Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft
File: U3h815RuENiGRqx53lfMbsWeQTI.mft (raw, json)
Hash identifier: GmkJh0qi+A3C7S8l+em9IEDny68nyk9OH/1b1olh04I=
Subject key identifier: D8:6B:3F:70:8E:79:90:B9:68:21:E9:25:2E:FE:37:BB:6F:16:00:DC
Authority key identifier: 53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32
Certificate issuer: /CN=53787cd7946e10d88646ac79de57cc6ec59e4132
Certificate serial: 019CABD9EB1FA06C3616156DBBD5EA2BDD03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft
Manifest number: 14F5
Signing time: Mon 02 Mar 2026 00:01:51 +0000
Manifest this update: Mon 02 Mar 2026 00:01:51 +0000
Manifest next update: Tue 03 Mar 2026 00:01:51 +0000
Files and hashes: 1: BTQqaN3zxchRx-EpD2H2MNJ-ft4.roa (hash: XV4ayQSd0b2rkVnEHjcvBGIgn52FBAArQFJOmYQB3pA=)
2: QtW4Z9V0VWOm_3B5SrSvvQ3anTE.roa (hash: DHlUdVZGbEoHW4Ps1BkaOOFImnLamhxBGEFyeIi9s+Q=)
3: U3h815RuENiGRqx53lfMbsWeQTI.crl (hash: CBFfyX7US5pyK0I4MOAZcYLHhbylh+AvFttsWikoauk=)
4: xAgD6SynRwV_Yye8rFHO4JCRRio.roa (hash: l2HE8jagwao4Kb86kIkCwZOHjaiAFH+AljSJnuRLiF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:eb:1f:a0:6c:36:16:15:6d:bb:d5:ea:2b:dd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53787cd7946e10d88646ac79de57cc6ec59e4132
Validity
Not Before: Mar 2 00:01:51 2026 GMT
Not After : Mar 3 00:01:51 2026 GMT
Subject: CN=d86b3f708e7990b96821e9252efe37bb6f1600dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:3f:60:14:6e:63:97:2d:66:ce:48:66:b2:
d1:27:cd:bf:54:c0:e4:97:d7:4d:e0:d8:88:a3:81:
41:f8:80:dd:e5:c5:fc:b9:43:97:00:5c:f4:0f:f9:
f5:8d:03:4d:8c:f9:1c:08:60:81:0b:a7:42:51:5e:
cf:ac:a8:7f:2b:1a:06:03:36:e4:00:47:5c:c2:f9:
46:4e:0e:fc:4e:ca:9b:34:20:0b:5a:81:a2:c5:ca:
d0:22:b3:ad:1d:10:39:bb:3a:ca:72:f3:4c:88:fa:
91:bf:91:71:38:d1:b0:81:d3:00:09:9e:4f:fc:58:
a7:d6:5b:fb:2e:5e:d1:9c:a9:03:10:a0:0f:97:74:
13:ab:5e:0d:03:18:25:84:cd:51:93:c6:18:12:66:
20:01:f6:56:07:b4:1c:76:bc:ee:d8:98:6b:58:7a:
2a:c7:58:82:72:e4:d0:f2:9f:b6:56:8d:3d:f9:59:
35:22:db:a4:73:0f:64:d1:f6:bc:5c:1e:a1:4e:1f:
e7:f9:a4:63:fa:a0:42:89:7c:c9:6e:90:14:99:b3:
2a:94:d5:2e:cb:26:9c:79:9d:d1:a9:2b:3b:2a:da:
7e:1e:58:eb:60:6d:9a:0c:ae:ec:75:4b:95:d4:18:
21:1c:dc:ba:e5:de:d7:1e:23:9c:9c:69:9d:ad:4b:
02:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6B:3F:70:8E:79:90:B9:68:21:E9:25:2E:FE:37:BB:6F:16:00:DC
X509v3 Authority Key Identifier:
keyid:53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:66:10:c0:70:97:6e:09:73:02:d2:1d:a9:6f:83:99:6b:e4:
4e:64:51:3e:e4:6c:3d:25:6e:ff:71:2d:f4:2a:41:ef:fc:da:
2d:7f:1e:bd:26:f5:50:07:18:53:fc:b5:e5:ba:cd:5b:8e:75:
da:eb:6b:cf:e4:4a:61:1c:33:31:e5:1f:43:e1:b3:73:f9:77:
47:79:85:93:3d:5c:d1:a5:a8:7a:9b:04:d2:1a:c9:61:b4:83:
b7:b7:47:78:37:2f:e4:6e:8c:39:53:eb:3b:b7:d3:79:66:01:
f7:8a:0c:ea:ab:ed:c8:e0:1f:61:57:cd:09:d3:56:80:58:78:
65:d4:1e:77:c0:e6:06:11:6c:53:9a:41:24:53:b0:29:57:3e:
74:50:b5:55:a1:4e:d0:44:4f:d8:6c:12:9c:d4:b3:0b:4b:45:
21:46:84:62:a3:ff:96:3e:61:94:9a:f5:85:4d:9c:ff:73:7e:
e6:7c:f0:e7:20:ac:9d:41:a2:5e:3a:35:8d:91:ca:6c:4f:bc:
35:07:ff:66:08:e6:c8:2d:64:57:1f:3e:d5:20:e8:c6:6b:eb:
ac:4f:5e:84:1a:4f:25:e5:60:d2:48:de:9a:82:f6:a4:5e:f5:
df:ed:5e:c5:b0:5c:21:d8:78:23:48:ef:0e:21:2f:1d:af:1e:
8c:0a:30:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2esfoGw2FhVtu9XqK90DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNzg3Y2Q3OTQ2ZTEwZDg4NjQ2YWM3OWRlNTdjYzZlYzU5
ZTQxMzIwHhcNMjYwMzAyMDAwMTUxWhcNMjYwMzAzMDAwMTUxWjAzMTEwLwYDVQQD
EyhkODZiM2Y3MDhlNzk5MGI5NjgyMWU5MjUyZWZlMzdiYjZmMTYwMGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx4/YBRuY5ctZs5IZrLRJ82/VMDk
l9dN4NiIo4FB+IDd5cX8uUOXAFz0D/n1jQNNjPkcCGCBC6dCUV7PrKh/KxoGAzbk
AEdcwvlGTg78TsqbNCALWoGixcrQIrOtHRA5uzrKcvNMiPqRv5FxONGwgdMACZ5P
/Fin1lv7Ll7RnKkDEKAPl3QTq14NAxglhM1Rk8YYEmYgAfZWB7Qcdrzu2JhrWHoq
x1iCcuTQ8p+2Vo09+Vk1Itukcw9k0fa8XB6hTh/n+aRj+qBCiXzJbpAUmbMqlNUu
yyaceZ3RqSs7Ktp+HljrYG2aDK7sdUuV1BghHNy65d7XHiOcnGmdrUsCsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhrP3COeZC5aCHpJS7+N7tvFgDcMB8GA1UdIwQY
MBaAFFN4fNeUbhDYhkased5XzG7FnkEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTNoODE1UnVFTmlHUnF4NTNsZk1ic1dlUVRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jNzc4MjUtNjhhMy00YjNlLWJjOTAt
NTIzZmQ4NmEwN2M3LzEvVTNoODE1UnVFTmlHUnF4NTNsZk1ic1dlUVRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9jNzc4MjUtNjhhMy00YjNlLWJjOTAtNTIzZmQ4NmEwN2M3
LzEvVTNoODE1UnVFTmlHUnF4NTNsZk1ic1dlUVRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr2YQwHCX
bglzAtIdqW+DmWvkTmRRPuRsPSVu/3Et9CpB7/zaLX8evSb1UAcYU/y15brNW451
2utrz+RKYRwzMeUfQ+Gzc/l3R3mFkz1c0aWoepsE0hrJYbSDt7dHeDcv5G6MOVPr
O7fTeWYB94oM6qvtyOAfYVfNCdNWgFh4ZdQed8DmBhFsU5pBJFOwKVc+dFC1VaFO
0ERP2GwSnNSzC0tFIUaEYqP/lj5hlJr1hU2c/3N+5nzw5yCsnUGiXjo1jZHKbE+8
NQf/ZgjmyC1kVx8+1SDoxmvrrE9ehBpPJeVg0kjemoL2pF713+1exbBcIdh4I0jv
DiEvHa8ejAowcQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:26 2026 by rpki-client