Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
File: U8NcqD_N9xskTtgDrEaOFFPYJo8.mft (raw, json)
Hash identifier: TsA/ObgImrCgozq806bmVu1n4isxdMbD3KQDDKE+YTw=
Subject key identifier: CC:88:9C:F9:4E:EB:15:8E:6A:95:CC:0D:86:71:9D:9F:AB:92:4B:BF
Authority key identifier: 53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
Certificate issuer: /CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Certificate serial: 01A17281B76FA1F13741607BCF4F42E660F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
Manifest number: 0D05
Signing time: Sun 25 Oct 2026 10:01:06 +0000
Manifest this update: Sun 25 Oct 2026 10:01:06 +0000
Manifest next update: Mon 26 Oct 2026 10:01:06 +0000
Files and hashes: 1: 0P9xPfTELLOLsIkje98I5DI3JMM.roa (hash: /5GbceYSZZKUMKDpKsep1xA2kefROVR28hBE+53Ms/s=)
2: U8NcqD_N9xskTtgDrEaOFFPYJo8.crl (hash: xdMQ81939nrg4YRum6uXTdyMksvhER4XcJxtylm+n10=)
3: pfH2GwBcvDoKyHCIT0cM2iz_ms0.roa (hash: Mm7/tRb+RTedsr3+m2DHJUxAaM0FcO0MUgT9eZ4XDVI=)
4: zMo_08BFuPtuYYrEDlRKq-rmGBo.roa (hash: vZCIJPH6khDNzPRPnP73DDsgX8UFqI/TfAzpfgqnDZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:81:b7:6f:a1:f1:37:41:60:7b:cf:4f:42:e6:60:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Validity
Not Before: Oct 25 10:01:06 2026 GMT
Not After : Oct 26 10:01:06 2026 GMT
Subject: CN=cc889cf94eeb158e6a95cc0d86719d9fab924bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:96:50:43:38:46:cc:3d:48:4d:08:1d:75:41:
e8:e0:32:e6:6a:1c:8d:87:c0:41:e1:0e:58:06:29:
4c:fa:b7:7d:c3:60:ef:c5:f8:5e:ca:9d:81:6d:79:
c3:17:eb:eb:8b:0f:08:1b:f0:8d:e0:50:5e:89:0e:
3b:cc:2d:ed:e5:c0:00:9d:93:d2:cb:df:aa:4d:a0:
69:44:be:9e:a5:3c:ae:6b:d4:38:14:b1:90:03:78:
2c:e6:18:4b:a0:81:71:c2:01:b7:0b:38:ac:76:3a:
02:67:0f:28:49:fd:f4:52:11:89:cc:ec:58:50:ac:
68:11:0d:cb:28:7f:5c:6e:d4:84:21:7e:df:ec:1c:
8e:52:33:20:a3:72:f4:80:d0:67:79:c4:a4:4b:f6:
df:30:95:c7:96:ff:13:5a:5f:12:a8:10:90:56:75:
d4:08:b3:b7:8e:98:10:2c:d2:e8:4d:6c:d4:c0:28:
cc:1c:a0:86:08:5d:3a:06:67:9d:f6:73:ef:b3:e9:
08:84:b2:1e:ed:d4:ee:a1:9d:dd:d7:f9:14:77:da:
d4:18:fa:97:4e:bb:15:ba:64:31:eb:6c:71:0c:e2:
44:6a:dd:e5:67:67:10:95:23:db:00:49:e8:7e:6b:
74:aa:49:7c:87:2f:57:0e:fa:fb:cb:fa:2f:7f:98:
82:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:88:9C:F9:4E:EB:15:8E:6A:95:CC:0D:86:71:9D:9F:AB:92:4B:BF
X509v3 Authority Key Identifier:
keyid:53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:92:d6:3a:f7:3d:b4:45:52:43:06:5b:af:23:f6:e7:df:51:
