
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
File: U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft (raw, json)
Hash identifier: G36ftUYzHX98ErUBMGthxUl57MP8UQ+6oOwBSAJS05o=
Subject key identifier: 58:C7:ED:63:45:D1:D1:E2:FD:A4:C8:77:81:E9:7C:19:D7:21:4A:C2
Authority key identifier: 53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
Certificate issuer: /CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Certificate serial: 01A0EA0A2DC6E6B2F80476E4074B30AD7448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
Manifest number: 12AD
Signing time: Mon 28 Sep 2026 22:02:10 +0000
Manifest this update: Mon 28 Sep 2026 22:02:10 +0000
Manifest next update: Tue 29 Sep 2026 22:02:10 +0000
Files and hashes: 1: 9f-8muSj0lPpqv2C-uJT8RSg4Wk.roa (hash: SrfNBs8fLNs8CyzsQB76S5MYdUrN0e+cR0WQ3SPKGe4=)
2: MB6VGwOGXL__4GDkn2ifKfMOL5o.roa (hash: tgzruOGhqB7Wz++Uyka8T5HxSlsKFcquj+FXoKwEcRM=)
3: ORixJag7nGsUVhn_7z-jWKPNs6c.roa (hash: 5T3+aTdZe3zV/H6LETA51CJXrWU4B9XcKgVJJWWibzo=)
4: U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl (hash: VLSny74ff5GYF/lzWdWG0N1UljlsGe2zc0zj6wFtH8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:0a:2d:c6:e6:b2:f8:04:76:e4:07:4b:30:ad:74:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Validity
Not Before: Sep 28 22:02:10 2026 GMT
Not After : Sep 29 22:02:10 2026 GMT
Subject: CN=58c7ed6345d1d1e2fda4c87781e97c19d7214ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e5:68:c7:9f:08:f7:85:80:9e:98:7f:8f:50:
73:b3:f9:31:e6:c7:8c:1a:45:12:aa:fc:68:4e:45:
62:e1:5c:d8:50:fa:41:24:9a:77:46:ee:b7:00:03:
b1:49:d1:8e:44:19:24:38:e0:e1:3d:4d:12:62:ef:
6d:40:bf:66:84:74:7f:b5:c6:c0:46:be:fa:93:fb:
89:3b:cb:32:a4:07:b0:a2:76:af:20:ee:38:8c:88:
10:77:04:3f:b7:01:0d:25:cb:48:77:7d:ba:bc:ae:
0c:fb:ce:37:1d:27:41:10:cf:00:fa:f4:d8:26:96:
e9:6e:9e:10:67:e7:8d:e4:ef:63:68:b1:df:6a:70:
f1:eb:89:84:84:ae:a7:54:f7:01:c0:80:f2:6b:15:
2e:79:a6:78:d0:ba:ce:c8:91:41:ec:6b:51:5a:11:
a3:98:44:86:4b:dc:05:c2:97:8f:8d:e1:ea:e2:15:
5c:e7:e2:e7:d8:80:17:b6:ba:8b:d4:23:46:ef:1e:
87:28:b9:ff:20:e3:ed:95:ca:a4:03:b0:64:12:41:
d3:40:80:72:3e:c2:53:2e:e1:2f:43:5e:d9:0c:63:
22:6d:14:1c:b2:90:ef:ac:64:11:3a:91:81:90:1d:
2b:5f:9d:2c:70:54:2d:ed:a9:55:ee:0f:25:c4:8f:
c0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C7:ED:63:45:D1:D1:E2:FD:A4:C8:77:81:E9:7C:19:D7:21:4A:C2
X509v3 Authority Key Identifier:
keyid:53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f9:e0:8d:aa:c6:0a:66:54:8d:f9:b9:48:58:0a:2f:68:92:
