Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
File: Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft (raw, json)
Hash identifier: f0sCRBMbZRCLtb0vr2RiqQ6/VbORb37aoxfsLuKHrNQ=
Subject key identifier: 23:9E:17:43:94:74:91:24:A7:9E:4B:D0:F4:63:BE:2C:CF:81:97:3F
Authority key identifier: 52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
Certificate issuer: /CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Certificate serial: 01A08AF9E9F0BF5B265139F9362FF5F442C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 11:00:29 +0000
Manifest this update: Thu 10 Sep 2026 11:00:29 +0000
Manifest next update: Fri 11 Sep 2026 11:00:29 +0000
Files and hashes: 1: 7lREXn6K5l-DbJ8mjZvq6RJ1uEk.roa (hash: 3nD474BFUX8wCCyCzrtNJIx6J0yUBUFRCHlh3/kVZac=)
2: Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl (hash: hB3B6XmmILfdfIGFyhKJxfWqOeLnVkkkwpGvdgOEV9w=)
3: XqVaeCjaPtQW5nTcWKYaszB243o.roa (hash: 0c77i33BA9sh6hWoaqI47xWtW3Ms9jVeqGWtj/letD0=)
4: kEJSnxenHfD3MGsQVg0rWMsU-r4.roa (hash: CKWwPe7aGHyQIJbjGScWajSnRgDC3Bc7VORq9esiMd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:f9:e9:f0:bf:5b:26:51:39:f9:36:2f:f5:f4:42:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Validity
Not Before: Sep 10 11:00:29 2026 GMT
Not After : Sep 11 11:00:29 2026 GMT
Subject: CN=239e174394749124a79e4bd0f463be2ccf81973f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:3b:e2:0b:04:d6:5e:ee:fe:87:26:b9:45:
9f:d1:ce:6e:02:e0:a3:9a:08:57:fd:54:14:d7:84:
4e:ff:6b:44:a3:b9:1c:14:1e:e5:1a:71:1f:d1:cf:
35:5b:15:6b:89:9a:87:c4:83:fd:b4:1a:74:14:ec:
21:87:3f:4a:ff:55:4e:f8:f1:66:03:4b:4f:d5:34:
2d:2e:2e:9a:9c:ab:be:f1:b3:e2:7f:7b:de:3b:1f:
94:84:e1:9e:ad:27:0b:56:2c:28:7a:23:ca:10:a4:
11:19:24:23:09:9f:76:d9:61:9e:4d:b3:55:d8:6b:
b8:af:55:83:af:2c:27:4d:2b:9f:e9:be:17:a8:30:
6a:65:63:65:72:f6:95:ac:ac:80:c7:b6:ce:76:e0:
c1:76:83:3e:08:de:b9:e5:35:e1:49:8c:b1:b2:e4:
9c:70:4c:70:67:99:df:a9:0f:e7:82:c8:65:ca:ca:
cc:26:7c:4a:20:6c:91:65:90:71:93:87:7a:d8:e6:
0b:3e:bc:17:a4:e7:88:52:54:b2:ed:88:b7:30:2a:
4a:b5:85:a3:58:c5:e9:4a:4b:62:fe:79:3b:3b:d6:
a6:48:c1:ba:c3:3b:32:a2:c8:49:01:bf:0b:25:b5:
04:67:a6:72:43:f3:18:92:eb:d6:01:75:65:04:ce:
00:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9E:17:43:94:74:91:24:A7:9E:4B:D0:F4:63:BE:2C:CF:81:97:3F
X509v3 Authority Key Identifier:
keyid:52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d7:9f:3e:fe:f5:99:6e:71:62:be:a9:54:0e:d3:00:f0:9c:
a5:74:da:f4:d1:a2:11:11:53:ca:03:58:11:75:53:9e:04:f8:
94:80:3c:7c:55:83:b9:ec:9f:08:4d:7a:30:b7:9d:1a:e0:a5:
f0:32:64:41:65:be:aa:e7:ab:ca:97:23:f5:3f:ee:83:de:fe:
d3:67:1b:03:0f:2d:f6:36:56:60:77:8e:2a:d7:12:03:29:74:
32:11:61:1c:ac:af:da:22:aa:95:4f:46:f8:82:54:55:b2:4c:
cd:be:1b:96:c4:b5:4b:a5:fa:5a:ed:6b:d8:7a:2c:50:c1:41:
40:1e:88:a0:1f:7c:18:f1:f6:4d:70:a9:0e:cd:0e:90:b2:7b:
5c:dc:21:62:37:70:ed:90:fd:46:13:27:36:d1:cc:57:58:f8:
93:fd:01:93:ff:ca:01:02:06:81:3f:4d:09:a0:e5:10:2c:8d:
35:b6:c6:83:67:db:79:18:40:b9:bd:61:40:85:43:f5:4e:14:
19:ef:a9:71:99:00:4f:55:59:03:90:19:7a:88:08:f9:e7:2f:
43:49:47:b8:01:a6:4a:61:b1:63:11:22:4a:2f:ea:96:5d:87:
c8:fb:13:ac:09:02:0e:2c:d3:f6:30:9d:0c:28:10:08:57:32:
12:38:7f:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCK+enwv1smUTn5Ni/19ELCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYmYyMWVlYjM2NDE0YjMyODBlNmMzM2IwYjU3Mjk2Yjhm
NmI2NzUwHhcNMjYwOTEwMTEwMDI5WhcNMjYwOTExMTEwMDI5WjAzMTEwLwYDVQQD
EygyMzllMTc0Mzk0NzQ5MTI0YTc5ZTRiZDBmNDYzYmUyY2NmODE5NzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8474gsE1l7u/ocmuUWf0c5uAuCj
mghX/VQU14RO/2tEo7kcFB7lGnEf0c81WxVriZqHxIP9tBp0FOwhhz9K/1VO+PFm
A0tP1TQtLi6anKu+8bPif3veOx+UhOGerScLViwoeiPKEKQRGSQjCZ922WGeTbNV
2Gu4r1WDrywnTSuf6b4XqDBqZWNlcvaVrKyAx7bOduDBdoM+CN655TXhSYyxsuSc
cExwZ5nfqQ/ngshlysrMJnxKIGyRZZBxk4d62OYLPrwXpOeIUlSy7Yi3MCpKtYWj
WMXpSkti/nk7O9amSMG6wzsyoshJAb8LJbUEZ6ZyQ/MYkuvWAXVlBM4AjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOeF0OUdJEkp55L0PRjvizPgZc/MB8GA1UdIwQY
MBaAFFK/Ie6zZBSzKA5sM7C1cpa49rZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXI4aDdyTmtGTE1vRG13enNMVnlscmoydG5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wNTk1NDMtNjllNC00OGY2LWExNzUt
YWM5NmY2YWFiNDk0LzEvVXI4aDdyTmtGTE1vRG13enNMVnlscmoydG5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wNTk1NDMtNjllNC00OGY2LWExNzUtYWM5NmY2YWFiNDk0
LzEvVXI4aDdyTmtGTE1vRG13enNMVnlscmoydG5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldefPv71
mW5xYr6pVA7TAPCcpXTa9NGiERFTygNYEXVTngT4lIA8fFWDueyfCE16MLedGuCl
8DJkQWW+querypcj9T/ug97+02cbAw8t9jZWYHeOKtcSAyl0MhFhHKyv2iKqlU9G
+IJUVbJMzb4blsS1S6X6Wu1r2HosUMFBQB6IoB98GPH2TXCpDs0OkLJ7XNwhYjdw
7ZD9RhMnNtHMV1j4k/0Bk//KAQIGgT9NCaDlECyNNbbGg2fbeRhAub1hQIVD9U4U
Ge+pcZkAT1VZA5AZeogI+ecvQ0lHuAGmSmGxYxEiSi/qll2HyPsTrAkCDizT9jCd
DCgQCFcyEjh/iw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:15:10 2026 by rpki-client