a6:d0:a8:16:37:a1:b4:29:98:b4:a6:18:57:e1:24:d9:a7:36:
aa:3c:c5:d3:7a:0c:62:9b:ac:68:4f:33:7f:58:00:7e:ae:db:
cb:4f:c3:4b:a0:31:5f:e9:40:d1:59:cf:0c:2d:75:e7:b8:8b:
7e:d2:f2:59:ab:9f:b4:2a:04:05:b8:60:a5:0f:16:8e:e1:b4:
97:83:d7:9c:c7:e7:b6:d7:7a:7d:db:67:ee:e5:5f:06:a9:cf:
a3:cc:b4:b1:93:a0:89:58:87:a0:46:da:4d:c9:c1:15:5c:ef:
9a:a5:26:e4:a3:80:2c:ba:59:73:d4:27:de:80:f5:97:f8:9b:
c0:d9:0a:cf:c5:18:7d:56:30:fa:79:84:58:d7:8d:93:b5:2f:
6e:30:f4:f7:5a:97:86:53:dc:0c:e2:fb:c4:f5:45:50:17:75:
12:f7:8a:73:cf:52:84:9f:14:cb:04:d4:f4:87:9f:06:ad:3a:
a9:53:79:15:73:a1:9d:98:11:90:9d:82:5c:87:88:c8:8a:c5:
d9:04:db:84:80:8b:23:23:e8:97:d6:e1:45:1b:12:f5:59:fb:
a2:e3:c4:db:0d:bb:2a:90:58:41:25:2a:c9:e5:af:6b:16:0c:
e5:1f:d3:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFygbdvofE3QWB7z09C5mDwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYzM1Y2E4M2ZjZGY3MWIyNDRlZDgwM2FjNDY4ZTE0NTNk
ODI2OGYwHhcNMjYxMDI1MTAwMTA2WhcNMjYxMDI2MTAwMTA2WjAzMTEwLwYDVQQD
EyhjYzg4OWNmOTRlZWIxNThlNmE5NWNjMGQ4NjcxOWQ5ZmFiOTI0YmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJZQQzhGzD1ITQgddUHo4DLmahyN
h8BB4Q5YBilM+rd9w2Dvxfheyp2BbXnDF+vriw8IG/CN4FBeiQ47zC3t5cAAnZPS
y9+qTaBpRL6epTyua9Q4FLGQA3gs5hhLoIFxwgG3CzisdjoCZw8oSf30UhGJzOxY
UKxoEQ3LKH9cbtSEIX7f7ByOUjMgo3L0gNBnecSkS/bfMJXHlv8TWl8SqBCQVnXU
CLO3jpgQLNLoTWzUwCjMHKCGCF06Bmed9nPvs+kIhLIe7dTuoZ3d1/kUd9rUGPqX
TrsVumQx62xxDOJEat3lZ2cQlSPbAEnofmt0qkl8hy9XDvr7y/ovf5iCQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyInPlO6xWOapXMDYZxnZ+rkku/MB8GA1UdIwQY
MBaAFFPDXKg/zfcbJE7YA6xGjhRT2CaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVThOY3FEX045eHNrVHRnRHJFYU9GRlBZSm84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mZWYyZTAtYmEzNy00ODEyLTk1YWQt
NDExYTI3MTIxNjRkLzEvVThOY3FEX045eHNrVHRnRHJFYU9GRlBZSm84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9mZWYyZTAtYmEzNy00ODEyLTk1YWQtNDExYTI3MTIxNjRk
LzEvVThOY3FEX045eHNrVHRnRHJFYU9GRlBZSm84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5LWOvc9
tEVSQwZbryP2599RptCoFjehtCmYtKYYV+Ek2ac2qjzF03oMYpusaE8zf1gAfq7b
y0/DS6AxX+lA0VnPDC1157iLftLyWauftCoEBbhgpQ8WjuG0l4PXnMfnttd6fdtn
7uVfBqnPo8y0sZOgiViHoEbaTcnBFVzvmqUm5KOALLpZc9Qn3oD1l/ibwNkKz8UY
fVYw+nmEWNeNk7UvbjD091qXhlPcDOL7xPVFUBd1EveKc89ShJ8UywTU9IefBq06
qVN5FXOhnZgRkJ2CXIeIyIrF2QTbhICLIyPol9bhRRsS9Vn7ouPE2w27KpBYQSUq
yeWvaxYM5R/TWQ==
-----END CERTIFICATE-----
Generated at Sun Oct 25 18:12:27 2026 by rpki-client