Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
File: U8vRR3BEoDQEx_xDlhwsg7unW7w.mft (raw, json)
Hash identifier: ZA8F4vrJH36gciLZUFyLlxkfpYqro81SfmlbNFtGYCo=
Subject key identifier: 47:2B:C8:3D:EE:27:87:BD:1B:CA:A6:5F:DF:3E:1F:BF:28:B6:95:0D
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 01A0BEB0C63C25914247782F6C491274F485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
Manifest number: 1291
Signing time: Sun 20 Sep 2026 12:00:51 +0000
Manifest this update: Sun 20 Sep 2026 12:00:51 +0000
Manifest next update: Mon 21 Sep 2026 12:00:51 +0000
Files and hashes: 1: U8vRR3BEoDQEx_xDlhwsg7unW7w.crl (hash: caP9L64FGTOQdj34H+qbmMAXZ5yJns1JU1RwD/Jsc2U=)
2: i-hrmAd6eP2UJtkk3SPMJzG0IR4.roa (hash: B6teHj1AoVH0G/n45VB0pZwR7t3AJ0lfJJi8U5XTRvo=)
3: zaKgjQxKOXseye7OptrYTXdeRW8.roa (hash: msUavGu33dhomVrKx+MtKYwUf9QSzxgfQ+UXycVAuNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:c6:3c:25:91:42:47:78:2f:6c:49:12:74:f4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Sep 20 12:00:51 2026 GMT
Not After : Sep 21 12:00:51 2026 GMT
Subject: CN=472bc83dee2787bd1bcaa65fdf3e1fbf28b6950d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fa:84:af:91:3e:89:fb:4b:30:3b:52:54:bf:
a8:8f:94:1f:85:46:4e:63:49:df:0f:d2:ec:9f:83:
87:f3:ea:99:85:3a:3c:2a:c4:9a:bb:12:52:1d:c9:
49:96:4e:b5:73:7e:ca:e0:8c:26:cc:02:6e:cf:ce:
69:65:a3:50:dd:18:b1:39:e8:5e:d0:ad:6d:a8:31:
7e:09:54:33:e1:9c:e9:0e:b5:8b:91:13:9e:7a:96:
6a:7e:0c:75:20:24:b5:41:89:6b:27:3b:5b:98:56:
51:08:38:a7:42:82:88:90:e5:af:f2:86:c3:d3:f5:
a3:b1:76:83:e4:39:e1:ba:fd:7c:c0:49:fb:63:ed:
ac:a4:ce:35:31:05:fc:74:39:7a:c2:90:32:a0:25:
3d:cf:34:27:2d:52:e5:8d:ea:96:98:80:da:95:72:
97:53:d0:28:13:9d:00:f4:4f:6e:71:ef:bb:79:80:
ca:dd:62:23:e6:03:f4:4a:2e:b6:ba:52:b4:80:b2:
d4:e3:0b:c1:fd:88:52:ef:d7:21:f0:a6:37:6d:93:
1e:28:e2:ce:f8:ec:e8:9a:18:04:c3:76:7b:e2:3f:
13:f7:13:da:70:1f:d1:4f:7c:6f:8f:40:5b:93:bb:
70:f6:34:ef:94:b3:9d:21:a3:2c:ac:a4:0c:58:b6:
4a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2B:C8:3D:EE:27:87:BD:1B:CA:A6:5F:DF:3E:1F:BF:28:B6:95:0D
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:15:e8:84:5d:f7:6b:e8:49:33:2e:d7:4d:2a:3b:7c:cc:5e:
1e:42:ad:64:94:ed:aa:0b:93:9e:83:50:ba:2e:e1:d2:3b:af:
06:b3:6c:08:c1:0d:65:ce:dc:ad:2f:6c:b9:b0:46:d2:ec:5e:
3c:c3:62:51:ea:61:a8:2a:20:27:8e:40:70:65:a2:42:e0:c7:
7f:0c:5e:7d:97:45:3a:74:e2:d6:c3:b6:a0:c4:e0:14:d5:33:
4f:d3:2f:b9:b6:14:b8:72:d3:ac:6d:c2:0d:9b:a0:ff:95:76:
bc:2e:0c:80:34:ca:bf:83:73:bc:93:70:cc:cb:cc:18:5d:33:
88:0b:62:2b:d2:7d:e2:75:fd:96:81:9b:ef:76:fb:9d:ff:c1:
64:f9:a4:47:a7:60:2e:05:8f:8f:21:32:c3:38:4f:18:6d:49:
fe:70:5e:ef:01:3f:3e:96:50:0b:02:e3:f7:24:60:05:94:68:
88:77:02:f2:21:ed:05:49:25:f7:11:3b:c0:3d:a3:8a:ef:ed:
c9:4e:6b:21:81:fe:f0:da:50:64:ac:67:ad:14:7c:ef:2f:ec:
25:8d:ad:a2:19:a0:cf:f8:38:94:57:47:05:9c:f4:b1:c8:f5:
99:6c:db:f3:ba:3a:ff:52:db:28:61:c2:05:5e:3c:06:61:74:
a2:6a:88:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+sMY8JZFCR3gvbEkSdPSFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzY2JkMTQ3NzA0NGEwMzQwNGM3ZmM0Mzk2MWMyYzgzYmJh
NzViYmMwHhcNMjYwOTIwMTIwMDUxWhcNMjYwOTIxMTIwMDUxWjAzMTEwLwYDVQQD
Eyg0NzJiYzgzZGVlMjc4N2JkMWJjYWE2NWZkZjNlMWZiZjI4YjY5NTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfqEr5E+iftLMDtSVL+oj5QfhUZO
Y0nfD9Lsn4OH8+qZhTo8KsSauxJSHclJlk61c37K4IwmzAJuz85pZaNQ3RixOehe
0K1tqDF+CVQz4ZzpDrWLkROeepZqfgx1ICS1QYlrJztbmFZRCDinQoKIkOWv8obD
0/WjsXaD5Dnhuv18wEn7Y+2spM41MQX8dDl6wpAyoCU9zzQnLVLljeqWmIDalXKX
U9AoE50A9E9uce+7eYDK3WIj5gP0Si62ulK0gLLU4wvB/YhS79ch8KY3bZMeKOLO
+OzomhgEw3Z74j8T9xPacB/RT3xvj0Bbk7tw9jTvlLOdIaMsrKQMWLZKowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcryD3uJ4e9G8qmX98+H78otpUNMB8GA1UdIwQY
MBaAFFPL0UdwRKA0BMf8Q5YcLIO7p1u8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTh2UlIzQkVvRFFFeF94RGxod3NnN3VuVzd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kY2U0NGEtNGE5MC00M2VhLWIxZmIt
YTJkMTE2NTYwYWNhLzEvVTh2UlIzQkVvRFFFeF94RGxod3NnN3VuVzd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kY2U0NGEtNGE5MC00M2VhLWIxZmItYTJkMTE2NTYwYWNh
LzEvVTh2UlIzQkVvRFFFeF94RGxod3NnN3VuVzd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArhXohF33
a+hJMy7XTSo7fMxeHkKtZJTtqguTnoNQui7h0juvBrNsCMENZc7crS9subBG0uxe
PMNiUephqCogJ45AcGWiQuDHfwxefZdFOnTi1sO2oMTgFNUzT9MvubYUuHLTrG3C
DZug/5V2vC4MgDTKv4NzvJNwzMvMGF0ziAtiK9J94nX9loGb73b7nf/BZPmkR6dg
LgWPjyEywzhPGG1J/nBe7wE/PpZQCwLj9yRgBZRoiHcC8iHtBUkl9xE7wD2jiu/t
yU5rIYH+8NpQZKxnrRR87y/sJY2tohmgz/g4lFdHBZz0scj1mWzb87o6/1LbKGHC
BV48BmF0omqIjw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 17:15:24 2026 by rpki-client