4d:07:89:09:aa:65:d8:49:5e:25:fa:72:c8:91:d2:14:d2:85:
3b:4b:d1:af:a6:e6:de:e6:1b:b1:0f:51:ee:0e:34:7f:08:bb:
29:dc:1a:77:62:75:1a:9d:03:72:bd:fc:77:7b:ec:db:bb:bd:
06:4d:5e:09:07:34:aa:42:80:71:08:b7:b8:32:0f:ec:29:3c:
49:ed:17:4b:93:e2:f8:9e:1b:44:6b:2a:dd:14:ae:f7:b3:c8:
d6:ae:c1:36:96:6c:1f:de:ad:fa:6b:d7:9e:34:48:8d:06:74:
5c:b5:5c:0b:35:73:49:59:3b:52:08:3f:18:c9:a7:68:d6:eb:
3a:a1:72:56:ee:9b:c8:d3:b9:d6:e4:81:b8:a9:32:f2:a3:f8:
19:20:d2:e1:5a:4b:38:ba:83:e7:a1:4c:62:8f:e8:20:01:e1:
83:25:95:fd:25:93:c8:26:c0:d9:89:e4:1f:65:4f:39:cc:44:
df:75:83:26:e2:bb:dd:37:ea:fb:01:b9:dd:87:9b:cf:08:86:
ba:1a:ea:4b:e6:16:90:f6:9d:da:61:47:0f:dd:52:9f:19:aa:
f8:2e:f2:99:48:43:5f:a0:7a:ec:1b:4f:d7:ce:52:f3:0e:95:
e5:c1:ea:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDqCi3G5rL4BHbkB0swrXRIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzN2Y5YmY4NGI2OWEwOTA0MjQzMmRhZTgzNzdlZTBhYzhm
ZjFjNjEwHhcNMjYwOTI4MjIwMjEwWhcNMjYwOTI5MjIwMjEwWjAzMTEwLwYDVQQD
Eyg1OGM3ZWQ2MzQ1ZDFkMWUyZmRhNGM4Nzc4MWU5N2MxOWQ3MjE0YWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8eVox58I94WAnph/j1Bzs/kx5seM
GkUSqvxoTkVi4VzYUPpBJJp3Ru63AAOxSdGORBkkOODhPU0SYu9tQL9mhHR/tcbA
Rr76k/uJO8sypAewonavIO44jIgQdwQ/twENJctId326vK4M+843HSdBEM8A+vTY
Jpbpbp4QZ+eN5O9jaLHfanDx64mEhK6nVPcBwIDyaxUueaZ40LrOyJFB7GtRWhGj
mESGS9wFwpePjeHq4hVc5+Ln2IAXtrqL1CNG7x6HKLn/IOPtlcqkA7BkEkHTQIBy
PsJTLuEvQ17ZDGMibRQcspDvrGQROpGBkB0rX50scFQt7alV7g8lxI/A/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjH7WNF0dHi/aTId4HpfBnXIUrCMB8GA1UdIwQY
MBaAFFN/m/hLaaCQQkMtroN37grI/xxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTMtYi1FdHBvSkJDUXkydWczZnVDc2pfSEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYmM3NDYtNDE2Yi00ZGE5LTkyMjUt
ODkyZWM2ZmY0NzcxLzEvVTMtYi1FdHBvSkJDUXkydWczZnVDc2pfSEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jYmM3NDYtNDE2Yi00ZGE5LTkyMjUtODkyZWM2ZmY0Nzcx
LzEvVTMtYi1FdHBvSkJDUXkydWczZnVDc2pfSEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvngjarG
CmZUjfm5SFgKL2iSTQeJCapl2EleJfpyyJHSFNKFO0vRr6bm3uYbsQ9R7g40fwi7
Kdwad2J1Gp0Dcr38d3vs27u9Bk1eCQc0qkKAcQi3uDIP7Ck8Se0XS5Pi+J4bRGsq
3RSu97PI1q7BNpZsH96t+mvXnjRIjQZ0XLVcCzVzSVk7Ugg/GMmnaNbrOqFyVu6b
yNO51uSBuKky8qP4GSDS4VpLOLqD56FMYo/oIAHhgyWV/SWTyCbA2YnkH2VPOcxE
33WDJuK73Tfq+wG53YebzwiGuhrqS+YWkPad2mFHD91Snxmq+C7ymUhDX6B67BtP
185S8w6V5cHqqQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 02:50:06 2026 by rpki-client