Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
File: UmTy3QuYerdeN5-Bd6QXajCGAGg.mft (raw, json)
Hash identifier: jRr3xHR/CsyWWw75mG3o17Q9ydnEDoMMYINv1dYoPto=
Subject key identifier: A0:56:DC:32:43:D7:9C:9A:3A:79:8F:DD:71:13:F7:56:3F:72:73:FD
Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068
Certificate serial: 01A0D8043B5FC2AD484361ED62503512F938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
Manifest number: 06AC
Signing time: Fri 25 Sep 2026 10:02:30 +0000
Manifest this update: Fri 25 Sep 2026 10:02:30 +0000
Manifest next update: Sat 26 Sep 2026 10:02:30 +0000
Files and hashes: 1: SjTVfgx1YmDzVlw-a0V5KmMIKRE.roa (hash: FiCGGz46S1/JlpdVCTYWxDtKkfziWJdtEEF1Tk4QjOQ=)
2: UmTy3QuYerdeN5-Bd6QXajCGAGg.crl (hash: 8EZ+GzqJUTSYpRCVthwSyePeQch803R2X7WpsDcgx0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:3b:5f:c2:ad:48:43:61:ed:62:50:35:12:f9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068
Validity
Not Before: Sep 25 10:02:30 2026 GMT
Not After : Sep 26 10:02:30 2026 GMT
Subject: CN=a056dc3243d79c9a3a798fdd7113f7563f7273fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b5:ab:40:a6:fd:12:75:fc:10:9e:17:61:66:
92:f6:6c:11:bd:f2:ae:d3:bf:b2:54:f6:39:38:b4:
a0:51:53:a3:73:ab:a1:d8:ab:87:fb:2e:90:a3:33:
09:1c:42:3c:11:de:d0:42:b3:e9:79:a2:c9:0b:2a:
07:12:f4:39:3b:c6:00:5a:63:6a:a6:94:00:7d:b7:
6c:1d:1b:71:c4:6e:09:b0:39:b7:b1:3e:47:7b:02:
d2:eb:4e:3e:c6:67:e3:1f:87:94:98:b1:3a:5b:c6:
20:ad:05:9f:39:75:4f:87:be:ff:e4:b3:a6:4f:52:
d7:2b:5e:72:c8:dd:9c:17:4e:25:5d:15:1d:07:7a:
22:f8:18:80:59:c1:e8:d5:38:c9:fa:18:43:2c:30:
d5:16:a4:5a:82:4f:05:46:b9:66:cf:74:21:ee:f8:
eb:c2:38:7b:a8:41:b1:eb:4f:e8:f0:02:bc:8b:af:
38:01:3e:45:0c:16:f3:48:40:1b:f2:76:12:6d:08:
82:1b:2b:1d:10:52:38:0a:f9:d4:22:a0:34:ab:c8:
1f:34:80:d3:a8:92:86:08:02:9d:6a:8f:8c:86:45:
c2:76:9c:bd:3a:74:96:5a:3a:e0:ef:8c:c2:98:3e:
3c:54:c5:3e:9a:c7:39:3a:30:bf:e2:8f:8c:6d:db:
19:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:56:DC:32:43:D7:9C:9A:3A:79:8F:DD:71:13:F7:56:3F:72:73:FD
X509v3 Authority Key Identifier:
keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1d:55:04:17:96:cf:bc:5b:d1:ee:bb:02:f1:a8:7d:fc:6b:
dc:da:c3:4d:36:7c:b8:43:ee:08:1b:0a:74:a2:a3:3d:ec:59:
8a:24:59:a8:0e:09:5b:b0:2f:44:d2:e7:26:06:95:5b:17:61:
62:ca:3d:b2:d8:58:fa:7f:73:d0:00:7f:c3:a5:16:d9:69:dc:
cb:76:a9:e3:28:fc:7b:c0:7c:f5:ea:c3:82:5f:41:1f:4e:18:
b2:3b:a9:45:cb:bc:80:df:04:40:a5:1c:cb:32:4b:5c:0e:a2:
bc:b4:e4:c1:5b:5d:08:84:cc:4b:17:0a:48:93:bc:85:a5:ae:
df:0c:ac:0e:ba:ce:6f:ac:5b:01:bf:14:67:03:64:74:e2:9a:
6e:49:78:46:b5:ef:05:4f:ad:92:8d:f0:7b:00:97:7e:c8:b4:
60:7a:fc:43:59:10:8b:65:d3:d7:b5:10:48:e2:45:99:d2:bb:
03:6c:a9:76:75:cc:ba:c6:e4:e3:59:5c:e3:bb:0a:63:10:04:
c7:6e:9f:75:bc:bd:8e:83:21:af:0a:a1:c8:af:33:d3:36:2d:
97:4b:e2:d4:70:af:d9:e9:e0:ad:e6:91:d6:9a:82:55:93:e3:
fc:fb:5f:9e:3d:0f:7d:28:51:f2:dd:ae:12:50:ae:2d:f9:8c:
ad:58:d7:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYBDtfwq1IQ2HtYlA1Evk4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjRmMmRkMGI5ODdhYjc1ZTM3OWY4MTc3YTQxNzZhMzA4
NjAwNjgwHhcNMjYwOTI1MTAwMjMwWhcNMjYwOTI2MTAwMjMwWjAzMTEwLwYDVQQD
EyhhMDU2ZGMzMjQzZDc5YzlhM2E3OThmZGQ3MTEzZjc1NjNmNzI3M2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrWrQKb9EnX8EJ4XYWaS9mwRvfKu
07+yVPY5OLSgUVOjc6uh2KuH+y6QozMJHEI8Ed7QQrPpeaLJCyoHEvQ5O8YAWmNq
ppQAfbdsHRtxxG4JsDm3sT5HewLS604+xmfjH4eUmLE6W8YgrQWfOXVPh77/5LOm
T1LXK15yyN2cF04lXRUdB3oi+BiAWcHo1TjJ+hhDLDDVFqRagk8FRrlmz3Qh7vjr
wjh7qEGx60/o8AK8i684AT5FDBbzSEAb8nYSbQiCGysdEFI4CvnUIqA0q8gfNIDT
qJKGCAKdao+MhkXCdpy9OnSWWjrg74zCmD48VMU+msc5OjC/4o+MbdsZ6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBW3DJD15yaOnmP3XET91Y/cnP9MB8GA1UdIwQY
MBaAFFJk8t0LmHq3XjefgXekF2owhgBoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1UeTNRdVllcmRlTjUtQmQ2UVhhakNHQUdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81YzEwZWYtNmQzYy00NWU0LThlZjkt
OWQ3OTRlZTE0ZGQwLzEvVW1UeTNRdVllcmRlTjUtQmQ2UVhhakNHQUdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS81YzEwZWYtNmQzYy00NWU0LThlZjktOWQ3OTRlZTE0ZGQw
LzEvVW1UeTNRdVllcmRlTjUtQmQ2UVhhakNHQUdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATR1VBBeW
z7xb0e67AvGoffxr3NrDTTZ8uEPuCBsKdKKjPexZiiRZqA4JW7AvRNLnJgaVWxdh
Yso9sthY+n9z0AB/w6UW2Wncy3ap4yj8e8B89erDgl9BH04YsjupRcu8gN8EQKUc
yzJLXA6ivLTkwVtdCITMSxcKSJO8haWu3wysDrrOb6xbAb8UZwNkdOKabkl4RrXv
BU+tko3wewCXfsi0YHr8Q1kQi2XT17UQSOJFmdK7A2ypdnXMusbk41lc47sKYxAE
x26fdby9joMhrwqhyK8z0zYtl0vi1HCv2engreaR1pqCVZPj/Ptfnj0PfShR8t2u
ElCuLfmMrVjXfg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 16:51:48 2026 by rpki-client