Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json)
Hash identifier: v9j7QOpkil2l/ANEAzp3Ie/zMG+nmho6y6AiZELXwis=
Subject key identifier: 5B:A7:AA:F0:09:02:95:5E:D6:C0:93:59:B4:50:48:1F:FD:E0:E2:18
Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Certificate serial: 01A0C6A15A5F36088AAB1E2E332FAC26540B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
Manifest number: 0BDD
Signing time: Tue 22 Sep 2026 01:00:58 +0000
Manifest this update: Tue 22 Sep 2026 01:00:58 +0000
Manifest next update: Wed 23 Sep 2026 01:00:58 +0000
Files and hashes: 1: DlYdZNTLvfx2OD11UfQRnD3hK2o.roa (hash: Yz+AdjCjCsAlEW+BjCHTyQFo7Owy/uvBTZnF71MgcBA=)
2: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: 8mF92d05aOyM5jeIuKD17+NSaAm6z/i9uk3iuODifCw=)
3: zw7G6rZ3OugQehoBP3QpVRIzHKs.roa (hash: Ywv0pQZLRrxCf8Y+ep3+4GqTg47V6bf1LboUdnUKZNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a1:5a:5f:36:08:8a:ab:1e:2e:33:2f:ac:26:54:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Validity
Not Before: Sep 22 01:00:58 2026 GMT
Not After : Sep 23 01:00:58 2026 GMT
Subject: CN=5ba7aaf00902955ed6c09359b450481ffde0e218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:26:ac:1f:5f:19:e9:ec:c4:cd:ad:a0:11:ff:
2d:4b:6c:e2:86:84:a4:d2:ae:73:c0:d7:0e:93:fb:
09:37:53:2d:2a:cd:6f:1f:2a:0e:83:61:dd:78:9d:
78:6f:d2:50:e3:cd:b5:31:a8:40:a7:a2:e9:65:e9:
8e:73:db:ef:20:99:38:9a:84:43:25:1f:28:0e:0c:
5c:73:e4:81:6f:8f:f9:37:2c:99:29:a0:3d:63:fa:
85:3f:44:60:c0:a0:7e:2e:b3:0a:6f:91:52:70:50:
da:a5:0a:02:bf:8b:0c:b0:3f:8d:aa:f7:e6:bd:a6:
9e:38:90:bc:d0:15:e7:58:73:d5:93:1d:61:ab:d8:
0c:27:0c:47:14:20:f3:01:06:13:cd:37:93:e7:e5:
a6:98:de:ca:48:07:2a:98:2f:c6:84:4f:27:08:ff:
cd:fc:28:49:f5:2e:34:7b:7c:65:c2:82:0d:f7:89:
ad:56:c8:e0:45:2d:50:93:bf:0b:4b:ad:6e:6c:1a:
0d:d9:3a:99:5b:d5:59:2e:46:54:11:b0:71:1e:6a:
34:a6:f1:3f:28:a9:da:a6:99:ca:ab:54:18:c9:ee:
bb:e7:7c:9c:73:0c:ac:c2:d3:3f:27:00:ad:57:dc:
2b:9e:70:33:97:fa:30:f3:43:51:c4:32:44:1a:92:
0f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A7:AA:F0:09:02:95:5E:D6:C0:93:59:B4:50:48:1F:FD:E0:E2:18
X509v3 Authority Key Identifier:
keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f8:b0:1b:54:42:6f:55:e3:fe:26:c1:3a:c6:67:02:9b:5b:
ab:2c:c3:70:b6:84:fc:49:6b:0b:72:51:80:23:a0:b2:48:05:
58:ed:55:ac:2f:a5:88:50:02:73:49:89:54:33:64:b1:67:d7:
64:36:5e:f1:98:14:d6:08:c2:3b:16:f3:68:a9:35:2d:6e:cd:
f0:9d:6d:cf:51:57:43:ee:c7:0c:89:5e:aa:5c:d4:08:95:59:
de:7f:2d:57:01:a8:2a:a1:87:10:d4:00:7a:cd:38:20:52:e4:
f3:6c:07:b9:eb:54:a5:b9:0e:1b:36:96:71:ac:94:96:38:08:
5a:3e:04:79:4b:d4:49:6b:71:1e:e3:c5:a6:62:07:9d:41:c1:
a6:95:a9:15:b5:5c:86:74:84:66:4a:91:9a:ba:30:16:a5:cb:
89:e7:df:09:e9:23:36:f7:10:eb:4d:50:d6:e9:af:de:ac:02:
b5:14:f5:22:d4:7d:af:ca:51:89:3e:d6:69:3c:ca:ac:06:e1:
ca:2a:31:4a:8c:12:b1:ca:52:f1:27:b3:63:21:d3:73:6a:76:
5b:70:3e:d8:4e:31:46:fc:4d:66:a8:c2:70:09:cb:da:20:ee:
8e:19:b1:19:14:d1:db:2a:8f:74:0d:47:a6:92:bb:37:8d:7b:
ed:f4:4d:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGoVpfNgiKqx4uMy+sJlQLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NDYxZmJlZTFjMDZlM2VhZmFjMGYyZjk1MjUzY2E4NjAz
YWNjZjIwHhcNMjYwOTIyMDEwMDU4WhcNMjYwOTIzMDEwMDU4WjAzMTEwLwYDVQQD
Eyg1YmE3YWFmMDA5MDI5NTVlZDZjMDkzNTliNDUwNDgxZmZkZTBlMjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CasH18Z6ezEza2gEf8tS2zihoSk
0q5zwNcOk/sJN1MtKs1vHyoOg2HdeJ14b9JQ4821MahAp6LpZemOc9vvIJk4moRD
JR8oDgxcc+SBb4/5NyyZKaA9Y/qFP0RgwKB+LrMKb5FScFDapQoCv4sMsD+Nqvfm
vaaeOJC80BXnWHPVkx1hq9gMJwxHFCDzAQYTzTeT5+WmmN7KSAcqmC/GhE8nCP/N
/ChJ9S40e3xlwoIN94mtVsjgRS1Qk78LS61ubBoN2TqZW9VZLkZUEbBxHmo0pvE/
KKnappnKq1QYye6753yccwyswtM/JwCtV9wrnnAzl/ow80NRxDJEGpIPEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFunqvAJApVe1sCTWbRQSB/94OIYMB8GA1UdIwQY
MBaAFJVGH77hwG4+r6wPL5UlPKhgOszyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lNWNlOGYtNWVhMC00NzlmLTkzZTkt
ODlkNWM2MGY1MDFmLzEvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9lNWNlOGYtNWVhMC00NzlmLTkzZTktODlkNWM2MGY1MDFm
LzEvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPiwG1RC
b1Xj/ibBOsZnAptbqyzDcLaE/ElrC3JRgCOgskgFWO1VrC+liFACc0mJVDNksWfX
ZDZe8ZgU1gjCOxbzaKk1LW7N8J1tz1FXQ+7HDIleqlzUCJVZ3n8tVwGoKqGHENQA
es04IFLk82wHuetUpbkOGzaWcayUljgIWj4EeUvUSWtxHuPFpmIHnUHBppWpFbVc
hnSEZkqRmrowFqXLieffCekjNvcQ601Q1umv3qwCtRT1ItR9r8pRiT7WaTzKrAbh
yioxSowSscpS8SezYyHTc2p2W3A+2E4xRvxNZqjCcAnL2iDujhmxGRTR2yqPdA1H
ppK7N4177fRNlg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:45:17 2026 by rpki-client