Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
File: u__RI8uT4k4CX5UoQhCEApWNSkw.mft (raw, json)
Hash identifier: +n9cQxGPjmTD7k+jj5Nf3FseNVdUv9aG9CqPCtVMIMI=
Subject key identifier: A0:C0:9A:7A:9A:0B:35:AC:44:A9:A2:88:7F:C9:6B:CA:0D:F6:10:CE
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial: 019EC06E495CD4ECB9691CEA99FFECAE1AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
Manifest number: 17AF
Signing time: Sat 13 Jun 2026 10:01:53 +0000
Manifest this update: Sat 13 Jun 2026 10:01:53 +0000
Manifest next update: Sun 14 Jun 2026 10:01:53 +0000
Files and hashes: 1: e9599L9ny9UV4AthdrySgjWWRfY.roa (hash: w2tYDeATkvXbeHWaWyKizc90tHXCmX/rUf5tN2rCNto=)
2: jaE8nn1rO58pvqUua1UrZ-d0dAA.roa (hash: Sx5Ur+2c1QVItDTXbKf1TR4pTl+o+P/WqOx/ljx3+2U=)
3: u__RI8uT4k4CX5UoQhCEApWNSkw.crl (hash: tsqmwpf6eF4o74gIxlRvSOmImihuNLmtTs4IfghqVwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6e:49:5c:d4:ec:b9:69:1c:ea:99:ff:ec:ae:1a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
Validity
Not Before: Jun 13 10:01:53 2026 GMT
Not After : Jun 14 10:01:53 2026 GMT
Subject: CN=a0c09a7a9a0b35ac44a9a2887fc96bca0df610ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:67:83:26:25:fb:57:6d:10:3e:63:37:91:81:
13:2d:94:b5:cc:3c:95:1d:ce:ae:a4:81:03:46:68:
8c:1a:e0:6e:f6:e2:5d:dd:50:16:ef:45:f7:14:e5:
e1:0c:e9:29:1f:2a:99:ac:22:4c:f8:c5:4d:c4:ab:
eb:78:7f:8a:fd:88:28:db:f7:9d:d2:75:34:44:8c:
39:37:ec:78:cc:62:f7:6c:0e:c4:a3:5b:02:83:4b:
17:a6:eb:03:f6:a3:c8:de:b8:ff:10:47:a0:8c:38:
15:60:1a:03:6c:64:76:d9:bc:e8:9d:32:c9:59:f3:
36:f9:f2:6b:80:37:1d:7c:b8:d6:2c:2b:34:57:4b:
43:3c:d9:62:34:72:16:23:a2:ef:ff:61:cc:ee:97:
df:f3:05:f3:ff:c0:e0:9a:58:8b:fd:78:7c:10:64:
8a:0b:a7:8d:71:ce:fd:b7:ab:53:ad:82:1a:86:d1:
68:30:1e:10:b9:06:16:4a:8a:18:6e:f2:3f:d7:5d:
f9:93:e8:a9:77:64:8f:e4:78:b0:9e:5f:d9:a7:3a:
14:35:c7:e8:55:38:62:73:1e:63:6f:d5:68:77:ba:
f1:61:69:28:f1:7a:66:b9:9b:eb:79:ed:e2:cf:7d:
30:0e:a4:bc:46:a3:86:4f:27:7e:ab:30:1e:14:c5:
57:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C0:9A:7A:9A:0B:35:AC:44:A9:A2:88:7F:C9:6B:CA:0D:F6:10:CE
X509v3 Authority Key Identifier:
keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:38:e3:6b:33:49:ef:67:eb:e8:c3:0b:8f:f5:2c:31:37:51:
1e:f2:c6:a1:e1:8f:ec:bf:60:fa:dd:57:ad:1d:c5:97:ae:d6:
ca:3d:5d:bc:87:9c:7d:43:78:e5:bc:73:ea:ff:5d:36:7f:06:
90:aa:af:2e:5e:50:d8:3f:fc:2a:24:b8:02:84:b1:38:4c:a6:
53:ff:da:d2:6b:74:3b:e0:b4:29:2e:c6:ed:c4:3f:e0:fe:30:
45:c3:12:38:21:fd:1a:d7:a3:27:52:b3:2e:42:22:c6:aa:b1:
d3:90:c4:b0:0c:3b:5e:b9:e1:40:e7:c0:f1:cb:f6:82:44:c7:
be:b4:d8:19:61:39:17:93:2c:f3:dd:f2:21:85:cb:c7:95:01:
55:c2:ec:b3:bb:c4:5f:81:a9:ce:6c:53:be:d5:38:e7:54:db:
80:c1:01:78:09:63:3f:3f:3f:87:5c:79:04:c9:16:a6:5a:05:
d8:b5:79:5e:4e:56:0e:20:97:5f:d1:ed:57:52:c7:26:57:68:
37:ec:6b:9e:59:d7:6b:b6:16:af:6f:bc:03:5a:80:b2:01:d0:
8e:a4:9c:85:50:64:67:ed:b8:ce:88:e3:fb:e4:16:bb:4d:76:
24:92:c8:3c:54:35:42:b2:07:3c:57:b7:26:06:bf:4d:21:ac:
06:07:0e:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Abklc1Oy5aRzqmf/srhqlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZmZkMTIzY2I5M2UyNGUwMjVmOTUyODQyMTA4NDAyOTU4
ZDRhNGMwHhcNMjYwNjEzMTAwMTUzWhcNMjYwNjE0MTAwMTUzWjAzMTEwLwYDVQQD
EyhhMGMwOWE3YTlhMGIzNWFjNDRhOWEyODg3ZmM5NmJjYTBkZjYxMGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWeDJiX7V20QPmM3kYETLZS1zDyV
Hc6upIEDRmiMGuBu9uJd3VAW70X3FOXhDOkpHyqZrCJM+MVNxKvreH+K/Ygo2/ed
0nU0RIw5N+x4zGL3bA7Eo1sCg0sXpusD9qPI3rj/EEegjDgVYBoDbGR22bzonTLJ
WfM2+fJrgDcdfLjWLCs0V0tDPNliNHIWI6Lv/2HM7pff8wXz/8DgmliL/Xh8EGSK
C6eNcc79t6tTrYIahtFoMB4QuQYWSooYbvI/1135k+ipd2SP5Hiwnl/ZpzoUNcfo
VThicx5jb9Vod7rxYWko8XpmuZvree3iz30wDqS8RqOGTyd+qzAeFMVXbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDAmnqaCzWsRKmiiH/Ja8oN9hDOMB8GA1UdIwQY
MBaAFLv/0SPLk+JOAl+VKEIQhAKVjUpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81ZGNmYzktNTdkYS00MDdmLWE2YjIt
YWM0YTQwNjE3NDZkLzEvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81ZGNmYzktNTdkYS00MDdmLWE2YjItYWM0YTQwNjE3NDZk
LzEvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDjjazNJ
72fr6MMLj/UsMTdRHvLGoeGP7L9g+t1XrR3Fl67Wyj1dvIecfUN45bxz6v9dNn8G
kKqvLl5Q2D/8KiS4AoSxOEymU//a0mt0O+C0KS7G7cQ/4P4wRcMSOCH9GtejJ1Kz
LkIixqqx05DEsAw7XrnhQOfA8cv2gkTHvrTYGWE5F5Ms893yIYXLx5UBVcLss7vE
X4GpzmxTvtU451TbgMEBeAljPz8/h1x5BMkWploF2LV5Xk5WDiCXX9HtV1LHJldo
N+xrnlnXa7YWr2+8A1qAsgHQjqSchVBkZ+24zojj++QWu012JJLIPFQ1QrIHPFe3
Jga/TSGsBgcONw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:22:54 2026 by rpki-client