Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
File: U4Vcjs6b1vjjlAICISzgmwX1-KA.mft (raw, json)
Hash identifier: Ps4H+mPoRgveprolOO/VddCLXiQSBDwvAg+14elVZ3w=
Subject key identifier: AB:F1:E3:76:38:4A:5A:C7:69:77:2E:96:F5:51:2E:7F:1A:8F:99:EE
Authority key identifier: 53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
Certificate issuer: /CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Certificate serial: 019D98F52F471C1389AC516EC81DF18B461A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
Manifest number: 1554
Signing time: Fri 17 Apr 2026 01:01:38 +0000
Manifest this update: Fri 17 Apr 2026 01:01:38 +0000
Manifest next update: Sat 18 Apr 2026 01:01:38 +0000
Files and hashes: 1: U4Vcjs6b1vjjlAICISzgmwX1-KA.crl (hash: gi6WSJQ+0LdvmL8wumMYd27Jm7qm1XWex3ufiJLA9u8=)
2: wOCmhg5ukUDjqYrrNe8HL0c6WHY.roa (hash: py0DTzjoQh1bUaOEwoDGjjlil3qVagDVLMDa9WBCMVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:2f:47:1c:13:89:ac:51:6e:c8:1d:f1:8b:46:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Validity
Not Before: Apr 17 01:01:38 2026 GMT
Not After : Apr 18 01:01:38 2026 GMT
Subject: CN=abf1e376384a5ac769772e96f5512e7f1a8f99ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6c:b4:79:ad:39:62:c5:a0:54:56:0b:e2:0e:
5f:6d:da:6f:66:52:ee:ae:b9:d1:55:1d:25:d5:df:
3d:92:bb:ae:6e:b6:f2:50:02:87:de:af:7c:d2:c4:
3b:bb:4c:7d:c1:16:8c:fe:5a:c5:a8:60:f9:70:a2:
03:71:66:8f:ab:64:ab:64:b0:a6:0d:b1:f4:78:b2:
a6:0a:c6:95:bd:90:42:46:9b:8b:d6:7c:24:ac:f3:
63:f0:65:77:f9:84:c9:d0:fb:66:e2:61:9b:76:50:
0c:a7:85:06:f9:39:28:dd:b9:b1:6e:57:9e:8f:e6:
4b:df:c6:21:95:01:aa:a7:9d:6d:d3:2b:ec:0b:16:
ec:a4:0c:2e:92:77:7b:3e:36:98:f1:b1:e0:16:6a:
ca:82:c5:46:35:77:8c:4d:25:55:10:1a:55:b3:51:
55:3f:28:6e:b9:96:20:af:33:d2:ec:48:17:d6:9f:
a3:fa:82:b9:83:02:cf:76:8a:50:7c:a7:aa:e3:73:
c4:2e:3c:d4:da:cf:10:0d:e7:44:18:50:2c:66:ab:
00:71:11:75:6e:e8:7a:08:5c:e6:f4:e2:b5:8a:91:
15:78:2a:da:21:43:26:ac:42:6b:c9:7d:22:34:8f:
af:f1:7e:89:13:66:df:5a:95:d8:0f:2b:47:a2:2e:
1e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F1:E3:76:38:4A:5A:C7:69:77:2E:96:F5:51:2E:7F:1A:8F:99:EE
X509v3 Authority Key Identifier:
keyid:53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:94:19:f9:eb:af:ce:6d:b5:87:a9:58:5f:bb:31:6d:0b:40:
64:bc:e5:9b:9c:b7:28:cf:3a:5f:b3:62:8f:4d:59:b8:58:e4:
c0:39:bb:7c:c7:b5:00:d5:9a:4f:3b:2c:09:c2:0b:ed:4b:8a:
46:3d:e4:aa:b1:17:51:6a:84:58:ab:b1:ee:2d:42:19:1b:93:
76:57:53:43:ae:7f:98:d0:f7:ba:64:7a:46:f5:ac:a9:cb:5e:
ee:ae:80:a3:db:2f:52:3e:86:49:5f:a3:3d:2f:33:dd:78:14:
80:fe:82:d8:35:3f:6c:78:bc:6f:73:6b:af:4f:d1:ba:1a:fc:
f0:ca:95:eb:64:e7:58:ed:27:de:bd:15:ed:bd:10:29:4b:44:
76:0f:05:38:54:a4:fb:f5:f1:30:ce:77:61:cf:a6:6b:48:e3:
88:78:0a:b5:46:d5:bb:d4:f3:3c:fc:9c:3c:3e:e0:ea:8c:30:
08:69:3f:2b:ad:86:96:b9:4b:f3:8a:ca:9d:ef:e9:f0:bd:b3:
38:90:19:a1:63:51:d9:1e:e3:32:19:bd:32:1b:5b:58:e3:ae:
a8:fb:86:7a:fa:38:e5:d4:be:28:9b:67:06:70:1d:a6:93:9e:
f2:ea:4d:b3:01:27:98:93:28:94:38:3e:64:8e:ec:03:56:e2:
7b:e1:4f:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9S9HHBOJrFFuyB3xi0YaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzODU1YzhlY2U5YmQ2ZjhlMzk0MDIwMjIxMmNlMDliMDVm
NWY4YTAwHhcNMjYwNDE3MDEwMTM4WhcNMjYwNDE4MDEwMTM4WjAzMTEwLwYDVQQD
EyhhYmYxZTM3NjM4NGE1YWM3Njk3NzJlOTZmNTUxMmU3ZjFhOGY5OWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmy0ea05YsWgVFYL4g5fbdpvZlLu
rrnRVR0l1d89kruubrbyUAKH3q980sQ7u0x9wRaM/lrFqGD5cKIDcWaPq2SrZLCm
DbH0eLKmCsaVvZBCRpuL1nwkrPNj8GV3+YTJ0Ptm4mGbdlAMp4UG+Tko3bmxblee
j+ZL38YhlQGqp51t0yvsCxbspAwuknd7PjaY8bHgFmrKgsVGNXeMTSVVEBpVs1FV
PyhuuZYgrzPS7EgX1p+j+oK5gwLPdopQfKeq43PELjzU2s8QDedEGFAsZqsAcRF1
buh6CFzm9OK1ipEVeCraIUMmrEJryX0iNI+v8X6JE2bfWpXYDytHoi4eZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvx43Y4SlrHaXculvVRLn8aj5nuMB8GA1UdIwQY
MBaAFFOFXI7Om9b445QCAiEs4JsF9figMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTRWY2pzNmIxdmpqbEFJQ0lTemdtd1gxLUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84MzM2YjAtY2JlNC00ZGEyLTg0MWIt
MWNlZmQxZmExMGE2LzEvVTRWY2pzNmIxdmpqbEFJQ0lTemdtd1gxLUtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84MzM2YjAtY2JlNC00ZGEyLTg0MWItMWNlZmQxZmExMGE2
LzEvVTRWY2pzNmIxdmpqbEFJQ0lTemdtd1gxLUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJQZ+euv
zm21h6lYX7sxbQtAZLzlm5y3KM86X7Nij01ZuFjkwDm7fMe1ANWaTzssCcIL7UuK
Rj3kqrEXUWqEWKux7i1CGRuTdldTQ65/mND3umR6RvWsqcte7q6Ao9svUj6GSV+j
PS8z3XgUgP6C2DU/bHi8b3Nrr0/Ruhr88MqV62TnWO0n3r0V7b0QKUtEdg8FOFSk
+/XxMM53Yc+ma0jjiHgKtUbVu9TzPPycPD7g6owwCGk/K62GlrlL84rKne/p8L2z
OJAZoWNR2R7jMhm9MhtbWOOuqPuGevo45dS+KJtnBnAdppOe8upNswEnmJMolDg+
ZI7sA1bie+FPjg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:34 2026 by rpki-client