Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
File: U-8ohOShM1XbZJo0k1J8RCKJc7g.mft (raw, json)
Hash identifier: 4yA8RTBW4f0NQE5Nm+Ulpc3KJ1gYNmBe5k31VMWC54o=
Subject key identifier: 10:09:B6:F5:4A:E3:2A:1D:4D:5C:6F:1B:73:5E:1F:28:2E:75:57:F8
Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8
Certificate serial: 01A13A801BDCCC79DC1BB26DD18B157BA690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
Manifest number: 15A1
Signing time: Wed 14 Oct 2026 13:00:36 +0000
Manifest this update: Wed 14 Oct 2026 13:00:36 +0000
Manifest next update: Thu 15 Oct 2026 13:00:36 +0000
Files and hashes: 1: E-486E0-raIhh0cU7uEvlJrtVq8.roa (hash: vna5ocXCF4M8ZuD7JNv3pkr7ZzkpCUbGfeYWFBWtRTs=)
2: U-8ohOShM1XbZJo0k1J8RCKJc7g.crl (hash: zqZ5549pq98GDuqVegGKPpHfkYZCowP6U2HT2mX9q/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:80:1b:dc:cc:79:dc:1b:b2:6d:d1:8b:15:7b:a6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8
Validity
Not Before: Oct 14 13:00:36 2026 GMT
Not After : Oct 15 13:00:36 2026 GMT
Subject: CN=1009b6f54ae32a1d4d5c6f1b735e1f282e7557f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:51:21:3d:05:39:5b:ee:e4:2f:15:27:de:bc:
25:29:33:17:82:ab:4f:43:72:87:1b:5c:ce:f5:d7:
04:65:32:bc:4c:1c:26:4c:80:18:08:7b:28:71:c3:
9e:02:c3:2b:c7:2f:2a:b2:80:d8:82:dc:14:a7:c8:
7d:ba:60:af:c5:ba:53:71:0b:54:22:f7:1a:05:c3:
05:d2:a5:26:37:4a:b4:86:11:4e:5c:30:c8:2b:8e:
b6:01:99:6b:11:09:7f:4a:e4:e4:45:c9:05:62:5d:
dd:9f:65:64:70:39:5a:f6:8a:6a:27:1a:7a:b4:d2:
df:86:22:f5:01:76:8a:1f:ac:0f:a5:48:0e:a2:8d:
5c:54:67:f6:b9:50:57:d9:99:21:6c:21:69:01:33:
d5:75:cd:fc:66:a7:1b:76:35:6e:b0:1d:a8:2a:da:
0a:72:89:f0:93:c8:aa:ac:07:cd:27:fc:0b:05:50:
96:c3:55:bf:26:a8:fa:57:6b:ac:54:fc:5d:22:cb:
4b:25:a4:84:95:66:12:98:a3:eb:0b:ff:86:89:e3:
ac:59:79:23:d7:e7:7f:6a:d2:82:da:8f:96:5f:65:
ac:7a:a4:91:5a:74:97:ae:bb:51:01:7f:65:cd:c3:
c2:fe:c6:ba:c4:bf:0b:10:05:6f:b5:3b:68:e4:32:
b1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:09:B6:F5:4A:E3:2A:1D:4D:5C:6F:1B:73:5E:1F:28:2E:75:57:F8
X509v3 Authority Key Identifier:
keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1c:38:fe:96:18:d0:44:87:fe:32:06:d3:89:09:56:53:e1:
e6:61:c0:b1:b3:ed:c0:08:35:72:3e:cd:f6:63:95:9e:0a:fb:
2f:9e:80:d1:b1:07:cb:9a:5b:91:bc:07:05:7f:25:b3:90:74:
cf:17:6a:c9:ce:b6:62:f2:4d:f8:dc:17:76:09:75:f1:ff:59:
dc:84:3d:44:cd:74:b0:e0:1b:0f:5a:5b:83:88:9b:96:72:02:
50:91:da:29:4e:92:d4:81:10:f9:ab:84:b5:9c:cb:eb:33:fa:
03:01:15:3c:66:8f:0e:02:42:ff:c7:c5:0b:93:05:f8:fb:ee:
2f:79:46:5f:28:20:a3:c8:0e:31:94:68:be:ab:d5:fd:fd:a0:
30:98:62:9d:71:53:6d:6e:bd:e9:01:2d:55:09:0a:70:3d:4d:
cf:10:cd:fc:25:8d:64:f5:ee:d3:29:c9:a5:fd:69:ef:de:5b:
dc:3d:78:5f:7f:05:22:8d:3d:0f:24:41:a4:e1:aa:80:4a:70:
f5:b6:7b:9f:a0:37:3a:49:84:39:9d:33:2d:de:80:a0:d0:5d:
2a:24:5f:95:2f:56:a4:33:28:45:d8:8a:10:01:1b:31:99:bc:
88:b6:09:c1:9b:6f:3d:42:4d:67:15:37:61:b1:91:38:ce:55:
a4:bc:8f:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE6gBvczHncG7Jt0YsVe6aQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZWYyODg0ZTRhMTMzNTVkYjY0OWEzNDkzNTI3YzQ0MjI4
OTczYjgwHhcNMjYxMDE0MTMwMDM2WhcNMjYxMDE1MTMwMDM2WjAzMTEwLwYDVQQD
EygxMDA5YjZmNTRhZTMyYTFkNGQ1YzZmMWI3MzVlMWYyODJlNzU1N2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlEhPQU5W+7kLxUn3rwlKTMXgqtP
Q3KHG1zO9dcEZTK8TBwmTIAYCHsoccOeAsMrxy8qsoDYgtwUp8h9umCvxbpTcQtU
IvcaBcMF0qUmN0q0hhFOXDDIK462AZlrEQl/SuTkRckFYl3dn2VkcDla9opqJxp6
tNLfhiL1AXaKH6wPpUgOoo1cVGf2uVBX2ZkhbCFpATPVdc38ZqcbdjVusB2oKtoK
conwk8iqrAfNJ/wLBVCWw1W/Jqj6V2usVPxdIstLJaSElWYSmKPrC/+GieOsWXkj
1+d/atKC2o+WX2WseqSRWnSXrrtRAX9lzcPC/sa6xL8LEAVvtTto5DKxAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAJtvVK4yodTVxvG3NeHygudVf4MB8GA1UdIwQY
MBaAFFPvKITkoTNV22SaNJNSfEQiiXO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xM2E1N2MtY2M0Zi00NWJjLWFmOWYt
OTM2N2U0MjM4OWQ5LzEvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xM2E1N2MtY2M0Zi00NWJjLWFmOWYtOTM2N2U0MjM4OWQ5
LzEvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRw4/pYY
0ESH/jIG04kJVlPh5mHAsbPtwAg1cj7N9mOVngr7L56A0bEHy5pbkbwHBX8ls5B0
zxdqyc62YvJN+NwXdgl18f9Z3IQ9RM10sOAbD1pbg4iblnICUJHaKU6S1IEQ+auE
tZzL6zP6AwEVPGaPDgJC/8fFC5MF+PvuL3lGXyggo8gOMZRovqvV/f2gMJhinXFT
bW696QEtVQkKcD1NzxDN/CWNZPXu0ynJpf1p795b3D14X38FIo09DyRBpOGqgEpw
9bZ7n6A3OkmEOZ0zLd6AoNBdKiRflS9WpDMoRdiKEAEbMZm8iLYJwZtvPUJNZxU3
YbGROM5VpLyPYw==
-----END CERTIFICATE-----
Generated at Wed Oct 14 21:36:48 2026 by rpki-client