Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
File: U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft (raw, json)
Hash identifier: fdLbYGaHX28+FX3/6BBaj+yWWxkj+2//YvXJp9QJet4=
Subject key identifier: 93:84:90:CD:F5:49:46:A2:BE:2D:0D:B4:0C:AB:49:E2:F7:E9:0E:1F
Authority key identifier: 53:BF:98:D5:35:22:AA:95:70:81:FD:EC:28:B1:72:08:43:94:F1:12
Certificate issuer: /CN=53bf98d53522aa957081fdec28b172084394f112
Certificate serial: 019CAB6B80E095F56E2C85E7C3EC14D7FFAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
Manifest number: 105C
Signing time: Sun 01 Mar 2026 22:01:15 +0000
Manifest this update: Sun 01 Mar 2026 22:01:15 +0000
Manifest next update: Mon 02 Mar 2026 22:01:15 +0000
Files and hashes: 1: U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl (hash: 49aofpipB0b7PS9CiYb4u8FRJpx94RyMbM74T8yROvM=)
2: mK9jBg2iFuywF6JUAww3mxKLxCU.roa (hash: lk8hbAdLVuILHrw42c6HMnMUPa/ZOyLXrol4InQSdq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:80:e0:95:f5:6e:2c:85:e7:c3:ec:14:d7:ff:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bf98d53522aa957081fdec28b172084394f112
Validity
Not Before: Mar 1 22:01:15 2026 GMT
Not After : Mar 2 22:01:15 2026 GMT
Subject: CN=938490cdf54946a2be2d0db40cab49e2f7e90e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ee:dd:54:1a:0e:b2:af:85:3c:a9:b9:5f:21:
6f:f8:f0:1f:45:89:dc:bb:6c:96:2e:5d:66:c1:a4:
85:07:03:cf:1f:af:d2:dd:38:08:0c:4a:79:47:b2:
78:8d:82:1c:00:f6:9a:d9:cf:fe:a0:dd:e9:fa:b5:
69:c3:67:8d:c8:11:ef:3d:f6:11:b3:ff:8e:32:9f:
8e:be:68:27:8a:46:8e:2c:06:73:8f:06:d4:db:55:
cc:f7:43:24:55:81:e3:cd:db:42:41:dd:a6:03:35:
fd:37:62:b8:24:8c:77:5f:67:07:0a:35:24:ad:f9:
ae:6b:fd:30:b9:0e:21:ae:51:27:e9:b7:e5:b6:93:
10:d2:ae:8f:70:56:d3:6a:7e:f2:25:5b:79:fa:1c:
93:89:30:4a:d8:52:81:f8:0d:f3:49:49:c6:b9:2e:
3f:a8:33:49:19:d2:a6:a4:eb:58:a5:2d:32:5e:7c:
2f:7f:b1:b1:94:7e:65:dd:f9:10:fe:e4:5d:e7:b3:
dd:dc:f9:25:06:e1:3b:3c:0d:31:c8:5c:99:e2:91:
24:02:75:a9:d7:f4:ec:5e:71:56:52:62:89:b2:23:
a2:3e:25:9e:c5:eb:4f:88:0b:17:7b:e9:ef:22:81:
93:c7:d7:79:91:c3:5f:b7:74:b5:5a:f7:b7:cd:0d:
40:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:84:90:CD:F5:49:46:A2:BE:2D:0D:B4:0C:AB:49:E2:F7:E9:0E:1F
X509v3 Authority Key Identifier:
keyid:53:BF:98:D5:35:22:AA:95:70:81:FD:EC:28:B1:72:08:43:94:F1:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:6c:da:02:34:65:99:4e:fc:bc:4a:61:22:57:84:7b:ab:ed:
4b:88:b1:2e:83:2d:08:c1:10:04:cf:58:c3:89:d8:19:64:3a:
5c:97:ef:57:29:4a:e1:56:9e:37:0d:6d:d8:9a:f2:53:6d:26:
94:df:60:2b:bc:17:dc:34:e9:ba:fe:4c:a0:1f:b7:02:d8:e5:
46:c1:25:ee:6d:ea:ae:5d:85:5b:03:9e:56:83:c4:47:5b:16:
fa:98:e2:d5:9d:17:73:06:0a:01:81:6c:51:74:48:d5:f8:58:
f1:eb:c6:0d:37:bf:31:d7:de:75:b6:c1:a7:e2:bb:1e:f7:54:
59:de:e6:86:ef:b5:6e:d6:18:db:fe:47:03:37:02:8c:a7:f9:
99:95:5f:06:d0:63:1b:ba:dd:dd:34:b5:22:f6:ee:4d:70:86:
3c:28:ac:98:22:ca:a5:c7:e2:33:94:85:36:ef:fd:55:e7:53:
b7:e6:6e:c6:76:f2:95:d8:1f:92:5c:3f:50:ae:53:a2:f7:4a:
b0:28:45:6f:20:4b:67:4d:0f:0a:66:1a:b3:f9:bf:7c:1d:f9:
cb:96:df:5d:76:39:59:89:49:0b:4d:c9:24:79:b2:2e:43:d7:
94:77:25:4e:13:fe:68:ed:cc:8e:fb:c3:bc:78:d0:01:4e:19:
f7:cb:7e:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra4DglfVuLIXnw+wU1/+qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYmY5OGQ1MzUyMmFhOTU3MDgxZmRlYzI4YjE3MjA4NDM5
NGYxMTIwHhcNMjYwMzAxMjIwMTE1WhcNMjYwMzAyMjIwMTE1WjAzMTEwLwYDVQQD
Eyg5Mzg0OTBjZGY1NDk0NmEyYmUyZDBkYjQwY2FiNDllMmY3ZTkwZTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe7dVBoOsq+FPKm5XyFv+PAfRYnc
u2yWLl1mwaSFBwPPH6/S3TgIDEp5R7J4jYIcAPaa2c/+oN3p+rVpw2eNyBHvPfYR
s/+OMp+OvmgnikaOLAZzjwbU21XM90MkVYHjzdtCQd2mAzX9N2K4JIx3X2cHCjUk
rfmua/0wuQ4hrlEn6bfltpMQ0q6PcFbTan7yJVt5+hyTiTBK2FKB+A3zSUnGuS4/
qDNJGdKmpOtYpS0yXnwvf7GxlH5l3fkQ/uRd57Pd3PklBuE7PA0xyFyZ4pEkAnWp
1/TsXnFWUmKJsiOiPiWexetPiAsXe+nvIoGTx9d5kcNft3S1Wve3zQ1ADwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOEkM31SUaivi0NtAyrSeL36Q4fMB8GA1UdIwQY
MBaAFFO/mNU1IqqVcIH97CixcghDlPESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTctWTFUVWlxcFZ3Z2Yzc0tMRnlDRU9VOFJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wNjNiMWItN2JkZS00OGNjLWIxYWMt
ZmFkNzA3ZDljNGY2LzEvVTctWTFUVWlxcFZ3Z2Yzc0tMRnlDRU9VOFJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wNjNiMWItN2JkZS00OGNjLWIxYWMtZmFkNzA3ZDljNGY2
LzEvVTctWTFUVWlxcFZ3Z2Yzc0tMRnlDRU9VOFJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt2zaAjRl
mU78vEphIleEe6vtS4ixLoMtCMEQBM9Yw4nYGWQ6XJfvVylK4VaeNw1t2JryU20m
lN9gK7wX3DTpuv5MoB+3AtjlRsEl7m3qrl2FWwOeVoPER1sW+pji1Z0XcwYKAYFs
UXRI1fhY8evGDTe/MdfedbbBp+K7HvdUWd7mhu+1btYY2/5HAzcCjKf5mZVfBtBj
G7rd3TS1IvbuTXCGPCismCLKpcfiM5SFNu/9VedTt+Zuxnbyldgfklw/UK5TovdK
sChFbyBLZ00PCmYas/m/fB35y5bfXXY5WYlJC03JJHmyLkPXlHclThP+aO3MjvvD
vHjQAU4Z98t++g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:43:04 2026 by rpki-client