
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
File: Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft (raw, json)
Hash identifier: dKNU7tZMREE8xFCN0OJLbECaw3fV3CKmdUFmHHKkdjM=
Subject key identifier: 5E:CB:E9:51:1A:C6:47:81:80:CE:99:B9:50:78:B9:26:3E:C6:21:8A
Authority key identifier: 52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
Certificate issuer: /CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Certificate serial: 01A18BD323DE7F894448CCA48FFF2DC83B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
Manifest number: 1ACF
Signing time: Fri 30 Oct 2026 08:00:32 +0000
Manifest this update: Fri 30 Oct 2026 08:00:32 +0000
Manifest next update: Sat 31 Oct 2026 08:00:32 +0000
Files and hashes: 1: 7lREXn6K5l-DbJ8mjZvq6RJ1uEk.roa (hash: 3nD474BFUX8wCCyCzrtNJIx6J0yUBUFRCHlh3/kVZac=)
2: Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl (hash: r8CY7gxNVwUi3bVrIDdk9rTrdjh2E7/vzkZlgPZXJTE=)
3: XqVaeCjaPtQW5nTcWKYaszB243o.roa (hash: 0c77i33BA9sh6hWoaqI47xWtW3Ms9jVeqGWtj/letD0=)
4: kEJSnxenHfD3MGsQVg0rWMsU-r4.roa (hash: CKWwPe7aGHyQIJbjGScWajSnRgDC3Bc7VORq9esiMd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:d3:23:de:7f:89:44:48:cc:a4:8f:ff:2d:c8:3b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Validity
Not Before: Oct 30 08:00:32 2026 GMT
Not After : Oct 31 08:00:32 2026 GMT
Subject: CN=5ecbe9511ac6478180ce99b95078b9263ec6218a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:ce:d6:49:2b:82:76:6d:46:8f:ba:1e:e4:
cb:e6:e8:05:62:2c:c1:4c:a9:5a:f1:91:84:86:78:
37:cb:67:31:2b:aa:0b:93:9d:ca:b8:97:f3:ba:89:
93:9d:92:47:9c:76:dc:39:81:c5:bd:ea:2c:3f:22:
cd:1b:01:dc:8d:28:a7:24:18:58:60:a9:9a:55:a0:
3f:f3:dc:bf:cd:01:25:a8:28:b8:86:2c:17:86:85:
8f:0f:a2:c3:76:1c:d9:35:64:fc:73:d3:55:2a:c5:
64:06:a0:f4:20:d0:93:ee:26:ab:0c:c5:14:f2:e8:
54:3b:b2:62:68:a5:54:99:44:37:b6:f2:4d:28:a2:
fb:d5:84:4e:9e:8c:3a:dd:75:25:49:08:94:2b:40:
c8:3c:80:28:79:23:d3:45:10:32:f2:6a:10:52:95:
2d:6e:ca:4c:35:91:81:9f:fa:15:04:a6:4f:3b:7d:
4e:ed:da:e2:e2:6d:f8:0c:85:da:80:8a:ff:5b:22:
ac:74:21:85:a6:9a:d0:cf:9e:ad:a4:9f:31:7b:e4:
f6:0a:8b:d0:ce:96:e6:73:3f:4c:a9:06:0e:79:8e:
bd:14:aa:ca:fb:73:a2:6e:5f:f9:d9:72:fa:1c:93:
11:91:9d:b9:17:8c:90:89:7b:8a:26:ce:b4:1f:26:
2d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CB:E9:51:1A:C6:47:81:80:CE:99:B9:50:78:B9:26:3E:C6:21:8A
X509v3 Authority Key Identifier:
keyid:52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:10:6a:b3:28:ef:b2:12:6c:52:e0:69:2d:7a:0f:29:01:33:
be:b0:f4:b6:22:ba:a2:e8:68:7c:ff:78:e6:34:ff:3a:0f:7b:
fa:3f:ea:25:0f:0b:70:9d:bc:fa:95:47:f2:9f:fe:96:cd:55:
49:f1:26:89:88:5e:05:8b:e0:07:85:1a:d7:f3:c2:8b:68:d8:
42:20:e5:df:77:61:82:2b:4e:5f:ca:5d:76:d1:38:fa:8a:5a:
6f:c6:bf:a1:35:67:30:c8:0d:9c:46:5a:e2:d4:6b:12:bf:46:
bb:b6:d8:d4:61:ab:67:f9:35:5a:b8:4e:af:42:d5:ec:13:c4:
69:18:6c:d7:61:72:27:66:a5:cd:7c:08:02:07:47:c4:06:86:
7b:5e:31:38:cf:35:9d:48:20:89:43:02:bd:2e:12:fc:82:f2:
78:82:75:51:bd:b6:45:6a:0d:bd:b1:01:e4:79:6f:97:87:1c:
b1:b2:a9:bd:dd:3a:bb:90:5c:de:ee:36:ea:87:9f:2f:08:53:
a1:aa:fd:ee:89:e4:d9:88:96:1b:bb:8d:ba:72:e3:cc:50:85:
15:55:10:0a:4e:4d:f1:4d:22:66:38:19:1c:f3:b5:26:4a:19:
e1:ec:e9:f3:75:88:f8:9a:0e:53:75:ac:fd:61:5c:6e:65:87:
37:25:99:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGL0yPef4lESMykj/8tyDsHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYmYyMWVlYjM2NDE0YjMyODBlNmMzM2IwYjU3Mjk2Yjhm
NmI2NzUwHhcNMjYxMDMwMDgwMDMyWhcNMjYxMDMxMDgwMDMyWjAzMTEwLwYDVQQD
Eyg1ZWNiZTk1MTFhYzY0NzgxODBjZTk5Yjk1MDc4YjkyNjNlYzYyMThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwrO1kkrgnZtRo+6HuTL5ugFYizB
TKla8ZGEhng3y2cxK6oLk53KuJfzuomTnZJHnHbcOYHFveosPyLNGwHcjSinJBhY
YKmaVaA/89y/zQElqCi4hiwXhoWPD6LDdhzZNWT8c9NVKsVkBqD0INCT7iarDMUU
8uhUO7JiaKVUmUQ3tvJNKKL71YROnow63XUlSQiUK0DIPIAoeSPTRRAy8moQUpUt
bspMNZGBn/oVBKZPO31O7dri4m34DIXagIr/WyKsdCGFpprQz56tpJ8xe+T2CovQ
zpbmcz9MqQYOeY69FKrK+3Oibl/52XL6HJMRkZ25F4yQiXuKJs60HyYtKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7L6VEaxkeBgM6ZuVB4uSY+xiGKMB8GA1UdIwQY
MBaAFFK/Ie6zZBSzKA5sM7C1cpa49rZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXI4aDdyTmtGTE1vRG13enNMVnlscmoydG5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wNTk1NDMtNjllNC00OGY2LWExNzUt
YWM5NmY2YWFiNDk0LzEvVXI4aDdyTmtGTE1vRG13enNMVnlscmoydG5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wNTk1NDMtNjllNC00OGY2LWExNzUtYWM5NmY2YWFiNDk0
LzEvVXI4aDdyTmtGTE1vRG13enNMVnlscmoydG5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhBqsyjv
shJsUuBpLXoPKQEzvrD0tiK6ouhofP945jT/Og97+j/qJQ8LcJ28+pVH8p/+ls1V
SfEmiYheBYvgB4Ua1/PCi2jYQiDl33dhgitOX8pddtE4+opab8a/oTVnMMgNnEZa
4tRrEr9Gu7bY1GGrZ/k1WrhOr0LV7BPEaRhs12FyJ2alzXwIAgdHxAaGe14xOM81
nUggiUMCvS4S/ILyeIJ1Ub22RWoNvbEB5Hlvl4ccsbKpvd06u5Bc3u426oefLwhT
oar97onk2YiWG7uNunLjzFCFFVUQCk5N8U0iZjgZHPO1JkoZ4ezp83WI+JoOU3Ws
/WFcbmWHNyWZBg==
-----END CERTIFICATE-----
Generated at Fri Oct 30 14:59:18 2026 by rpki-client