6e:f6:15:2d:be:8b:5b:5f:80:38:2e:a6:09:99:c3:
85:c0:d3:23:60:0e:03:0d:5d:d9:fa:af:bc:1b:dc:84:c1:57:
fb:77:e4:48:08:3f:63:4e:c8:85:cd:94:bf:76:e4:63:5b:27:
1d:c7:8e:f2:d0:b3:55:08:a9:68:b3:1c:32:4a:5d:56:8d:e9:
7c:22:8f:fc:fb:73:b1:1a:cb:ba:6a:df:b8:09:3c:bf:e9:b3:
85:bd:92:5b:88:a3:e0:fa:9d:70:02:f7:11:f0:0e:a2:c2:37:
b4:9b:d8:2d:ff:8f:65:f0:3e:bf:7e:45:43:df:ac:ad:8c:e4:
ed:94:28:29:21:b0:a0:ed:b0:b2:2b:64:b3:f5:91:e8:0a:e6:
cb:c7:be:4b:87:c7:e5:cd:46:f6:73:93:2c:a8:25:d0:db:d0:
6d:52:0e:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRJKzFeCaLEM0eyXGfTYz3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxODhkZWRhY2RjMjQwYjRiMmY3ODZmMTIzNDJlMGE4M2Q4
YWU4MGYwHhcNMjYwOTI0MDIwMDM2WhcNMjYwOTI1MDIwMDM2WjAzMTEwLwYDVQQD
EyhiMmI1Y2VlMzEzNDM3Nzk4NTJiOWFmYzU5ZDUyZTgxMWRlY2UyNDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSMM+96p1labh7AJ6BJ9+42OHd1o
0Df73supzNJUWKGSHPk+VwqlRvGJkesYwpabq9R6tAgJJuuKPIyUsx9gqm4mU0UI
UEmkbTh2PqJU8EOXx+gqaPPIUBOHhnQ1Shz2rv2a0wPhG/yWmGnWgNLfyw+KOiVg
RKsUxiAjWQQjQFnP4aKUmD84TlaCDWVfxQw0SuGweU9fvkOfL+JwY98DBtnRNE9K
v/Ycj80xCk3JgbnxleFGOd/HT8kW0QQtvh6D3RvhC5809M/P+9ofpGsarD357GIm
bJ/SkaTlsaXJ3Xwrwksx3oHozQWPVm+2DwvTwMZH9KbBLHwNWpXjsbWE/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLK1zuMTQ3eYUrmvxZ1S6BHeziRlMB8GA1UdIwQY
MBaAFFGI3trNwkC0sveG8SNC4Kg9iugPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVlqZTJzM0NRTFN5OTRieEkwTGdxRDJLNkE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xZmFhM2UtODg0Yy00NDVmLTg0NWQt
NzliM2RiNjU5ZGZjLzEvVVlqZTJzM0NRTFN5OTRieEkwTGdxRDJLNkE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xZmFhM2UtODg0Yy00NDVmLTg0NWQtNzliM2RiNjU5ZGZj
LzEvVVlqZTJzM0NRTFN5OTRieEkwTGdxRDJLNkE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWB7mQYi5
CfgcvJQQjZDfEU5PTuMbvoHpwsZ/ymBYilsqaZYDBLuozitK1bSFdZvZIdrHNebv
WhPFJqWGLog81fV4B6JLeBnt9xIwmGwWt6697eM5iC71gGWQXBoMbvYVLb6LW1+A
OC6mCZnDhcDTI2AOAw1d2fqvvBvchMFX+3fkSAg/Y07Ihc2Uv3bkY1snHceO8tCz
VQipaLMcMkpdVo3pfCKP/PtzsRrLumrfuAk8v+mzhb2SW4ij4PqdcAL3EfAOosI3
tJvYLf+PZfA+v35FQ9+srYzk7ZQoKSGwoO2wsitks/WR6Army8e+S4fH5c1G9nOT
LKgl0NvQbVIOcw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:18:32 2026 by rpki-client