Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
File: U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json)
Hash identifier: AD5lOTK4vHF3MPf4Nm484rtjrH8FwcxQCKGF6XgJp4Y=
Subject key identifier: AD:9C:50:EE:2B:00:CD:76:80:EB:2D:B2:35:AA:F8:77:47:C1:7E:94
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial: 019EC0A4101D3630A920ECDB05C81A84C0ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
Manifest number: 1018
Signing time: Sat 13 Jun 2026 11:00:37 +0000
Manifest this update: Sat 13 Jun 2026 11:00:37 +0000
Manifest next update: Sun 14 Jun 2026 11:00:37 +0000
Files and hashes: 1: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: CZQas5BXVkmHbBbmEera0+eJxcb3yEGKq2STH9CXnqI=)
2: WzohaVzPLEBKuPQD-sbPCaZXcnQ.roa (hash: SIJFdx4blAk5vec/FV7gfH5KB998Y+98D4gZTEETEKk=)
3: nM6XYB2iwgJ17oTR8XmeIg2xI2M.roa (hash: 1o7tQyZeZiqzL+ktcifE7MOOMo51KCeyAAEwmbZDyZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:10:1d:36:30:a9:20:ec:db:05:c8:1a:84:c0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Validity
Not Before: Jun 13 11:00:37 2026 GMT
Not After : Jun 14 11:00:37 2026 GMT
Subject: CN=ad9c50ee2b00cd7680eb2db235aaf87747c17e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a0:b6:6a:7f:ea:df:1f:4f:66:a0:65:81:86:
57:40:db:e2:a7:be:13:d8:8f:67:3e:4c:50:0e:b1:
e7:dd:c1:43:d0:f9:e1:56:6d:46:93:f8:72:4f:2b:
0d:d3:55:25:0f:f0:1d:78:35:e4:b7:8a:d5:1f:3b:
a7:69:5f:d4:aa:5e:45:a8:cb:5d:e0:9c:ba:92:9b:
cf:81:42:60:94:55:05:8a:19:82:65:a1:66:77:3d:
9c:a0:bf:31:d6:aa:ff:bd:ac:af:4c:9d:f2:a5:15:
1b:a5:d2:85:4a:54:1c:6f:5e:e1:15:88:7e:8e:0d:
c2:0e:d3:2a:fe:2a:09:4f:88:37:d4:bf:a5:54:0e:
9e:4a:3b:e4:0d:67:5e:91:78:80:b0:0d:f0:91:e0:
34:d2:c0:f0:09:13:a7:71:ec:a9:30:52:03:3a:a7:
7b:c3:5b:2c:c5:f6:1d:b2:fc:e6:89:b2:37:c5:0b:
37:fe:53:96:83:d0:78:f1:e2:c3:1b:95:39:27:db:
fa:ce:61:27:1c:47:7f:1f:23:91:c6:ce:15:df:9d:
55:f7:e6:91:71:98:4b:1c:3c:16:e2:a6:4e:12:65:
4b:2d:a6:e5:85:a5:30:75:94:36:a0:47:99:20:9d:
12:f2:84:94:2a:74:a6:b6:70:f2:b1:ee:4e:83:85:
98:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9C:50:EE:2B:00:CD:76:80:EB:2D:B2:35:AA:F8:77:47:C1:7E:94
X509v3 Authority Key Identifier:
keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:66:a2:94:20:30:dd:37:40:61:25:a2:cf:b0:bf:01:b0:ec:
f0:8c:09:43:f6:9f:74:89:76:c8:4b:8f:68:e9:04:8f:88:11:
85:c4:47:3f:85:2f:39:ea:fb:1a:a7:ea:5b:bf:ec:78:55:4a:
b9:bd:25:0e:50:ad:a2:3a:ab:df:60:64:74:27:c2:9b:9d:3f:
97:c5:f7:b9:59:74:26:58:3c:20:88:f8:6b:16:8a:8d:26:18:
2f:ac:b3:60:d3:1a:4c:34:47:5d:ed:40:a5:29:03:11:4c:20:
6a:cd:f1:0a:7d:63:99:de:b1:b2:b1:c1:67:e7:11:01:76:3b:
6d:07:0a:11:33:40:1c:46:d0:fa:49:2d:8c:b2:36:fa:17:7f:
ab:8e:d4:8b:1b:37:1e:72:df:9f:74:ee:29:9f:4b:5a:c6:0d:
cc:15:ba:56:c5:10:7d:02:8d:93:0f:e9:74:46:87:39:2d:1d:
35:6e:2e:51:f5:ac:fb:ac:13:61:ee:2e:00:6b:c4:4c:e5:60:
99:33:9e:60:8b:96:b6:a6:72:07:57:66:61:3e:fe:c0:70:ca:
67:3d:3d:8b:10:da:72:af:7c:61:12:a4:53:1e:54:71:78:f0:
54:90:b6:be:d8:cb:a1:1f:38:6b:1e:b9:3c:d6:4f:7a:f2:47:
29:58:0d:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ApBAdNjCpIOzbBcgahMDtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzOTNhYjkzZTg1NzAxYTczZWY0ZDVlMDBlZDZlYjk4OTM5
MzczOTQwHhcNMjYwNjEzMTEwMDM3WhcNMjYwNjE0MTEwMDM3WjAzMTEwLwYDVQQD
EyhhZDljNTBlZTJiMDBjZDc2ODBlYjJkYjIzNWFhZjg3NzQ3YzE3ZTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKC2an/q3x9PZqBlgYZXQNvip74T
2I9nPkxQDrHn3cFD0PnhVm1Gk/hyTysN01UlD/AdeDXkt4rVHzunaV/Uql5FqMtd
4Jy6kpvPgUJglFUFihmCZaFmdz2coL8x1qr/vayvTJ3ypRUbpdKFSlQcb17hFYh+
jg3CDtMq/ioJT4g31L+lVA6eSjvkDWdekXiAsA3wkeA00sDwCROnceypMFIDOqd7
w1ssxfYdsvzmibI3xQs3/lOWg9B48eLDG5U5J9v6zmEnHEd/HyORxs4V351V9+aR
cZhLHDwW4qZOEmVLLablhaUwdZQ2oEeZIJ0S8oSUKnSmtnDyse5Og4WYIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2cUO4rAM12gOstsjWq+HdHwX6UMB8GA1UdIwQY
MBaAFFOTq5PoVwGnPvTV4A7W65iTk3OUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hZDc2NjItNzNmZi00NTk0LThlMzAt
NTlhN2VmZDM4NGMwLzEvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hZDc2NjItNzNmZi00NTk0LThlMzAtNTlhN2VmZDM4NGMw
LzEvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWailCAw
3TdAYSWiz7C/AbDs8IwJQ/afdIl2yEuPaOkEj4gRhcRHP4UvOer7GqfqW7/seFVK
ub0lDlCtojqr32BkdCfCm50/l8X3uVl0Jlg8IIj4axaKjSYYL6yzYNMaTDRHXe1A
pSkDEUwgas3xCn1jmd6xsrHBZ+cRAXY7bQcKETNAHEbQ+kktjLI2+hd/q47Uixs3
HnLfn3TuKZ9LWsYNzBW6VsUQfQKNkw/pdEaHOS0dNW4uUfWs+6wTYe4uAGvETOVg
mTOeYIuWtqZyB1dmYT7+wHDKZz09ixDacq98YRKkUx5UcXjwVJC2vtjLoR84ax65
PNZPevJHKVgNqA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:48:50 2026 by rpki-client