Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.mft
File: UlG0CzMZisWh7fUP_whigWAzXf0.mft (raw, json)
Hash identifier: 8V+f33KBcbvLO7LVgvDxgXURrGkN5gFrYKf/AVJL2+c=
Subject key identifier: F4:37:1B:E8:56:F1:1C:2F:98:5F:71:8F:FF:EF:3D:2E:F6:28:94:6C
Authority key identifier: 52:51:B4:0B:33:19:8A:C5:A1:ED:F5:0F:FF:08:62:81:60:33:5D:FD
Certificate issuer: /CN=5251b40b33198ac5a1edf50fff08628160335dfd
Certificate serial: 01A11A87645BBA5E0C4023C6B3572B87D0EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlG0CzMZisWh7fUP_whigWAzXf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.mft
Manifest number: 1991
Signing time: Thu 08 Oct 2026 08:00:42 +0000
Manifest this update: Thu 08 Oct 2026 08:00:42 +0000
Manifest next update: Fri 09 Oct 2026 08:00:42 +0000
Files and hashes: 1: 1nMpDLYuPfBQOmpt5pYO3-mYgaM.roa (hash: qFQcqHmma1oo39YlL2XWPJ/NbS5gxpG0P6PjvZW9cyM=)
2: UlG0CzMZisWh7fUP_whigWAzXf0.crl (hash: 6+WhhJ1nkxairtprqWVyGKMI240Ll5bm/RGAvlhKpvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlG0CzMZisWh7fUP_whigWAzXf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:87:64:5b:ba:5e:0c:40:23:c6:b3:57:2b:87:d0:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5251b40b33198ac5a1edf50fff08628160335dfd
Validity
Not Before: Oct 8 08:00:42 2026 GMT
Not After : Oct 9 08:00:42 2026 GMT
Subject: CN=f4371be856f11c2f985f718fffef3d2ef628946c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4c:05:1c:ad:60:17:85:35:18:56:54:76:64:
80:ef:34:74:85:c4:2c:71:06:6b:37:1e:e4:df:f8:
72:4f:7f:75:17:ba:f7:b5:fe:e3:af:c8:5b:ce:6d:
60:cb:d0:17:da:5c:89:80:70:7f:fb:ff:35:00:82:
00:2e:26:bb:bb:c9:e7:78:5f:66:3c:23:19:16:80:
8a:9a:bf:41:8a:aa:dc:44:6f:05:90:bf:2e:06:37:
85:30:76:a5:da:7b:59:a4:e0:60:ef:ab:57:d5:e2:
6c:e1:be:80:6b:c9:42:6d:28:1e:e4:7b:fb:f3:df:
ed:ba:c7:cc:fb:04:6f:78:26:65:00:51:a8:c6:c8:
7d:5e:ae:11:1a:ed:27:98:45:f2:e5:6f:30:ba:3d:
4c:e3:30:94:74:59:37:70:34:47:b4:79:2c:c4:ea:
a7:c5:ff:2c:9f:3d:2a:7b:97:35:a0:9b:ff:64:18:
7a:ad:02:14:6a:3b:f0:59:e6:e9:b4:9a:6e:8a:fc:
76:12:05:a1:a7:af:ef:3b:3f:97:60:d3:78:f9:b8:
8a:5a:a8:b4:b0:46:6e:e5:c9:89:e0:c9:ea:17:c6:
8e:70:ec:7c:55:a9:0a:01:6d:bf:9c:2d:03:8d:df:
df:62:ea:9a:91:92:aa:99:d4:ce:ca:67:08:2a:16:
3c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:37:1B:E8:56:F1:1C:2F:98:5F:71:8F:FF:EF:3D:2E:F6:28:94:6C
X509v3 Authority Key Identifier:
keyid:52:51:B4:0B:33:19:8A:C5:A1:ED:F5:0F:FF:08:62:81:60:33:5D:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlG0CzMZisWh7fUP_whigWAzXf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:8c:89:d7:fe:a1:2e:26:42:e3:b1:66:6c:a8:91:16:ac:56:
da:af:22:c4:56:c2:92:df:a4:58:e6:43:25:02:7d:3b:64:c8:
10:a9:a4:a0:4d:ba:3e:20:65:34:f3:4b:d4:4a:97:fb:07:ed:
c3:52:e8:6e:fb:39:bd:c8:fc:7e:d8:cd:5e:e0:9d:b8:a3:67:
15:99:32:42:e3:ad:49:9d:5b:5b:23:32:22:83:ee:7f:7b:63:
12:a5:9f:e7:80:5e:ef:d7:9c:a6:54:82:29:25:35:e3:19:26:
fe:75:d7:44:9c:78:21:fe:4b:ec:c8:f9:5f:d5:e5:8f:1d:6c:
dd:68:32:5d:4f:ec:90:84:a1:1e:74:29:d2:bb:4b:16:57:f4:
32:5e:a4:c7:3f:c0:4b:25:67:28:82:03:c0:cc:9e:c1:a0:f2:
ff:06:3d:c7:82:31:28:e2:90:99:c1:3b:d2:c8:98:e9:d0:16:
ab:63:19:4d:24:7c:c2:3a:0e:ca:91:ac:13:f2:84:dc:a3:6b:
19:09:52:c0:64:17:9c:08:3d:ae:37:6e:e6:fe:ea:c2:88:37:
30:10:e4:25:81:3b:23:e6:2d:3b:d4:21:8a:9e:a8:d7:9f:6f:
51:09:45:7b:f0:ef:85:06:cd:5c:61:84:80:4b:dc:b1:cd:99:
c7:f6:86:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEah2Rbul4MQCPGs1crh9DrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNTFiNDBiMzMxOThhYzVhMWVkZjUwZmZmMDg2MjgxNjAz
MzVkZmQwHhcNMjYxMDA4MDgwMDQyWhcNMjYxMDA5MDgwMDQyWjAzMTEwLwYDVQQD
EyhmNDM3MWJlODU2ZjExYzJmOTg1ZjcxOGZmZmVmM2QyZWY2Mjg5NDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20wFHK1gF4U1GFZUdmSA7zR0hcQs
cQZrNx7k3/hyT391F7r3tf7jr8hbzm1gy9AX2lyJgHB/+/81AIIALia7u8nneF9m
PCMZFoCKmr9BiqrcRG8FkL8uBjeFMHal2ntZpOBg76tX1eJs4b6Aa8lCbSge5Hv7
89/tusfM+wRveCZlAFGoxsh9Xq4RGu0nmEXy5W8wuj1M4zCUdFk3cDRHtHksxOqn
xf8snz0qe5c1oJv/ZBh6rQIUajvwWebptJpuivx2EgWhp6/vOz+XYNN4+biKWqi0
sEZu5cmJ4MnqF8aOcOx8VakKAW2/nC0Djd/fYuqakZKqmdTOymcIKhY8NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQ3G+hW8RwvmF9xj//vPS72KJRsMB8GA1UdIwQY
MBaAFFJRtAszGYrFoe31D/8IYoFgM139MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWxHMEN6TVppc1doN2ZVUF93aGlnV0F6WGYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lY2E4MDktZDk0Mi00ZDg5LWI0Mzgt
YTFjMjk5OTJiZmJlLzEvVWxHMEN6TVppc1doN2ZVUF93aGlnV0F6WGYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9lY2E4MDktZDk0Mi00ZDg5LWI0MzgtYTFjMjk5OTJiZmJl
LzEvVWxHMEN6TVppc1doN2ZVUF93aGlnV0F6WGYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu4yJ1/6h
LiZC47FmbKiRFqxW2q8ixFbCkt+kWOZDJQJ9O2TIEKmkoE26PiBlNPNL1EqX+wft
w1Lobvs5vcj8ftjNXuCduKNnFZkyQuOtSZ1bWyMyIoPuf3tjEqWf54Be79ecplSC
KSU14xkm/nXXRJx4If5L7Mj5X9Xljx1s3WgyXU/skIShHnQp0rtLFlf0Ml6kxz/A
SyVnKIIDwMyewaDy/wY9x4IxKOKQmcE70siY6dAWq2MZTSR8wjoOypGsE/KE3KNr
GQlSwGQXnAg9rjdu5v7qwog3MBDkJYE7I+YtO9Qhip6o159vUQlFe/DvhQbNXGGE
gEvcsc2Zx/aGmg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 10:56:12 2026 by rpki-client