Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
File: U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json)
Hash identifier: +XyPKc2lfpFObKeHuKjix2uVMSJJIxkAflkSRHj5yTA=
Subject key identifier: 9F:28:37:42:30:36:D6:5B:25:28:68:7B:EF:97:22:C7:FF:5E:0D:A8
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial: 019FAC3ED8725ECE3FD7AA2F9449D18A697F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
Manifest number: 1092
Signing time: Wed 29 Jul 2026 05:00:27 +0000
Manifest this update: Wed 29 Jul 2026 05:00:27 +0000
Manifest next update: Thu 30 Jul 2026 05:00:27 +0000
Files and hashes: 1: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: 9FBCOpmMqtP8uCi749h1SL31Ry+TTc93CjFhVog1sqM=)
2: WzohaVzPLEBKuPQD-sbPCaZXcnQ.roa (hash: SIJFdx4blAk5vec/FV7gfH5KB998Y+98D4gZTEETEKk=)
3: nM6XYB2iwgJ17oTR8XmeIg2xI2M.roa (hash: 1o7tQyZeZiqzL+ktcifE7MOOMo51KCeyAAEwmbZDyZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:d8:72:5e:ce:3f:d7:aa:2f:94:49:d1:8a:69:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Validity
Not Before: Jul 29 05:00:27 2026 GMT
Not After : Jul 30 05:00:27 2026 GMT
Subject: CN=9f2837423036d65b2528687bef9722c7ff5e0da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:ce:1a:c6:3f:3c:2c:2a:7d:e2:14:3b:d0:
5a:4c:0e:4f:7e:e3:ef:2d:ff:ae:75:95:df:ca:1c:
95:92:93:e5:65:fb:3f:ec:55:fa:2b:1c:b6:bd:92:
ec:a8:78:6e:9e:89:a7:f3:92:ef:28:e3:86:f4:b3:
c8:7f:78:9d:3b:30:63:97:d1:de:de:7d:f6:15:63:
de:c1:2b:eb:38:d3:04:09:0f:ba:49:f6:8c:fe:4e:
0a:19:a5:2a:33:fe:c9:87:fd:bf:97:b0:bd:d0:9f:
5c:fc:2f:d4:4d:df:35:86:18:38:61:c5:34:92:ac:
51:1b:46:38:91:b6:9e:9e:e1:97:1f:bf:b9:2a:53:
90:f5:59:d3:13:17:42:88:2d:71:2f:35:1a:c7:28:
33:db:06:ea:ff:aa:cb:64:e5:84:a1:8e:06:e6:42:
1e:33:37:3a:0e:04:31:e2:a1:1a:5e:47:e5:26:ff:
e7:d7:8f:a0:7a:30:d1:ee:e1:67:c1:30:85:7d:9c:
30:74:3d:44:ca:da:1b:07:8f:b7:53:5c:88:25:1c:
a7:12:47:34:fb:45:34:66:99:a6:47:b0:38:7f:d8:
96:4a:84:f3:ae:54:e0:ca:70:a1:20:5b:e1:e7:f3:
fc:48:d4:13:c2:c9:db:2e:a6:43:e3:ac:cf:b1:97:
0f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:28:37:42:30:36:D6:5B:25:28:68:7B:EF:97:22:C7:FF:5E:0D:A8
X509v3 Authority Key Identifier:
keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6a:85:b2:d0:28:9d:41:34:12:6c:e6:e0:f6:14:9f:7e:c7:
b4:08:56:6f:60:e4:91:fb:49:69:b4:0b:3d:75:ff:f1:72:c9:
4f:fd:89:9d:f0:39:1f:3b:81:ad:cd:b8:f9:34:e1:16:bc:4b:
76:f0:c3:f3:02:a9:a5:86:7b:7c:03:95:70:7f:30:d9:6d:ee:
c4:f6:97:7e:08:7b:a2:e9:5a:84:42:0e:98:5d:f3:55:8e:3e:
d3:71:aa:12:9a:fb:48:3c:28:21:24:66:55:9d:5d:4e:a2:75:
81:6f:47:26:a3:b2:f3:29:cc:d0:fb:cf:c0:4e:91:e9:61:24:
83:a4:90:d5:c2:c6:75:a0:5d:48:5a:6b:33:25:5c:d6:d9:f5:
50:89:72:2f:26:1f:35:6e:16:43:03:f8:da:b4:49:63:a2:4f:
e2:88:90:0a:88:9d:27:90:bf:85:10:1e:7c:4f:00:b9:4a:f0:
0c:9b:be:98:e2:cb:f7:67:98:7b:e5:d9:5f:51:e7:fc:34:02:
cc:7f:ae:63:7a:b4:d1:2e:2f:18:b2:b9:d5:93:fa:57:4e:22:
85:72:e6:3f:ba:7a:3c:a2:02:40:0c:ae:d4:bb:e3:13:f0:e1:
45:f5:d4:65:68:85:4d:9b:3b:95:45:82:dc:32:20:be:91:41:
02:f2:d0:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sPthyXs4/16ovlEnRiml/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzOTNhYjkzZTg1NzAxYTczZWY0ZDVlMDBlZDZlYjk4OTM5
MzczOTQwHhcNMjYwNzI5MDUwMDI3WhcNMjYwNzMwMDUwMDI3WjAzMTEwLwYDVQQD
Eyg5ZjI4Mzc0MjMwMzZkNjViMjUyODY4N2JlZjk3MjJjN2ZmNWUwZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKLOGsY/PCwqfeIUO9BaTA5PfuPv
Lf+udZXfyhyVkpPlZfs/7FX6Kxy2vZLsqHhunomn85LvKOOG9LPIf3idOzBjl9He
3n32FWPewSvrONMECQ+6SfaM/k4KGaUqM/7Jh/2/l7C90J9c/C/UTd81hhg4YcU0
kqxRG0Y4kbaenuGXH7+5KlOQ9VnTExdCiC1xLzUaxygz2wbq/6rLZOWEoY4G5kIe
Mzc6DgQx4qEaXkflJv/n14+gejDR7uFnwTCFfZwwdD1EytobB4+3U1yIJRynEkc0
+0U0ZpmmR7A4f9iWSoTzrlTgynChIFvh5/P8SNQTwsnbLqZD46zPsZcPVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8oN0IwNtZbJShoe++XIsf/Xg2oMB8GA1UdIwQY
MBaAFFOTq5PoVwGnPvTV4A7W65iTk3OUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hZDc2NjItNzNmZi00NTk0LThlMzAt
NTlhN2VmZDM4NGMwLzEvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hZDc2NjItNzNmZi00NTk0LThlMzAtNTlhN2VmZDM4NGMw
LzEvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2qFstAo
nUE0Emzm4PYUn37HtAhWb2DkkftJabQLPXX/8XLJT/2JnfA5HzuBrc24+TThFrxL
dvDD8wKppYZ7fAOVcH8w2W3uxPaXfgh7oulahEIOmF3zVY4+03GqEpr7SDwoISRm
VZ1dTqJ1gW9HJqOy8ynM0PvPwE6R6WEkg6SQ1cLGdaBdSFprMyVc1tn1UIlyLyYf
NW4WQwP42rRJY6JP4oiQCoidJ5C/hRAefE8AuUrwDJu+mOLL92eYe+XZX1Hn/DQC
zH+uY3q00S4vGLK51ZP6V04ihXLmP7p6PKICQAyu1LvjE/DhRfXUZWiFTZs7lUWC
3DIgvpFBAvLQ6g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:31:39 2026 by rpki-client