Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
File: U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft (raw, json)
Hash identifier: 1Qv8n20O5B0Jxgvq6BV5mLh0feMFLtzh/j7yMh+RKbg=
Subject key identifier: CE:49:F2:0D:45:7B:B7:33:95:D4:3E:E2:3E:CD:1E:B5:17:C1:E9:5F
Authority key identifier: 53:E3:AE:DD:91:BE:82:45:13:42:DC:D1:C9:82:83:45:DB:66:1A:5F
Certificate issuer: /CN=53e3aedd91be82451342dcd1c9828345db661a5f
Certificate serial: 019FACE4911D5F0845AF4D90746E88BEB2BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
Manifest number: 0C60
Signing time: Wed 29 Jul 2026 08:01:28 +0000
Manifest this update: Wed 29 Jul 2026 08:01:28 +0000
Manifest next update: Thu 30 Jul 2026 08:01:28 +0000
Files and hashes: 1: U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl (hash: ug0Ip3y2D9TX266qcYn98DcU01KjJLhkVRpkXDBeT74=)
2: d4Z8dyEwWVlK-z1Mt82VdRZaIcY.roa (hash: pNguw2qBCLAYUuPZ0wVkI6YbP099kM2Xh8UMvqT4t9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:91:1d:5f:08:45:af:4d:90:74:6e:88:be:b2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53e3aedd91be82451342dcd1c9828345db661a5f
Validity
Not Before: Jul 29 08:01:28 2026 GMT
Not After : Jul 30 08:01:28 2026 GMT
Subject: CN=ce49f20d457bb73395d43ee23ecd1eb517c1e95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f1:63:7b:07:a8:69:1c:9b:be:76:4c:0d:43:
f7:47:1a:ea:ed:21:a2:02:f8:73:54:4f:ce:84:e1:
0f:bf:38:be:d9:28:de:c8:62:b0:12:fc:fb:db:73:
32:53:d0:fa:18:2d:85:f4:f9:5f:f3:7c:95:21:12:
d4:2b:3e:0d:14:05:b0:e0:f3:7d:49:1b:45:9c:49:
3d:7a:b9:9a:c3:72:d6:0b:cb:2f:71:25:b5:be:7f:
ad:29:94:6b:c4:38:14:ee:12:e2:89:fb:df:9a:ae:
fe:bb:81:05:b3:2e:b0:b0:c1:f4:93:8a:00:a3:8f:
97:50:db:93:5f:ab:f8:4f:07:98:a2:30:20:82:73:
34:89:ac:f4:21:c7:e8:69:44:08:18:34:d5:63:f7:
46:6a:f8:ef:c9:e2:ca:de:fa:4f:71:3a:a4:7c:d9:
97:a2:d6:a5:71:ee:fc:bf:6a:e1:7b:3b:be:3e:66:
a9:01:a4:f2:5b:5d:db:97:e7:e2:81:68:f3:5e:54:
7b:d6:08:62:0e:55:bc:14:fb:dc:ed:65:7a:cb:1b:
50:84:a6:a3:d8:d2:1f:f7:dc:b6:df:de:6d:77:6e:
e8:d7:f6:53:d6:78:39:4f:9e:5b:9a:09:c3:a9:4d:
20:d1:0c:a0:83:8b:e3:d5:bc:f9:16:71:a9:f9:68:
0d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:49:F2:0D:45:7B:B7:33:95:D4:3E:E2:3E:CD:1E:B5:17:C1:E9:5F
X509v3 Authority Key Identifier:
keyid:53:E3:AE:DD:91:BE:82:45:13:42:DC:D1:C9:82:83:45:DB:66:1A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:cc:92:fa:e4:8e:24:e1:5d:c3:e4:9b:77:2d:33:fa:a1:cc:
e0:fa:17:c7:da:1e:5f:03:e7:8f:41:b5:ef:3d:6f:78:4e:f3:
2a:b6:f2:03:98:3e:fc:41:ca:98:47:d4:04:80:7f:c2:20:ea:
c4:14:09:bb:6e:07:48:ae:a2:70:18:2c:7b:57:63:8d:77:fc:
96:10:b6:cd:e6:d8:e4:ad:57:27:1b:67:3a:2d:12:bc:d5:f2:
eb:2d:f1:1d:32:11:3c:55:3d:d1:49:5f:a8:ad:ed:e9:e1:de:
f2:06:b4:83:98:bc:ed:de:ed:ce:8a:ce:4c:05:fc:c5:6b:32:
f6:fc:2e:a5:d1:1c:cd:4a:f4:b8:95:b2:42:d3:ad:4c:c0:13:
7b:a1:2c:da:d1:b6:e3:7e:5b:4a:c3:99:e1:bb:88:9d:1f:d0:
b0:5e:a6:22:45:38:2b:14:67:23:a4:6f:3d:6e:da:ee:f1:8e:
30:db:d1:5f:3f:ed:34:1f:10:d0:55:95:ee:f1:51:ef:84:d4:
f0:25:6a:62:6b:0b:b5:71:82:68:e7:25:fd:c6:4e:92:d9:9a:
4d:34:14:01:1b:d0:7f:13:c9:e0:d4:d2:77:07:ff:db:82:fe:
26:ce:0e:61:18:b3:21:f9:06:dc:a1:71:33:e7:fa:c3:da:80:
02:f6:4c:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+s5JEdXwhFr02QdG6IvrK/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZTNhZWRkOTFiZTgyNDUxMzQyZGNkMWM5ODI4MzQ1ZGI2
NjFhNWYwHhcNMjYwNzI5MDgwMTI4WhcNMjYwNzMwMDgwMTI4WjAzMTEwLwYDVQQD
EyhjZTQ5ZjIwZDQ1N2JiNzMzOTVkNDNlZTIzZWNkMWViNTE3YzFlOTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofFjeweoaRybvnZMDUP3Rxrq7SGi
AvhzVE/OhOEPvzi+2SjeyGKwEvz723MyU9D6GC2F9Plf83yVIRLUKz4NFAWw4PN9
SRtFnEk9ermaw3LWC8svcSW1vn+tKZRrxDgU7hLiifvfmq7+u4EFsy6wsMH0k4oA
o4+XUNuTX6v4TweYojAggnM0iaz0IcfoaUQIGDTVY/dGavjvyeLK3vpPcTqkfNmX
otalce78v2rhezu+PmapAaTyW13bl+figWjzXlR71ghiDlW8FPvc7WV6yxtQhKaj
2NIf99y2395td27o1/ZT1ng5T55bmgnDqU0g0Qygg4vj1bz5FnGp+WgNBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5J8g1Fe7czldQ+4j7NHrUXwelfMB8GA1UdIwQY
MBaAFFPjrt2RvoJFE0Lc0cmCg0XbZhpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVS1PdTNaRy1na1VUUXR6UnlZS0RSZHRtR2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wNGU4YjItYzc2Zi00NjI5LTk1YWQt
YTdkOTQ1YWYxNGU1LzEvVS1PdTNaRy1na1VUUXR6UnlZS0RSZHRtR2w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8wNGU4YjItYzc2Zi00NjI5LTk1YWQtYTdkOTQ1YWYxNGU1
LzEvVS1PdTNaRy1na1VUUXR6UnlZS0RSZHRtR2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn8yS+uSO
JOFdw+Sbdy0z+qHM4PoXx9oeXwPnj0G17z1veE7zKrbyA5g+/EHKmEfUBIB/wiDq
xBQJu24HSK6icBgse1djjXf8lhC2zebY5K1XJxtnOi0SvNXy6y3xHTIRPFU90Ulf
qK3t6eHe8ga0g5i87d7tzorOTAX8xWsy9vwupdEczUr0uJWyQtOtTMATe6Es2tG2
435bSsOZ4buInR/QsF6mIkU4KxRnI6RvPW7a7vGOMNvRXz/tNB8Q0FWV7vFR74TU
8CVqYmsLtXGCaOcl/cZOktmaTTQUARvQfxPJ4NTSdwf/24L+Js4OYRizIfkG3KFx
M+f6w9qAAvZMGg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:35:47 2026 by rpki-client