Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/B_U9OUYncp8GiDprXg8JnzHMke4.mft
File: B_U9OUYncp8GiDprXg8JnzHMke4.mft (raw, json)
Hash identifier: mkINCAcU5CzXeebq7OdSVVE3RLaHkmSgH29T7XWwbXc=
Subject key identifier: A3:72:0F:82:A0:CE:47:E6:E0:68:7E:90:EE:98:90:59:50:21:FB:C1
Authority key identifier: 07:F5:3D:39:46:27:72:9F:06:88:3A:6B:5E:0F:09:9F:31:CC:91:EE
Certificate issuer: /CN=07f53d394627729f06883a6b5e0f099f31cc91ee
Certificate serial: 01A110A9181C9A22D6D02A3E0F0D125B20C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_U9OUYncp8GiDprXg8JnzHMke4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/B_U9OUYncp8GiDprXg8JnzHMke4.mft
Manifest number: 5A
Signing time: Tue 06 Oct 2026 10:01:19 +0000
Manifest this update: Tue 06 Oct 2026 10:01:19 +0000
Manifest next update: Wed 07 Oct 2026 10:01:19 +0000
Files and hashes: 1: 7WOSlFPLYKbaSc0AywlRaUbStyY.roa (hash: uO8CfwrbWZwCpJPs/hwdVR7Fs/7M1x6qs0VxV8ncyjU=)
2: B_U9OUYncp8GiDprXg8JnzHMke4.crl (hash: fupCFeUqfupXlqvRk+fCuBKwzFtd61rxxpmWJE4unV8=)
3: s_LGdjThiFcrMxcJkmwRhZvzZNk.roa (hash: E33m6eSC8t6LmYaovZYmAszctVcFzgqvduI9yyCSdCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/B_U9OUYncp8GiDprXg8JnzHMke4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/B_U9OUYncp8GiDprXg8JnzHMke4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_U9OUYncp8GiDprXg8JnzHMke4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:a9:18:1c:9a:22:d6:d0:2a:3e:0f:0d:12:5b:20:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f53d394627729f06883a6b5e0f099f31cc91ee
Validity
Not Before: Oct 6 10:01:19 2026 GMT
Not After : Oct 7 10:01:19 2026 GMT
Subject: CN=a3720f82a0ce47e6e0687e90ee9890595021fbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a5:3a:8e:c3:a2:51:b2:3d:78:b7:e7:4c:f4:
7a:5d:88:60:6c:89:14:64:61:16:83:b7:94:d6:5b:
dc:1c:6e:a7:b8:6a:dd:68:90:77:df:4d:a7:34:75:
8e:3c:d0:74:01:a1:6e:4f:3f:c3:41:07:db:cb:d6:
7e:80:63:4e:85:84:b8:1b:3c:8c:6a:41:0b:3d:f1:
b7:58:b9:53:f3:ea:be:1a:65:e7:40:fb:cd:00:77:
51:9b:dd:34:53:2c:8f:27:51:8d:ac:83:3f:94:70:
68:bb:d5:25:46:9c:98:96:cd:f7:d1:2a:50:33:5c:
90:14:05:b1:54:0d:ea:29:fd:1f:fb:f7:30:4e:b4:
65:ac:5c:a9:55:3e:1d:5e:e0:94:cb:e9:4b:f2:96:
d6:e6:95:35:ac:df:f6:cb:1b:18:67:27:0c:4a:95:
08:4e:ad:d1:b3:77:33:47:0a:cf:6d:7c:07:5f:b2:
6b:99:89:a9:1e:1c:fb:ff:09:d2:64:b8:f7:d6:b5:
f4:9a:c4:82:d2:f3:db:57:43:91:ea:81:12:be:6a:
48:fd:10:7e:3b:84:0b:e9:d5:22:00:a1:df:8c:e0:
4f:4f:03:1c:94:4c:86:a6:4b:a2:64:59:22:d8:e9:
e6:95:bc:97:39:1c:bb:4a:85:c9:e5:1e:8e:fe:0b:
fe:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:72:0F:82:A0:CE:47:E6:E0:68:7E:90:EE:98:90:59:50:21:FB:C1
X509v3 Authority Key Identifier:
keyid:07:F5:3D:39:46:27:72:9F:06:88:3A:6B:5E:0F:09:9F:31:CC:91:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_U9OUYncp8GiDprXg8JnzHMke4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/B_U9OUYncp8GiDprXg8JnzHMke4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/B_U9OUYncp8GiDprXg8JnzHMke4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:47:cc:78:41:40:11:33:62:c7:57:dd:87:7f:ba:b0:4a:15:
14:f9:51:96:47:48:42:98:38:6a:04:37:5e:e4:9e:dc:af:0a:
f8:83:8e:b4:c0:de:66:bd:3f:f6:44:9a:83:d4:36:c2:22:87:
8b:61:b2:4e:5a:06:1c:dc:69:7a:7d:2d:ee:b5:c2:94:58:4f:
6e:24:b0:c6:ef:06:bc:16:82:58:cf:b6:64:db:36:10:47:6b:
ff:b9:93:32:0f:5c:9a:80:a7:9a:3d:0d:e6:36:d7:be:f3:78:
eb:db:a1:7f:07:92:07:28:bb:47:61:2e:ab:bc:37:0d:d4:2a:
24:06:2c:b7:cb:a5:ff:1f:43:a7:b1:0b:5c:f9:96:5d:dd:90:
56:bc:a3:1a:14:34:41:eb:5d:a2:1c:5d:63:30:57:17:32:e9:
dd:24:be:51:15:14:f1:aa:3e:c8:1e:4e:63:16:37:30:c3:4d:
b5:d5:05:22:4b:9d:cd:8c:ba:fe:5d:eb:3f:50:e0:fc:6b:5c:
e6:e7:f5:2f:f6:ef:6c:b0:b6:e2:44:92:99:50:6d:20:85:c5:
b2:e1:7d:98:5b:14:1a:fe:41:55:b5:01:b6:14:6f:e4:3d:3b:
63:fc:55:7f:10:f0:f8:ee:22:af:c9:93:73:b9:cc:c0:41:8a:
55:48:cc:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEQqRgcmiLW0Co+Dw0SWyDDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZjUzZDM5NDYyNzcyOWYwNjg4M2E2YjVlMGYwOTlmMzFj
YzkxZWUwHhcNMjYxMDA2MTAwMTE5WhcNMjYxMDA3MTAwMTE5WjAzMTEwLwYDVQQD
EyhhMzcyMGY4MmEwY2U0N2U2ZTA2ODdlOTBlZTk4OTA1OTUwMjFmYmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKU6jsOiUbI9eLfnTPR6XYhgbIkU
ZGEWg7eU1lvcHG6nuGrdaJB3302nNHWOPNB0AaFuTz/DQQfby9Z+gGNOhYS4GzyM
akELPfG3WLlT8+q+GmXnQPvNAHdRm900UyyPJ1GNrIM/lHBou9UlRpyYls330SpQ
M1yQFAWxVA3qKf0f+/cwTrRlrFypVT4dXuCUy+lL8pbW5pU1rN/2yxsYZycMSpUI
Tq3Rs3czRwrPbXwHX7JrmYmpHhz7/wnSZLj31rX0msSC0vPbV0OR6oESvmpI/RB+
O4QL6dUiAKHfjOBPTwMclEyGpkuiZFki2OnmlbyXORy7SoXJ5R6O/gv+fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNyD4Kgzkfm4Gh+kO6YkFlQIfvBMB8GA1UdIwQY
MBaAFAf1PTlGJ3KfBog6a14PCZ8xzJHuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQl9VOU9VWW5jcDhHaURwclhnOEpuekhNa2U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS80MzM0NTgtOTBiMS00MTNkLWFlOGQt
Y2YyN2M2ZDhhYjVlLzEvQl9VOU9VWW5jcDhHaURwclhnOEpuekhNa2U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS80MzM0NTgtOTBiMS00MTNkLWFlOGQtY2YyN2M2ZDhhYjVl
LzEvQl9VOU9VWW5jcDhHaURwclhnOEpuekhNa2U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkfMeEFA
ETNix1fdh3+6sEoVFPlRlkdIQpg4agQ3XuSe3K8K+IOOtMDeZr0/9kSag9Q2wiKH
i2GyTloGHNxpen0t7rXClFhPbiSwxu8GvBaCWM+2ZNs2EEdr/7mTMg9cmoCnmj0N
5jbXvvN469uhfweSByi7R2Euq7w3DdQqJAYst8ul/x9Dp7ELXPmWXd2QVryjGhQ0
QetdohxdYzBXFzLp3SS+URUU8ao+yB5OYxY3MMNNtdUFIkudzYy6/l3rP1Dg/Gtc
5uf1L/bvbLC24kSSmVBtIIXFsuF9mFsUGv5BVbUBthRv5D07Y/xVfxDw+O4ir8mT
c7nMwEGKVUjMQQ==
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:24:39 2026 by rpki-client