Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
File: U4DNitL4ThTptbZCOJN7bUIH4iE.mft (raw, json)
Hash identifier: /cEfInZNMnoUZtf02J/s++UwiyMyEqlC47ltCxWhp8Q=
Subject key identifier: 58:4B:79:33:92:97:8C:72:B8:8D:2C:AB:3D:61:AB:13:85:79:1D:85
Authority key identifier: 53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
Certificate issuer: /CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Certificate serial: 01A0C444723D583D9E757E750A5A1085E372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
Manifest number: 0BFA
Signing time: Mon 21 Sep 2026 14:00:14 +0000
Manifest this update: Mon 21 Sep 2026 14:00:14 +0000
Manifest next update: Tue 22 Sep 2026 14:00:14 +0000
Files and hashes: 1: 3gqZ21ZiXWY8Si7snLEpMyMD74g.roa (hash: X/t/+w5YUcvfs+3nGPGjtJ/Fhg4+BcTTk+/zNwVCFHo=)
2: U4DNitL4ThTptbZCOJN7bUIH4iE.crl (hash: wRPW6OhjcNYgP5Ru4se2y7uFtwRldQYwT0jUiJkxeI8=)
3: wlQ0t9w-oLkcGuhWCMs9Bpc2jac.roa (hash: 3f94DHQ4ocfCNVkT9++XQcXx0yPrdObfv5lQ1Z9Etr8=)
4: x0JWlbPq7LDeu4Dm0_N7oeK38ow.roa (hash: tbOy3beQewSvz0vDOcHNb1UEiU3Vzot4Nk2R+I8UvvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:72:3d:58:3d:9e:75:7e:75:0a:5a:10:85:e3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Validity
Not Before: Sep 21 14:00:14 2026 GMT
Not After : Sep 22 14:00:14 2026 GMT
Subject: CN=584b793392978c72b88d2cab3d61ab1385791d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d0:6c:2a:29:c9:90:ad:48:a7:64:41:f5:ea:
e7:ca:15:d1:0e:99:a9:15:d9:f7:1f:66:80:84:32:
5e:b6:88:7e:73:c4:39:4f:1c:66:04:ef:b0:53:73:
12:67:7e:a6:f7:3a:ab:7e:a6:f2:54:a1:67:b9:03:
60:ca:52:cc:ad:a1:ef:a7:6a:b3:8b:80:c1:99:90:
93:e5:a9:7e:60:9e:73:71:4f:a7:83:f5:43:14:e0:
c8:10:7f:29:86:16:9a:47:af:74:79:33:30:19:15:
4d:85:16:48:b5:55:f7:91:ae:0c:bf:f8:53:32:45:
d4:50:c1:6c:4b:80:90:db:09:81:96:ad:eb:f4:41:
2c:7a:aa:fa:31:73:4b:93:53:46:e9:61:84:30:b4:
dc:2a:8d:1b:47:c7:12:9c:93:75:cf:58:66:62:7b:
cb:cb:38:33:1c:7a:cf:8a:74:d3:7f:74:40:9b:40:
40:df:06:4b:dc:c3:dd:a1:f7:50:3c:28:06:28:6f:
b1:40:8f:c8:2b:15:53:e0:9f:36:f9:68:a6:1d:a2:
44:5b:38:83:47:e9:e4:0c:f9:63:c3:49:70:cb:e5:
f9:5a:54:e0:3b:5e:b7:28:99:cc:ee:14:52:e1:dc:
18:1e:7e:4c:db:f6:74:7c:72:d1:9a:a5:9a:01:70:
e7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4B:79:33:92:97:8C:72:B8:8D:2C:AB:3D:61:AB:13:85:79:1D:85
X509v3 Authority Key Identifier:
keyid:53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c8:9d:6e:f5:08:50:90:e6:24:10:2b:84:f0:29:e0:cd:3b:
63:45:3d:fe:34:de:c3:6b:79:d0:50:2a:fa:67:5c:b5:c6:d9:
12:a7:b0:6b:5e:33:06:15:ec:ff:70:01:98:9d:8e:a0:8b:2d:
e5:39:ab:82:83:08:0f:60:89:c7:51:64:ec:55:80:53:0b:6d:
b9:46:88:ed:aa:75:f0:b6:ac:f6:8e:a2:47:4d:03:24:8c:92:
09:8e:42:42:90:4c:59:7e:3e:36:33:b1:79:84:4c:15:a5:c0:
11:9f:73:1d:4d:4b:e9:e6:3e:de:44:b0:d6:f9:0d:b4:2a:60:
79:22:e5:e4:46:41:24:8a:74:09:e1:ed:73:ce:a7:5d:26:d3:
d4:f9:e7:88:51:f0:b0:16:2d:6b:2f:a2:e0:38:5a:f2:e5:b9:
2e:96:42:1a:cd:9c:10:58:35:1f:37:e9:fe:2e:9e:2b:bd:de:
52:83:21:03:79:b8:d1:15:21:13:2e:61:d5:53:cd:f8:da:b2:
1f:1c:93:e7:eb:ea:5a:d5:cd:3e:32:5f:28:74:16:11:4f:a0:
69:e8:91:1b:2d:f9:31:24:f5:d0:80:6e:95:e9:7d:4d:0c:2d:
e8:1e:66:df:34:f7:e3:58:8b:37:2b:f3:87:d4:d1:3b:63:fc:
4e:3f:59:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDERHI9WD2edX51CloQheNyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzODBjZDhhZDJmODRlMTRlOWI1YjY0MjM4OTM3YjZkNDIw
N2UyMjEwHhcNMjYwOTIxMTQwMDE0WhcNMjYwOTIyMTQwMDE0WjAzMTEwLwYDVQQD
Eyg1ODRiNzkzMzkyOTc4YzcyYjg4ZDJjYWIzZDYxYWIxMzg1NzkxZDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtBsKinJkK1Ip2RB9ernyhXRDpmp
Fdn3H2aAhDJetoh+c8Q5TxxmBO+wU3MSZ36m9zqrfqbyVKFnuQNgylLMraHvp2qz
i4DBmZCT5al+YJ5zcU+ng/VDFODIEH8phhaaR690eTMwGRVNhRZItVX3ka4Mv/hT
MkXUUMFsS4CQ2wmBlq3r9EEseqr6MXNLk1NG6WGEMLTcKo0bR8cSnJN1z1hmYnvL
yzgzHHrPinTTf3RAm0BA3wZL3MPdofdQPCgGKG+xQI/IKxVT4J82+WimHaJEWziD
R+nkDPljw0lwy+X5WlTgO163KJnM7hRS4dwYHn5M2/Z0fHLRmqWaAXDnjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhLeTOSl4xyuI0sqz1hqxOFeR2FMB8GA1UdIwQY
MBaAFFOAzYrS+E4U6bW2QjiTe21CB+IhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTRETml0TDRUaFRwdGJaQ09KTjdiVUlINGlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yZmNjOTItYzk2Ny00YTY1LWE0MzQt
NWUzNmQxYjA4MjVlLzEvVTRETml0TDRUaFRwdGJaQ09KTjdiVUlINGlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8yZmNjOTItYzk2Ny00YTY1LWE0MzQtNWUzNmQxYjA4MjVl
LzEvVTRETml0TDRUaFRwdGJaQ09KTjdiVUlINGlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8idbvUI
UJDmJBArhPAp4M07Y0U9/jTew2t50FAq+mdctcbZEqewa14zBhXs/3ABmJ2OoIst
5TmrgoMID2CJx1Fk7FWAUwttuUaI7ap18Las9o6iR00DJIySCY5CQpBMWX4+NjOx
eYRMFaXAEZ9zHU1L6eY+3kSw1vkNtCpgeSLl5EZBJIp0CeHtc86nXSbT1PnniFHw
sBYtay+i4Dha8uW5LpZCGs2cEFg1Hzfp/i6eK73eUoMhA3m40RUhEy5h1VPN+Nqy
HxyT5+vqWtXNPjJfKHQWEU+gaeiRGy35MST10IBulel9TQwt6B5m3zT341iLNyvz
h9TRO2P8Tj9ZFQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:57:28 2026 by rpki-client