Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
File: U12xQ-kGqiDleCkH-EXUp2li_3s.mft (raw, json)
Hash identifier: LET9ZP4nd3ym5moPrsqrehHF4Nz4Wrr2ohSIE9JpHSM=
Subject key identifier: 7E:28:F8:38:4C:17:27:C8:66:B8:9F:56:75:41:39:31:CD:55:55:20
Authority key identifier: 53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
Certificate issuer: /CN=535db143e906aa20e5782907f845d4a76962ff7b
Certificate serial: 01A17C6020358FA604AFAA9B8FA469943560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
Manifest number: 1809
Signing time: Tue 27 Oct 2026 08:00:36 +0000
Manifest this update: Tue 27 Oct 2026 08:00:36 +0000
Manifest next update: Wed 28 Oct 2026 08:00:36 +0000
Files and hashes: 1: 2DIF8EZk_wzvW7NZvL4cIBr-7eY.roa (hash: WFlk3BdF7ZlUvpAS6rOztSUDNAD4v2wQ9jn8u09sAKA=)
2: U12xQ-kGqiDleCkH-EXUp2li_3s.crl (hash: Qn+Xh6nUVDwll/I4q3PbJU0wINrObIJXQJAWGHiJzQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:20:35:8f:a6:04:af:aa:9b:8f:a4:69:94:35:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535db143e906aa20e5782907f845d4a76962ff7b
Validity
Not Before: Oct 27 08:00:36 2026 GMT
Not After : Oct 28 08:00:36 2026 GMT
Subject: CN=7e28f8384c1727c866b89f5675413931cd555520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:30:68:9c:bb:cf:77:15:88:61:28:6f:85:f0:
ca:58:40:b7:fd:45:17:2b:fd:ea:23:ca:92:7f:8e:
29:94:77:ec:91:9c:a3:9b:b4:91:4d:a6:b1:9f:8d:
e9:40:bd:0a:6f:5b:79:be:7c:89:00:9f:9d:32:93:
07:30:dc:56:e6:0d:89:83:ba:ab:57:56:c2:88:f4:
72:ad:4b:37:08:6f:43:30:b4:b9:4d:bc:6f:81:f6:
bc:d7:f2:a0:ee:29:dd:fb:54:39:e0:08:cc:c3:40:
97:4e:d0:67:2e:66:91:29:ef:6d:9d:a6:88:e2:70:
84:f1:97:3b:33:3c:8f:16:2c:55:15:c2:89:6b:d9:
a4:07:23:d4:ee:ca:4f:4e:db:6c:e8:a6:f4:1b:b9:
48:d8:8d:da:b4:a3:62:cb:8d:f3:26:66:17:24:b8:
53:6c:50:e0:c0:6d:9d:bf:67:e9:4e:1b:e7:c6:d2:
11:99:5b:7b:ad:79:c2:d4:03:f2:df:17:8b:08:3a:
7d:a2:da:bd:03:2f:43:21:f1:6c:2d:06:2f:33:8e:
93:c2:b4:56:ca:45:cf:58:aa:57:f6:ac:33:37:51:
07:e2:69:fe:9b:c5:bb:a2:af:ab:d6:32:65:35:ca:
65:80:a1:b7:f3:d4:e5:56:eb:75:62:31:7b:24:9f:
fb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:28:F8:38:4C:17:27:C8:66:B8:9F:56:75:41:39:31:CD:55:55:20
X509v3 Authority Key Identifier:
keyid:53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:06:61:35:8e:ef:eb:3f:3a:91:fe:4b:3e:20:97:cd:35:a4:
6c:ad:1e:75:e5:6d:43:51:bd:fc:ab:4e:45:f6:9a:92:88:af:
de:a3:31:27:c0:f9:d3:74:6d:d4:e1:55:ff:7f:76:1f:95:3b:
40:7f:c8:39:8a:83:73:7f:13:54:61:6c:2a:21:90:69:87:61:
47:0b:d7:41:af:7e:80:d9:9e:17:5a:ff:68:de:ab:ab:00:f8:
24:1a:7a:6b:5f:6a:20:2f:bb:03:b2:80:85:a0:13:17:1a:1b:
07:7c:4d:67:1c:79:5c:31:b9:fe:70:98:3e:3c:1f:42:fb:29:
d5:4b:2f:96:e4:f9:a2:53:49:96:67:75:93:e7:28:e3:ad:07:
be:17:5e:59:70:12:99:e3:f4:7f:e5:b2:9f:0a:3c:39:8a:08:
36:d3:ea:08:ad:29:f5:de:99:b0:67:45:d0:5b:87:b1:45:d1:
06:0d:de:5c:6f:c7:4b:aa:82:50:f8:16:10:cd:66:46:73:26:
82:7a:5a:cc:f1:52:cf:79:2f:d8:c7:ab:31:10:0d:5a:cd:d4:
24:86:09:38:de:de:78:5b:d4:11:bb:07:08:c1:08:50:f2:95:
e0:fe:b9:8e:a4:05:3a:78:22:ef:27:fe:01:5b:52:76:69:17:
e9:85:60:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8YCA1j6YEr6qbj6RplDVgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNWRiMTQzZTkwNmFhMjBlNTc4MjkwN2Y4NDVkNGE3Njk2
MmZmN2IwHhcNMjYxMDI3MDgwMDM2WhcNMjYxMDI4MDgwMDM2WjAzMTEwLwYDVQQD
Eyg3ZTI4ZjgzODRjMTcyN2M4NjZiODlmNTY3NTQxMzkzMWNkNTU1NTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzBonLvPdxWIYShvhfDKWEC3/UUX
K/3qI8qSf44plHfskZyjm7SRTaaxn43pQL0Kb1t5vnyJAJ+dMpMHMNxW5g2Jg7qr
V1bCiPRyrUs3CG9DMLS5Tbxvgfa81/Kg7ind+1Q54AjMw0CXTtBnLmaRKe9tnaaI
4nCE8Zc7MzyPFixVFcKJa9mkByPU7spPTtts6Kb0G7lI2I3atKNiy43zJmYXJLhT
bFDgwG2dv2fpThvnxtIRmVt7rXnC1APy3xeLCDp9otq9Ay9DIfFsLQYvM46TwrRW
ykXPWKpX9qwzN1EH4mn+m8W7oq+r1jJlNcplgKG389TlVut1YjF7JJ/7pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4o+DhMFyfIZrifVnVBOTHNVVUgMB8GA1UdIwQY
MBaAFFNdsUPpBqog5XgpB/hF1KdpYv97MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTEyeFEta0dxaURsZUNrSC1FWFVwMmxpXzNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8xYThkOTgtMzRjOS00ZDI2LTk3ZGMt
NDg3MzFiM2MwM2E0LzEvVTEyeFEta0dxaURsZUNrSC1FWFVwMmxpXzNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8xYThkOTgtMzRjOS00ZDI2LTk3ZGMtNDg3MzFiM2MwM2E0
LzEvVTEyeFEta0dxaURsZUNrSC1FWFVwMmxpXzNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApwZhNY7v
6z86kf5LPiCXzTWkbK0edeVtQ1G9/KtORfaakoiv3qMxJ8D503Rt1OFV/392H5U7
QH/IOYqDc38TVGFsKiGQaYdhRwvXQa9+gNmeF1r/aN6rqwD4JBp6a19qIC+7A7KA
haATFxobB3xNZxx5XDG5/nCYPjwfQvsp1UsvluT5olNJlmd1k+co460HvhdeWXAS
meP0f+Wynwo8OYoINtPqCK0p9d6ZsGdF0FuHsUXRBg3eXG/HS6qCUPgWEM1mRnMm
gnpazPFSz3kv2MerMRANWs3UJIYJON7eeFvUEbsHCMEIUPKV4P65jqQFOngi7yf+
AVtSdmkX6YVgdA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:39:35 2026 by rpki-client