Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
File: U9To6fSiMLDlaFh2X3EwrNNOni0.mft (raw, json)
Hash identifier: f3ccY3ae247jWPthtDFawiCVVi5LCfRSObjHBxaQmX8=
Subject key identifier: 0F:1D:82:35:F4:68:04:7D:14:71:01:E9:6E:0E:5B:85:A0:9E:39:E5
Authority key identifier: 53:D4:E8:E9:F4:A2:30:B0:E5:68:58:76:5F:71:30:AC:D3:4E:9E:2D
Certificate issuer: /CN=53d4e8e9f4a230b0e56858765f7130acd34e9e2d
Certificate serial: 01A0BDD500199D01ADA4F466B5329C5D8FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
Manifest number: 024F
Signing time: Sun 20 Sep 2026 08:00:47 +0000
Manifest this update: Sun 20 Sep 2026 08:00:47 +0000
Manifest next update: Mon 21 Sep 2026 08:00:47 +0000
Files and hashes: 1: KstXJBTU9_95RgYAGgk0ocTiAAk.asa (hash: 1aWyFNHfdiDQ+9mjEacvi8VKbddcwrT5VsWI5r5oY/w=)
2: O860BZXE4oCrVhgqCDhjxlkYiZY.roa (hash: WAAeKTz5adCSs3a4JZFRxzoY1WO2G1GDA+qRkP/2UHM=)
3: U9To6fSiMLDlaFh2X3EwrNNOni0.crl (hash: foQCwMLuoVjVjyGaNyIvuHAXZuX3uQsrw4d0DW2O5Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d5:00:19:9d:01:ad:a4:f4:66:b5:32:9c:5d:8f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d4e8e9f4a230b0e56858765f7130acd34e9e2d
Validity
Not Before: Sep 20 08:00:47 2026 GMT
Not After : Sep 21 08:00:47 2026 GMT
Subject: CN=0f1d8235f468047d147101e96e0e5b85a09e39e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8d:22:57:ce:91:fe:ec:a1:a5:26:2b:d9:b3:
30:76:01:f9:f8:72:be:39:7a:7d:1a:24:85:a9:bc:
40:2a:87:6e:19:d7:73:a5:6f:88:2d:5a:2d:65:12:
cb:04:dc:52:d9:76:3f:ea:3d:2c:7d:b9:24:b8:33:
73:f0:f0:8b:82:f2:7c:95:be:73:1c:5e:36:7c:ce:
32:15:1f:ea:55:ed:df:13:1a:8e:3f:0f:73:32:66:
cf:51:f6:17:fc:e8:71:33:76:95:a8:90:34:b4:30:
09:f7:93:93:13:50:45:3d:f5:2b:92:57:8c:2f:16:
be:c2:b5:ba:5c:be:a0:82:e5:2c:0f:2e:ef:bd:03:
c3:4e:b1:04:b2:8a:4b:03:59:f4:6d:d4:c6:26:51:
cc:0f:d2:5e:53:47:d0:f8:b1:06:2f:33:32:e3:ed:
57:c6:80:2a:1b:20:18:56:d6:a8:e2:ae:be:7c:6b:
65:a0:6c:3e:30:db:f8:f1:38:55:84:83:14:e2:b6:
42:51:64:11:74:c0:ce:4d:68:be:d5:ab:b9:d8:c4:
fa:65:1e:e7:44:40:bb:50:20:e6:0a:4d:96:37:ad:
24:4f:39:94:81:43:3b:da:ab:2f:21:27:81:58:29:
a2:89:08:ac:37:06:60:50:36:07:fb:2a:95:90:dd:
d0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1D:82:35:F4:68:04:7D:14:71:01:E9:6E:0E:5B:85:A0:9E:39:E5
X509v3 Authority Key Identifier:
keyid:53:D4:E8:E9:F4:A2:30:B0:E5:68:58:76:5F:71:30:AC:D3:4E:9E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:90:08:bf:5d:be:6d:27:91:3c:2e:b3:ac:fc:1e:9c:a4:6c:
c5:a6:e0:da:96:4c:11:79:f4:7c:77:d9:c1:fe:19:8b:75:b1:
69:83:b1:a0:1c:50:65:98:71:5f:cf:74:e3:b9:5a:fc:f0:5b:
20:4e:25:68:12:1e:95:fc:55:28:da:05:91:be:d7:a0:6e:15:
85:cd:29:19:2f:96:67:6b:1d:4a:13:38:3d:2e:bb:4d:6a:fd:
b8:39:78:c6:ab:1f:66:cf:30:8c:4c:13:95:31:f6:52:ce:1d:
38:b4:68:cc:8f:6d:23:c3:14:0e:8d:f3:ff:0f:0b:ba:ef:b8:
3a:47:d5:63:62:d4:97:90:1d:e2:88:ba:ab:65:6f:21:8e:3a:
db:8c:9c:76:49:c2:46:d4:48:44:a7:9c:a9:93:aa:2c:b7:65:
b8:12:44:43:f1:3a:dc:1b:ee:50:e4:43:3c:b8:88:3a:83:72:
31:76:ea:67:47:33:54:1b:d8:61:aa:94:09:b5:02:8e:3d:d4:
a0:23:77:a8:bc:0f:a9:4f:74:ac:00:0e:c8:f6:7d:a0:26:d6:
35:0f:57:1b:e4:90:f8:ea:b4:69:c9:67:72:eb:c9:9e:ee:22:
31:b2:5e:77:b7:de:57:90:0f:7f:3f:12:62:1b:47:6e:61:82:
78:74:5b:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC91QAZnQGtpPRmtTKcXY/uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZDRlOGU5ZjRhMjMwYjBlNTY4NTg3NjVmNzEzMGFjZDM0
ZTllMmQwHhcNMjYwOTIwMDgwMDQ3WhcNMjYwOTIxMDgwMDQ3WjAzMTEwLwYDVQQD
EygwZjFkODIzNWY0NjgwNDdkMTQ3MTAxZTk2ZTBlNWI4NWEwOWUzOWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0o0iV86R/uyhpSYr2bMwdgH5+HK+
OXp9GiSFqbxAKoduGddzpW+ILVotZRLLBNxS2XY/6j0sfbkkuDNz8PCLgvJ8lb5z
HF42fM4yFR/qVe3fExqOPw9zMmbPUfYX/OhxM3aVqJA0tDAJ95OTE1BFPfUrkleM
Lxa+wrW6XL6gguUsDy7vvQPDTrEEsopLA1n0bdTGJlHMD9JeU0fQ+LEGLzMy4+1X
xoAqGyAYVtao4q6+fGtloGw+MNv48ThVhIMU4rZCUWQRdMDOTWi+1au52MT6ZR7n
REC7UCDmCk2WN60kTzmUgUM72qsvISeBWCmiiQisNwZgUDYH+yqVkN3QnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8dgjX0aAR9FHEB6W4OW4WgnjnlMB8GA1UdIwQY
MBaAFFPU6On0ojCw5WhYdl9xMKzTTp4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTlUbzZmU2lNTERsYUZoMlgzRXdyTk5PbmkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85YTUzMjQtNDY1OS00YWEzLWEzZDEt
MTY2MTI0YzBjNTQ1LzEvVTlUbzZmU2lNTERsYUZoMlgzRXdyTk5PbmkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC85YTUzMjQtNDY1OS00YWEzLWEzZDEtMTY2MTI0YzBjNTQ1
LzEvVTlUbzZmU2lNTERsYUZoMlgzRXdyTk5PbmkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZAIv12+
bSeRPC6zrPwenKRsxabg2pZMEXn0fHfZwf4Zi3WxaYOxoBxQZZhxX89047la/PBb
IE4laBIelfxVKNoFkb7XoG4Vhc0pGS+WZ2sdShM4PS67TWr9uDl4xqsfZs8wjEwT
lTH2Us4dOLRozI9tI8MUDo3z/w8Luu+4OkfVY2LUl5Ad4oi6q2VvIY4624ycdknC
RtRIRKecqZOqLLdluBJEQ/E63BvuUORDPLiIOoNyMXbqZ0czVBvYYaqUCbUCjj3U
oCN3qLwPqU90rAAOyPZ9oCbWNQ9XG+SQ+Oq0aclncuvJnu4iMbJed7feV5APfz8S
YhtHbmGCeHRb4Q==
-----END CERTIFICATE-----
Generated at Sun Sep 20 17:41:31 2026 by rpki-client