Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
File: U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft (raw, json)
Hash identifier: 2sitjfhLaMJ1am3yXxJ2mrrz8CbQMzQG8ZluU74FiK8=
Subject key identifier: AE:19:34:A2:DF:5B:AD:8F:33:E8:5D:C3:4F:27:C3:35:13:94:CA:8D
Authority key identifier: 53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
Certificate issuer: /CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Certificate serial: 019FAABEF95CCD94AFBBEF4104B54315EA2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
Manifest number: 052C
Signing time: Tue 28 Jul 2026 22:01:10 +0000
Manifest this update: Tue 28 Jul 2026 22:01:10 +0000
Manifest next update: Wed 29 Jul 2026 22:01:10 +0000
Files and hashes: 1: U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl (hash: TVTxTcAVUWHA+Ecrv4Yx8xnkbn4cmMUb/7n0P+WTCPU=)
2: qAWpsleSdTKU2QK0ge-DYDJtKTg.roa (hash: hBYa6IMYEuL9W6YmuZd1vKmz/EkBj75T5fHCqH+FPYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:f9:5c:cd:94:af:bb:ef:41:04:b5:43:15:ea:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Validity
Not Before: Jul 28 22:01:10 2026 GMT
Not After : Jul 29 22:01:10 2026 GMT
Subject: CN=ae1934a2df5bad8f33e85dc34f27c3351394ca8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:45:e5:9a:98:59:59:04:81:22:db:59:b6:
b8:4b:3c:33:6f:5f:6f:ad:36:c6:7a:a1:34:e3:e5:
0f:99:72:b0:fa:e0:a6:3c:72:6b:78:08:bf:38:28:
06:e9:df:5c:79:55:68:57:93:d6:16:1a:b5:3a:47:
b0:82:b7:44:18:e7:7b:ec:3c:fd:c8:41:b4:4f:bc:
4f:e0:83:77:a7:e0:7a:29:8f:ea:1d:fe:c7:8d:33:
af:4e:c2:f0:a9:79:05:f5:33:3c:96:87:a0:97:e4:
3f:c6:42:72:22:12:29:eb:4f:95:0b:e6:44:d5:bf:
e7:94:c0:26:97:50:8f:74:04:a7:44:d9:51:1d:8d:
14:eb:4f:c6:5a:b5:8a:b1:43:ab:97:5e:a1:b5:64:
58:13:9d:25:1a:50:c1:2f:42:21:9b:d9:91:88:c9:
06:ee:78:60:aa:b5:0f:55:e2:bf:2e:df:62:a5:fa:
79:54:25:50:43:94:2e:58:12:a2:32:94:53:1c:49:
e9:36:3a:73:9a:46:c4:70:48:1f:d5:39:26:91:01:
84:20:cc:45:87:fc:b5:1d:0c:38:26:b0:60:ca:a2:
5a:19:22:9d:57:1d:4a:62:0e:e9:b2:db:83:7e:8a:
c6:43:5b:f3:23:94:fb:9b:f7:0a:02:83:50:38:08:
7b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:19:34:A2:DF:5B:AD:8F:33:E8:5D:C3:4F:27:C3:35:13:94:CA:8D
X509v3 Authority Key Identifier:
keyid:53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:86:84:ed:09:0f:65:66:5b:26:79:13:16:fe:0e:df:aa:0d:
a8:67:6e:32:2c:3f:b8:23:47:13:dc:61:87:f9:9e:e3:58:6f:
18:38:b8:72:11:45:58:f9:4d:50:5b:c5:ea:6c:fe:ae:b6:f0:
97:da:11:aa:7e:6f:04:b7:54:4e:03:a8:7d:02:9d:64:20:e1:
54:0c:6a:2f:b6:71:5d:f2:58:85:fa:52:b3:ab:a5:32:ae:34:
7d:a4:21:c1:4d:7e:38:7b:5c:fb:d2:6a:c6:c2:73:cb:6d:4e:
03:43:fa:a3:a8:62:3c:33:e3:85:23:1b:3c:b1:3b:99:00:3b:
7f:8b:59:bd:7b:9f:96:b8:b4:b9:a9:09:e5:be:cf:1b:57:a4:
2a:3d:c9:0b:39:80:3c:03:9d:67:db:b5:06:6e:5f:3d:8f:cf:
b5:c2:54:56:75:74:9e:39:23:d1:81:b8:12:d7:a0:67:48:0c:
ea:35:dd:f2:76:8a:97:9c:01:ab:a7:9b:a6:43:df:53:af:a9:
89:ae:98:1c:87:37:f8:57:f7:cd:08:c5:29:22:a2:9f:a4:24:
ee:ac:ab:8a:2f:c7:14:ab:17:29:24:0d:96:c5:83:0f:8f:0e:
1e:d9:72:1f:5b:3d:f1:8a:1e:d7:29:ef:31:17:16:4a:2e:7c:
14:a2:1a:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvvlczZSvu+9BBLVDFeorMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNzAwNzMxYzVhZGM3MGJjYjcxM2U1N2E1MWE0MDNlNjRl
ZDkxYzgwHhcNMjYwNzI4MjIwMTEwWhcNMjYwNzI5MjIwMTEwWjAzMTEwLwYDVQQD
EyhhZTE5MzRhMmRmNWJhZDhmMzNlODVkYzM0ZjI3YzMzNTEzOTRjYThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDdF5ZqYWVkEgSLbWba4Szwzb19v
rTbGeqE04+UPmXKw+uCmPHJreAi/OCgG6d9ceVVoV5PWFhq1OkewgrdEGOd77Dz9
yEG0T7xP4IN3p+B6KY/qHf7HjTOvTsLwqXkF9TM8loegl+Q/xkJyIhIp60+VC+ZE
1b/nlMAml1CPdASnRNlRHY0U60/GWrWKsUOrl16htWRYE50lGlDBL0Ihm9mRiMkG
7nhgqrUPVeK/Lt9ipfp5VCVQQ5QuWBKiMpRTHEnpNjpzmkbEcEgf1TkmkQGEIMxF
h/y1HQw4JrBgyqJaGSKdVx1KYg7pstuDforGQ1vzI5T7m/cKAoNQOAh77QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4ZNKLfW62PM+hdw08nwzUTlMqNMB8GA1UdIwQY
MBaAFFNwBzHFrccLy3E+V6UaQD5k7ZHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC84M2NmNzMtYjdjZS00NDQwLWE0YWQt
N2M1MjNiNThkZWNmLzEvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC84M2NmNzMtYjdjZS00NDQwLWE0YWQtN2M1MjNiNThkZWNm
LzEvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXoaE7QkP
ZWZbJnkTFv4O36oNqGduMiw/uCNHE9xhh/me41hvGDi4chFFWPlNUFvF6mz+rrbw
l9oRqn5vBLdUTgOofQKdZCDhVAxqL7ZxXfJYhfpSs6ulMq40faQhwU1+OHtc+9Jq
xsJzy21OA0P6o6hiPDPjhSMbPLE7mQA7f4tZvXuflri0uakJ5b7PG1ekKj3JCzmA
PAOdZ9u1Bm5fPY/PtcJUVnV0njkj0YG4EtegZ0gM6jXd8naKl5wBq6ebpkPfU6+p
ia6YHIc3+Ff3zQjFKSKin6Qk7qyrii/HFKsXKSQNlsWDD48OHtlyH1s98Yoe1ynv
MRcWSi58FKIadw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:50:31 2026 by rpki-client