Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
File: U8vRR3BEoDQEx_xDlhwsg7unW7w.mft (raw, json)
Hash identifier: Mp6E8okJhxvqnfJs3xoI7uM7/Zhv8pv8R+saXs9pwCU=
Subject key identifier: E5:B7:7F:05:B2:F9:84:A7:86:E3:31:41:CC:88:4F:E5:12:4E:F0:DD
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 019EC0DAC1D050FAFB5637BE7225E77E8694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
Manifest number: 1189
Signing time: Sat 13 Jun 2026 12:00:22 +0000
Manifest this update: Sat 13 Jun 2026 12:00:22 +0000
Manifest next update: Sun 14 Jun 2026 12:00:22 +0000
Files and hashes: 1: U8vRR3BEoDQEx_xDlhwsg7unW7w.crl (hash: UfDLjr96AFPNfY/pBGDq2btKjZ2IknW7dOrlzZWPg0s=)
2: i-hrmAd6eP2UJtkk3SPMJzG0IR4.roa (hash: B6teHj1AoVH0G/n45VB0pZwR7t3AJ0lfJJi8U5XTRvo=)
3: zaKgjQxKOXseye7OptrYTXdeRW8.roa (hash: msUavGu33dhomVrKx+MtKYwUf9QSzxgfQ+UXycVAuNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:c1:d0:50:fa:fb:56:37:be:72:25:e7:7e:86:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Jun 13 12:00:22 2026 GMT
Not After : Jun 14 12:00:22 2026 GMT
Subject: CN=e5b77f05b2f984a786e33141cc884fe5124ef0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2e:41:35:70:f4:85:05:5d:96:ce:1d:b9:f8:
48:b5:1d:f5:4e:44:6d:2b:46:d8:97:6d:3d:ee:05:
3c:a0:7e:7f:c2:65:5e:7d:fd:b4:29:76:f0:8f:e9:
f4:d7:9b:e2:4d:3d:a1:98:ce:ff:36:05:70:bb:5b:
81:18:da:d5:77:b8:f3:8c:96:46:ec:f6:39:18:53:
2e:df:a5:b1:67:02:34:c1:21:ce:29:d8:ac:e0:96:
3b:fd:81:72:12:57:9c:bb:59:a5:e7:bf:48:e7:09:
42:44:a6:2a:33:8a:d8:c1:9f:32:fc:ba:95:32:13:
44:23:3d:1e:8e:e8:00:94:d5:36:1e:1a:bd:aa:6f:
96:83:e1:2b:7b:24:7b:af:a4:6f:b6:6f:5e:58:1a:
9c:51:f2:b8:84:dd:df:82:ca:e2:92:a0:e2:46:38:
42:39:cc:9b:5d:48:18:bd:c1:33:1e:2e:92:22:cd:
06:72:b4:dc:f1:3e:c1:e5:d8:ac:d3:59:98:8d:c9:
41:50:40:b7:ee:c0:a8:5d:c0:3c:90:ce:c9:a8:3c:
99:a7:b8:14:23:34:cd:e8:91:3f:c6:53:07:e2:9a:
73:ad:71:36:d5:08:15:c3:63:d3:08:b6:e0:4a:cc:
a0:69:ae:2f:30:eb:c2:61:88:b2:77:f1:7f:19:e4:
a2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B7:7F:05:B2:F9:84:A7:86:E3:31:41:CC:88:4F:E5:12:4E:F0:DD
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:14:2b:dd:94:5c:05:b1:12:77:aa:84:e5:e2:4c:34:f3:fa:
87:fa:1c:62:b0:e2:4d:72:b7:f7:e8:1b:8b:1e:ff:65:7d:a8:
06:fe:ca:5a:6c:82:80:d3:76:ba:63:67:a6:a9:12:88:3c:a5:
75:cb:5c:95:4b:dd:95:66:32:22:2e:1f:0d:f8:19:87:89:bc:
6c:3b:c3:c8:e3:f7:74:7b:d8:48:2c:81:52:99:c8:b1:45:2a:
7e:70:e1:a9:72:8e:6d:e6:b5:fa:cc:ad:dc:9b:54:09:a3:5e:
de:9f:f2:29:34:85:e3:a0:4d:36:50:40:38:b6:25:54:6e:90:
d5:65:4a:34:1d:43:8c:e0:35:1e:ea:5b:15:3f:5e:59:c7:dd:
23:c3:bb:72:7e:67:bd:30:fa:45:a3:bf:19:20:0c:9e:82:13:
49:89:54:d2:b4:a2:fd:a4:a3:f2:48:69:94:0d:e1:ed:ca:b9:
e0:b4:e0:07:6c:cf:35:5e:21:d4:cf:d3:df:ef:36:73:b3:9b:
d7:11:ff:78:a3:90:5a:3a:ab:26:77:de:6e:d3:55:e0:00:97:
20:d1:1d:27:21:96:b3:e9:1c:35:60:1b:5c:5b:13:e6:4e:30:
c3:d0:fe:95:21:10:ad:52:df:a9:8f:6e:ed:f1:64:76:28:a8:
b4:c1:73:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A2sHQUPr7Vje+ciXnfoaUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzY2JkMTQ3NzA0NGEwMzQwNGM3ZmM0Mzk2MWMyYzgzYmJh
NzViYmMwHhcNMjYwNjEzMTIwMDIyWhcNMjYwNjE0MTIwMDIyWjAzMTEwLwYDVQQD
EyhlNWI3N2YwNWIyZjk4NGE3ODZlMzMxNDFjYzg4NGZlNTEyNGVmMGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS5BNXD0hQVdls4dufhItR31TkRt
K0bYl2097gU8oH5/wmVeff20KXbwj+n015viTT2hmM7/NgVwu1uBGNrVd7jzjJZG
7PY5GFMu36WxZwI0wSHOKdis4JY7/YFyElecu1ml579I5wlCRKYqM4rYwZ8y/LqV
MhNEIz0ejugAlNU2Hhq9qm+Wg+EreyR7r6Rvtm9eWBqcUfK4hN3fgsrikqDiRjhC
OcybXUgYvcEzHi6SIs0GcrTc8T7B5dis01mYjclBUEC37sCoXcA8kM7JqDyZp7gU
IzTN6JE/xlMH4ppzrXE21QgVw2PTCLbgSsygaa4vMOvCYYiyd/F/GeSiiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOW3fwWy+YSnhuMxQcyIT+USTvDdMB8GA1UdIwQY
MBaAFFPL0UdwRKA0BMf8Q5YcLIO7p1u8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTh2UlIzQkVvRFFFeF94RGxod3NnN3VuVzd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kY2U0NGEtNGE5MC00M2VhLWIxZmIt
YTJkMTE2NTYwYWNhLzEvVTh2UlIzQkVvRFFFeF94RGxod3NnN3VuVzd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kY2U0NGEtNGE5MC00M2VhLWIxZmItYTJkMTE2NTYwYWNh
LzEvVTh2UlIzQkVvRFFFeF94RGxod3NnN3VuVzd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiBQr3ZRc
BbESd6qE5eJMNPP6h/ocYrDiTXK39+gbix7/ZX2oBv7KWmyCgNN2umNnpqkSiDyl
dctclUvdlWYyIi4fDfgZh4m8bDvDyOP3dHvYSCyBUpnIsUUqfnDhqXKObea1+syt
3JtUCaNe3p/yKTSF46BNNlBAOLYlVG6Q1WVKNB1DjOA1HupbFT9eWcfdI8O7cn5n
vTD6RaO/GSAMnoITSYlU0rSi/aSj8khplA3h7cq54LTgB2zPNV4h1M/T3+82c7Ob
1xH/eKOQWjqrJnfebtNV4ACXINEdJyGWs+kcNWAbXFsT5k4ww9D+lSEQrVLfqY9u
7fFkdiiotMFzVg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:40:14 2026 by rpki-client