Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
File: U9To6fSiMLDlaFh2X3EwrNNOni0.mft (raw, json)
Hash identifier: 0bI98LlMZssangEvd+W967oZVPGlHe5V/wGvda9kmYQ=
Subject key identifier: D8:5C:DF:AC:8C:F4:CB:C8:95:FD:63:20:B0:04:A1:D0:39:DF:8C:58
Authority key identifier: 53:D4:E8:E9:F4:A2:30:B0:E5:68:58:76:5F:71:30:AC:D3:4E:9E:2D
Certificate issuer: /CN=53d4e8e9f4a230b0e56858765f7130acd34e9e2d
Certificate serial: 019F84C3574EE2CC05F5CB5AC83A012467DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
Manifest number: 01AC
Signing time: Tue 21 Jul 2026 13:00:22 +0000
Manifest this update: Tue 21 Jul 2026 13:00:22 +0000
Manifest next update: Wed 22 Jul 2026 13:00:22 +0000
Files and hashes: 1: 3b2s3p4oMea8LJB4yErrpoSUMas.asa (hash: m3bshBr8tj8Wwq1Ja324OOM0o37SNVG1XxrRZZqFdC4=)
2: O860BZXE4oCrVhgqCDhjxlkYiZY.roa (hash: WAAeKTz5adCSs3a4JZFRxzoY1WO2G1GDA+qRkP/2UHM=)
3: U9To6fSiMLDlaFh2X3EwrNNOni0.crl (hash: Dpt4v7DkgFT7lo9faG86eX3SS1NQSe9KoZSBlTZu+sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c3:57:4e:e2:cc:05:f5:cb:5a:c8:3a:01:24:67:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d4e8e9f4a230b0e56858765f7130acd34e9e2d
Validity
Not Before: Jul 21 13:00:22 2026 GMT
Not After : Jul 22 13:00:22 2026 GMT
Subject: CN=d85cdfac8cf4cbc895fd6320b004a1d039df8c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:24:fb:b9:11:fe:7a:ba:2e:e8:23:e8:c8:84:
18:83:a1:b6:85:3e:7b:8d:a6:99:51:7e:c5:46:1e:
f0:69:fd:4a:5d:7a:87:02:b6:6f:97:0b:ee:a5:f9:
cf:82:12:3d:5b:86:06:23:6b:34:1f:f9:e7:c3:9c:
71:7b:ad:c1:31:86:43:a9:0a:7c:e4:ad:5c:9d:53:
6c:d3:69:7d:db:1f:90:44:1d:26:be:3a:fb:16:01:
d0:b1:43:97:10:6c:2b:97:a9:af:c6:56:cd:86:92:
85:47:d3:70:04:01:96:17:ac:5a:b2:d9:78:df:7a:
c3:27:e9:49:b8:5e:df:f3:23:d5:65:dd:45:c5:a4:
ae:c4:fa:92:81:53:49:75:ec:a7:b1:90:81:38:20:
1e:35:33:e1:01:ad:59:3a:eb:7f:0a:76:34:80:25:
1f:a4:0c:c9:1f:5b:3a:8a:40:0d:48:b7:3f:39:b9:
9a:23:bc:32:b3:10:1f:76:be:51:58:ef:99:af:74:
3d:a6:ec:99:ef:a1:f5:38:95:56:11:ee:51:c8:22:
d6:e6:59:87:56:52:08:a4:57:bb:3b:e9:27:10:b9:
4b:ff:9b:f2:4c:d2:c6:0a:2e:e0:f9:24:6c:a0:e0:
ff:ff:d2:6b:e7:0a:1a:8e:b2:7a:9d:d3:e8:3d:af:
a1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5C:DF:AC:8C:F4:CB:C8:95:FD:63:20:B0:04:A1:D0:39:DF:8C:58
X509v3 Authority Key Identifier:
keyid:53:D4:E8:E9:F4:A2:30:B0:E5:68:58:76:5F:71:30:AC:D3:4E:9E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:89:ad:37:79:e6:5b:d6:cb:e2:df:a8:df:68:40:40:54:07:
22:f3:c5:40:be:86:14:94:01:4a:23:8c:ba:36:4b:81:b3:3a:
9a:0e:98:7f:1b:34:b6:1f:2c:df:f6:86:b8:35:5e:11:c2:50:
a8:84:21:e0:81:fd:bb:3d:bc:0f:ee:17:1d:03:86:94:1f:03:
55:39:b1:6c:f2:e1:eb:30:f4:fb:a8:63:20:25:6f:95:fd:b1:
32:a8:01:f4:10:f9:ea:05:e1:2c:ce:b8:e7:fb:37:7e:27:3b:
49:68:71:75:28:d6:5d:be:82:c5:2e:ee:f9:69:ad:8e:fd:66:
de:a8:75:74:5d:65:6a:53:5d:4d:f9:09:1e:d8:b9:9f:02:d1:
77:18:d9:e0:13:ca:9a:a4:06:d5:3a:c2:fb:88:be:31:22:e3:
09:95:8c:24:82:b3:d3:31:78:34:71:cc:a2:49:b8:08:bb:f9:
9e:b7:26:da:b4:79:aa:6c:05:f8:bc:00:23:79:3a:3f:19:7f:
58:08:48:20:d1:61:ee:85:c0:7c:f2:83:5b:a3:8e:81:1b:d1:
19:b8:2e:6d:b9:c9:54:36:9f:55:ed:c6:2e:87:d5:2d:39:7b:
39:2c:70:83:a1:27:35:ae:05:04:8d:c2:99:28:f4:ca:e9:fa:
77:4d:c5:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ew1dO4swF9ctayDoBJGffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZDRlOGU5ZjRhMjMwYjBlNTY4NTg3NjVmNzEzMGFjZDM0
ZTllMmQwHhcNMjYwNzIxMTMwMDIyWhcNMjYwNzIyMTMwMDIyWjAzMTEwLwYDVQQD
EyhkODVjZGZhYzhjZjRjYmM4OTVmZDYzMjBiMDA0YTFkMDM5ZGY4YzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yT7uRH+erou6CPoyIQYg6G2hT57
jaaZUX7FRh7waf1KXXqHArZvlwvupfnPghI9W4YGI2s0H/nnw5xxe63BMYZDqQp8
5K1cnVNs02l92x+QRB0mvjr7FgHQsUOXEGwrl6mvxlbNhpKFR9NwBAGWF6xastl4
33rDJ+lJuF7f8yPVZd1FxaSuxPqSgVNJdeynsZCBOCAeNTPhAa1ZOut/CnY0gCUf
pAzJH1s6ikANSLc/ObmaI7wysxAfdr5RWO+Zr3Q9puyZ76H1OJVWEe5RyCLW5lmH
VlIIpFe7O+knELlL/5vyTNLGCi7g+SRsoOD//9Jr5woajrJ6ndPoPa+hBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhc36yM9MvIlf1jILAEodA534xYMB8GA1UdIwQY
MBaAFFPU6On0ojCw5WhYdl9xMKzTTp4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTlUbzZmU2lNTERsYUZoMlgzRXdyTk5PbmkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85YTUzMjQtNDY1OS00YWEzLWEzZDEt
MTY2MTI0YzBjNTQ1LzEvVTlUbzZmU2lNTERsYUZoMlgzRXdyTk5PbmkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC85YTUzMjQtNDY1OS00YWEzLWEzZDEtMTY2MTI0YzBjNTQ1
LzEvVTlUbzZmU2lNTERsYUZoMlgzRXdyTk5PbmkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALYmtN3nm
W9bL4t+o32hAQFQHIvPFQL6GFJQBSiOMujZLgbM6mg6Yfxs0th8s3/aGuDVeEcJQ
qIQh4IH9uz28D+4XHQOGlB8DVTmxbPLh6zD0+6hjICVvlf2xMqgB9BD56gXhLM64
5/s3fic7SWhxdSjWXb6CxS7u+Wmtjv1m3qh1dF1lalNdTfkJHti5nwLRdxjZ4BPK
mqQG1TrC+4i+MSLjCZWMJIKz0zF4NHHMokm4CLv5nrcm2rR5qmwF+LwAI3k6Pxl/
WAhIINFh7oXAfPKDW6OOgRvRGbgubbnJVDafVe3GLofVLTl7OSxwg6EnNa4FBI3C
mSj0yun6d03FLA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:51:41 2026 by rpki-client