Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
File: U8DiB45PPrpfh5UD_dgJw4O7dig.mft (raw, json)
Hash identifier: 0hZd/tKWvRnJh5Si5mEhWGdOzdwnAlG1SczpfDJucSU=
Subject key identifier: 15:BB:A9:47:B3:D1:4B:06:F6:7D:59:03:9B:46:AD:F0:3C:32:BA:26
Authority key identifier: 53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
Certificate issuer: /CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Certificate serial: 019EC1EDB8073C896FDE5C2F60A8F674261F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
Manifest number: 1358
Signing time: Sat 13 Jun 2026 17:00:42 +0000
Manifest this update: Sat 13 Jun 2026 17:00:42 +0000
Manifest next update: Sun 14 Jun 2026 17:00:42 +0000
Files and hashes: 1: 1-GMVzwMDxSiYZaD7figfVQ0BMo8.roa (hash: 6cucZyQkv8Clqp8Dmj2mB2zHAVxhCmtUwPlqKFCqEpw=)
2: U8DiB45PPrpfh5UD_dgJw4O7dig.crl (hash: IuGYh+pgdYgf1gV7nuvJEpA8Sqcw4d7nhXURvJXRJbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:b8:07:3c:89:6f:de:5c:2f:60:a8:f6:74:26:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Validity
Not Before: Jun 13 17:00:42 2026 GMT
Not After : Jun 14 17:00:42 2026 GMT
Subject: CN=15bba947b3d14b06f67d59039b46adf03c32ba26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4e:a0:60:85:73:67:9e:10:02:11:5f:7a:7a:
97:81:38:54:e1:31:e4:43:f5:5d:b1:a5:5b:32:ad:
e6:5d:59:48:94:f2:b9:28:9a:2d:2e:14:0a:9b:4a:
4c:2a:97:8e:c3:e0:7b:64:36:84:8a:c0:f6:3f:7e:
31:df:cf:d6:32:df:7b:5f:94:de:79:8d:c7:d4:53:
35:f8:ad:f1:7a:71:e2:bb:fe:e5:b1:82:15:2b:bf:
23:b8:7c:bc:45:ee:e1:60:4a:28:22:27:7c:8a:05:
7f:7a:ea:3f:94:1c:aa:66:1f:9a:d0:23:a0:cf:88:
8d:3c:c7:42:88:e0:d7:d1:9e:ff:da:a9:d8:54:ba:
5e:95:cb:bd:e2:2e:03:65:4f:9e:1f:2d:6d:cc:e6:
4f:53:9f:62:3b:60:e5:50:a0:a3:a9:1e:98:7a:05:
28:c3:1b:db:f0:c6:5c:e9:fe:e7:f8:c4:e5:37:23:
48:45:24:3c:ce:ce:b2:39:a0:bd:27:f8:68:7b:77:
9a:90:87:4a:51:c9:b7:bd:d3:23:a1:50:fe:a5:c6:
56:be:24:ea:00:d5:16:f6:1c:22:6c:1e:ef:b5:95:
73:a2:41:b7:8d:ac:37:97:76:3d:5a:01:4f:1d:e2:
32:b5:92:65:d8:4e:be:d7:ab:d8:17:55:dc:81:bb:
55:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BB:A9:47:B3:D1:4B:06:F6:7D:59:03:9B:46:AD:F0:3C:32:BA:26
X509v3 Authority Key Identifier:
keyid:53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3e:3c:a9:ca:c3:38:3c:ae:21:86:39:54:7b:34:e9:a7:2b:
83:a5:ce:4f:dc:05:5c:66:2c:ae:4c:b9:a5:7c:8a:04:b1:ea:
21:78:00:36:9b:a6:c4:49:84:a0:83:2d:a4:c5:13:94:4f:b6:
e0:aa:50:f6:5d:53:aa:1f:1d:7e:1c:5a:c1:4f:c7:cd:f9:65:
4a:f6:e3:6e:7a:bb:ef:84:d1:4e:af:1f:11:59:1f:9c:2d:50:
d9:ea:27:7b:a1:ed:0e:c1:9f:d5:b8:ab:00:52:bf:bd:d5:76:
af:1d:a0:59:eb:d3:b5:1c:58:d1:bc:93:7b:8a:99:b6:b4:3c:
ec:84:72:15:d6:69:3a:6a:04:60:0e:ee:eb:e6:7e:e7:6b:73:
14:45:22:35:9a:3e:9a:1c:0e:c5:72:47:f3:33:ba:5f:35:14:
03:4e:d4:d9:14:70:3a:d9:c1:7c:1d:81:17:44:69:8e:eb:a1:
b3:6b:19:42:31:f6:f4:62:dd:dd:4a:01:7d:e9:99:18:37:78:
fa:0b:ba:c7:02:48:8f:0f:8c:83:3a:3f:37:84:a4:ce:c2:40:
a8:86:0e:c3:78:90:84:38:24:58:39:f0:90:ff:e6:bf:2b:a9:
c9:67:37:e2:d1:ec:28:d9:72:9b:2c:bc:ae:55:40:4d:ad:63:
e6:39:a0:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7B7bgHPIlv3lwvYKj2dCYfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYzBlMjA3OGU0ZjNlYmE1Zjg3OTUwM2ZkZDgwOWMzODNi
Yjc2MjgwHhcNMjYwNjEzMTcwMDQyWhcNMjYwNjE0MTcwMDQyWjAzMTEwLwYDVQQD
EygxNWJiYTk0N2IzZDE0YjA2ZjY3ZDU5MDM5YjQ2YWRmMDNjMzJiYTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj06gYIVzZ54QAhFfenqXgThU4THk
Q/VdsaVbMq3mXVlIlPK5KJotLhQKm0pMKpeOw+B7ZDaEisD2P34x38/WMt97X5Te
eY3H1FM1+K3xenHiu/7lsYIVK78juHy8Re7hYEooIid8igV/euo/lByqZh+a0COg
z4iNPMdCiODX0Z7/2qnYVLpelcu94i4DZU+eHy1tzOZPU59iO2DlUKCjqR6YegUo
wxvb8MZc6f7n+MTlNyNIRSQ8zs6yOaC9J/hoe3eakIdKUcm3vdMjoVD+pcZWviTq
ANUW9hwibB7vtZVzokG3jaw3l3Y9WgFPHeIytZJl2E6+16vYF1XcgbtVswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBW7qUez0UsG9n1ZA5tGrfA8MromMB8GA1UdIwQY
MBaAFFPA4geOTz66X4eVA/3YCcODu3YoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVThEaUI0NVBQcnBmaDVVRF9kZ0p3NE83ZGlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iMzY2MzYtMzMwNi00NDhmLThlY2Yt
NTY0ODJiMzkwNjc4LzEvVThEaUI0NVBQcnBmaDVVRF9kZ0p3NE83ZGlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iMzY2MzYtMzMwNi00NDhmLThlY2YtNTY0ODJiMzkwNjc4
LzEvVThEaUI0NVBQcnBmaDVVRF9kZ0p3NE83ZGlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcT48qcrD
ODyuIYY5VHs06acrg6XOT9wFXGYsrky5pXyKBLHqIXgANpumxEmEoIMtpMUTlE+2
4KpQ9l1Tqh8dfhxawU/HzfllSvbjbnq774TRTq8fEVkfnC1Q2eone6HtDsGf1bir
AFK/vdV2rx2gWevTtRxY0byTe4qZtrQ87IRyFdZpOmoEYA7u6+Z+52tzFEUiNZo+
mhwOxXJH8zO6XzUUA07U2RRwOtnBfB2BF0Rpjuuhs2sZQjH29GLd3UoBfemZGDd4
+gu6xwJIjw+Mgzo/N4SkzsJAqIYOw3iQhDgkWDnwkP/mvyupyWc34tHsKNlymyy8
rlVATa1j5jmg3Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:29:10 2026 by rpki-client