Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
File: Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json)
Hash identifier: pEdGQX+0+T1bsdWDri8mAETjF5YneZDOFjDHEy+Y9wM=
Subject key identifier: 05:D0:31:F9:7F:B1:39:A8:A8:86:D7:90:47:BC:7C:AD:B3:BC:B3:D3
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial: 01A0F6E95225530C280481CAF506E3CBC3E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
Manifest number: 08DE
Signing time: Thu 01 Oct 2026 10:01:20 +0000
Manifest this update: Thu 01 Oct 2026 10:01:20 +0000
Manifest next update: Fri 02 Oct 2026 10:01:20 +0000
Files and hashes: 1: 9JqZryS5V90sfPbzDmWbNHdWDz4.roa (hash: xRoJI+4gTPgSbGis5y17EtT/awD7P4de01zDNxO2DGg=)
2: UULqMalT8q1TQ-6O1Hqoa0ij9jk.roa (hash: bcQyF2LcXE36rOCQDWSu5hq1GX9yM6Wmo0ZcgXJHSfw=)
3: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: d5dyrHQXEpAT5mm/FDOoA5gdmnj8nCYLCxuqajXaCIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:e9:52:25:53:0c:28:04:81:ca:f5:06:e3:cb:c3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Validity
Not Before: Oct 1 10:01:20 2026 GMT
Not After : Oct 2 10:01:20 2026 GMT
Subject: CN=05d031f97fb139a8a886d79047bc7cadb3bcb3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:98:da:e9:fb:cc:1b:00:c5:cd:a2:23:38:83:
8b:36:ff:99:b9:d2:25:ba:97:94:d0:d4:31:e0:db:
aa:da:5c:8d:3e:a5:9b:6c:5c:fc:85:24:fc:79:b4:
cc:71:50:1d:1d:dc:6a:eb:b2:bc:e7:6d:16:9f:c4:
dc:cb:c6:7a:1a:d1:5f:d2:c8:2a:d3:69:40:ed:ca:
17:a3:64:f4:dc:04:00:3f:a7:64:e7:94:83:19:8d:
1b:43:c4:06:be:ee:42:af:de:ca:ff:80:ec:3a:64:
6c:e9:93:34:0b:a7:c3:ca:54:0a:f0:bb:09:0a:dd:
11:c5:60:76:b6:d4:dc:74:ac:ae:8c:96:bb:a7:87:
2e:b6:f5:0f:6f:5f:0a:9a:54:bc:e0:f4:87:43:0e:
6d:87:3d:51:7b:f1:93:80:70:a3:aa:20:0c:43:ee:
fb:36:f7:94:e7:33:5f:e6:55:ed:fb:87:94:9e:cc:
04:aa:2f:0f:da:db:50:23:70:72:27:4e:15:9e:b7:
26:24:41:a5:2d:39:f0:61:4f:b0:8a:97:ae:11:fe:
50:31:f4:22:22:a5:c5:25:a8:aa:64:20:dc:4d:35:
b2:21:fe:af:b3:37:f3:99:73:2e:e4:63:54:9e:a8:
7b:1f:59:5f:5f:fd:bb:49:f5:65:0b:fb:ef:0b:a9:
e7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D0:31:F9:7F:B1:39:A8:A8:86:D7:90:47:BC:7C:AD:B3:BC:B3:D3
X509v3 Authority Key Identifier:
keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:4b:2f:c7:b3:9b:ea:39:f1:e3:1a:99:90:27:18:95:62:60:
d3:af:1f:ed:ab:60:89:74:2b:08:96:ef:e8:fe:60:06:54:89:
63:26:3f:d5:c7:2e:b5:15:ca:76:07:39:91:29:d7:0d:15:ab:
90:69:bf:b7:ba:5e:dc:15:38:5d:a2:4b:ca:92:4b:df:5a:91:
9d:7f:6d:a7:df:2e:d9:ee:36:7f:61:90:8c:0a:b7:9f:8e:31:
e2:20:41:b0:01:cc:02:16:29:03:01:3d:29:3b:6f:16:4a:e0:
eb:2b:02:0f:4f:38:d7:2c:d2:6c:14:62:c8:90:98:b3:fd:75:
de:54:d5:57:0b:9f:17:db:19:a6:e3:25:42:9c:04:2a:75:a4:
e9:76:ad:a3:ce:d5:d8:d2:7e:29:eb:d2:30:40:67:85:4f:b8:
b4:79:fb:ea:61:60:84:a6:46:34:2c:d6:e8:cf:ac:40:03:21:
04:52:34:6d:8d:90:a9:32:de:8a:3e:65:fa:08:54:aa:88:f1:
13:88:1d:c7:23:e4:2d:ac:86:a9:07:fa:78:73:20:e0:59:d4:
bf:33:95:8a:29:6c:97:46:18:6f:97:41:c8:b1:1a:f3:04:e4:
f9:53:e8:4b:72:12:d6:ed:1b:72:45:c9:a0:da:15:cd:48:4d:
6e:85:0e:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD26VIlUwwoBIHK9Qbjy8PgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNWVjOTNkN2NhNzM3NDRiMmMxZmJiNmRkYTY0NDkzYzJh
NDk1YzEwHhcNMjYxMDAxMTAwMTIwWhcNMjYxMDAyMTAwMTIwWjAzMTEwLwYDVQQD
EygwNWQwMzFmOTdmYjEzOWE4YTg4NmQ3OTA0N2JjN2NhZGIzYmNiM2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Jja6fvMGwDFzaIjOIOLNv+ZudIl
upeU0NQx4Nuq2lyNPqWbbFz8hST8ebTMcVAdHdxq67K8520Wn8Tcy8Z6GtFf0sgq
02lA7coXo2T03AQAP6dk55SDGY0bQ8QGvu5Cr97K/4DsOmRs6ZM0C6fDylQK8LsJ
Ct0RxWB2ttTcdKyujJa7p4cutvUPb18KmlS84PSHQw5thz1Re/GTgHCjqiAMQ+77
NveU5zNf5lXt+4eUnswEqi8P2ttQI3ByJ04VnrcmJEGlLTnwYU+wipeuEf5QMfQi
IqXFJaiqZCDcTTWyIf6vszfzmXMu5GNUnqh7H1lfX/27SfVlC/vvC6nnHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXQMfl/sTmoqIbXkEe8fK2zvLPTMB8GA1UdIwQY
MBaAFFJeyT18pzdEssH7tt2mRJPCpJXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NTU4ZWMtZDU2OC00Y2I5LWEwM2Et
ODM2NmIxNjRkZDY2LzEvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC82NTU4ZWMtZDU2OC00Y2I5LWEwM2EtODM2NmIxNjRkZDY2
LzEvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACEsvx7Ob
6jnx4xqZkCcYlWJg068f7atgiXQrCJbv6P5gBlSJYyY/1ccutRXKdgc5kSnXDRWr
kGm/t7pe3BU4XaJLypJL31qRnX9tp98u2e42f2GQjAq3n44x4iBBsAHMAhYpAwE9
KTtvFkrg6ysCD0841yzSbBRiyJCYs/113lTVVwufF9sZpuMlQpwEKnWk6Xato87V
2NJ+KevSMEBnhU+4tHn76mFghKZGNCzW6M+sQAMhBFI0bY2QqTLeij5l+ghUqojx
E4gdxyPkLayGqQf6eHMg4FnUvzOViilsl0YYb5dByLEa8wTk+VPoS3IS1u0bckXJ
oNoVzUhNboUOhQ==
-----END CERTIFICATE-----
Generated at Thu Oct 1 19:38:56 2026 by rpki-client