Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.mft
File: U4LANwL31t1s72Zs4gUxU8mv6Us.mft (raw, json)
Hash identifier: Fw+RkcFDZsBa69pMkLHnhwhsAxc3vi4unzc9+o2Kqo8=
Subject key identifier: 23:D4:99:6A:5F:EB:9E:EC:4D:25:ED:FA:23:48:FE:CC:D2:6B:61:5F
Authority key identifier: 53:82:C0:37:02:F7:D6:DD:6C:EF:66:6C:E2:05:31:53:C9:AF:E9:4B
Certificate issuer: /CN=5382c03702f7d6dd6cef666ce2053153c9afe94b
Certificate serial: 01A1027F86D1FABA2554A0644D6EA1D70BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4LANwL31t1s72Zs4gUxU8mv6Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.mft
Manifest number: 0173
Signing time: Sat 03 Oct 2026 16:01:14 +0000
Manifest this update: Sat 03 Oct 2026 16:01:14 +0000
Manifest next update: Sun 04 Oct 2026 16:01:14 +0000
Files and hashes: 1: U4LANwL31t1s72Zs4gUxU8mv6Us.crl (hash: gpQbJJtQdNbT7JlnOK6FBM7M8F5GOqOWI7/e+X2WmGY=)
2: m_nKiCuVzTi2TKccGiONJSKEB70.roa (hash: S3r/rA3wAxsL4UrMnk+l9Ka3WgxOB/UdzMyaqt2gqiY=)
3: xNohHyHNAtZbFs1TNTPBi4HGfmM.asa (hash: RKzmJOhU01ix0w7bW/M3Ue48L0hu6xJh91dZNeFrjAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4LANwL31t1s72Zs4gUxU8mv6Us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:7f:86:d1:fa:ba:25:54:a0:64:4d:6e:a1:d7:0b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5382c03702f7d6dd6cef666ce2053153c9afe94b
Validity
Not Before: Oct 3 16:01:14 2026 GMT
Not After : Oct 4 16:01:14 2026 GMT
Subject: CN=23d4996a5feb9eec4d25edfa2348feccd26b615f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:63:d3:b5:a9:de:95:c8:05:0f:25:56:f2:c9:
b5:71:9c:48:0c:de:8c:90:5c:64:e3:3d:59:81:66:
c4:f7:76:a7:25:dd:92:4b:c3:e5:90:93:1f:7f:8c:
2f:2f:68:0e:af:4b:ae:65:d9:67:ea:ea:78:c5:6a:
7d:9e:7e:de:e2:06:5e:3e:d9:bb:31:d8:01:f8:49:
3c:8b:05:68:13:5f:6d:43:93:f0:4b:60:34:94:b7:
9d:0f:ef:0d:a3:c5:2c:03:4c:34:77:f1:eb:5d:d7:
d7:81:d9:72:bf:cc:cb:a6:cf:4a:1e:c4:68:a3:d2:
61:3b:77:48:5d:dd:e1:c3:6d:16:d8:1e:9c:85:9d:
44:11:f7:cf:be:5b:b5:aa:ea:bf:84:99:68:f6:f0:
45:e3:60:c6:c8:67:77:3f:a6:aa:de:20:a4:97:e7:
c6:97:75:32:d3:cd:51:cf:5e:87:3e:48:a6:3a:2c:
92:f1:75:8c:a3:bd:72:9e:1e:f5:73:11:16:d9:12:
8d:8b:58:14:81:93:80:d0:a8:11:46:a9:d1:31:1a:
29:51:61:74:47:ac:ee:62:d5:4b:63:20:bf:f6:c1:
80:cf:07:1a:e8:c1:95:33:e7:08:de:dd:0d:e1:e9:
32:26:d2:2b:b2:38:d8:8f:2b:b1:e1:4a:ce:9c:75:
fb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D4:99:6A:5F:EB:9E:EC:4D:25:ED:FA:23:48:FE:CC:D2:6B:61:5F
X509v3 Authority Key Identifier:
keyid:53:82:C0:37:02:F7:D6:DD:6C:EF:66:6C:E2:05:31:53:C9:AF:E9:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4LANwL31t1s72Zs4gUxU8mv6Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:39:c3:34:f2:a2:15:f4:75:7a:4f:7f:52:2c:53:c9:11:71:
a6:04:14:72:53:b9:f5:52:fc:54:8f:c4:46:29:08:39:84:97:
fe:e3:95:8f:7a:5a:55:d3:25:5f:58:9c:d0:00:51:74:91:cc:
64:9c:d3:c7:c8:6e:1f:b2:a6:63:ab:f0:e1:00:a4:b2:48:13:
9b:2d:3f:0e:0d:a0:99:3b:8d:c5:f3:01:41:d9:c2:b7:64:b0:
58:69:7b:3b:80:c2:4e:a6:fc:b6:5b:ec:2f:da:b0:da:60:fe:
62:2f:cb:ce:11:6b:5c:75:ef:ef:65:ad:23:d4:9d:98:af:07:
6b:c4:eb:3a:22:1b:44:96:04:6a:5b:56:e3:bc:cb:cb:6a:d5:
cd:e9:9b:b1:17:35:07:67:96:17:78:ac:74:62:a3:31:81:39:
8e:9e:41:86:eb:c8:e5:28:78:b6:bc:40:fc:0a:92:14:1f:fb:
cb:cd:18:a1:97:20:8b:1c:0c:c1:21:09:ea:eb:d8:0c:b7:25:
f8:35:21:cc:8a:74:62:65:15:df:15:55:76:5c:73:e6:5f:12:
ea:11:e1:0f:66:13:9e:e6:67:c5:0f:a9:be:28:f2:41:0e:e9:
a7:c8:74:03:b4:eb:1b:db:a3:0f:98:e0:be:90:21:1f:d0:a9:
64:50:79:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECf4bR+rolVKBkTW6h1wu3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzODJjMDM3MDJmN2Q2ZGQ2Y2VmNjY2Y2UyMDUzMTUzYzlh
ZmU5NGIwHhcNMjYxMDAzMTYwMTE0WhcNMjYxMDA0MTYwMTE0WjAzMTEwLwYDVQQD
EygyM2Q0OTk2YTVmZWI5ZWVjNGQyNWVkZmEyMzQ4ZmVjY2QyNmI2MTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2PTtanelcgFDyVW8sm1cZxIDN6M
kFxk4z1ZgWbE93anJd2SS8PlkJMff4wvL2gOr0uuZdln6up4xWp9nn7e4gZePtm7
MdgB+Ek8iwVoE19tQ5PwS2A0lLedD+8No8UsA0w0d/HrXdfXgdlyv8zLps9KHsRo
o9JhO3dIXd3hw20W2B6chZ1EEffPvlu1quq/hJlo9vBF42DGyGd3P6aq3iCkl+fG
l3Uy081Rz16HPkimOiyS8XWMo71ynh71cxEW2RKNi1gUgZOA0KgRRqnRMRopUWF0
R6zuYtVLYyC/9sGAzwca6MGVM+cI3t0N4ekyJtIrsjjYjyux4UrOnHX7WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPUmWpf657sTSXt+iNI/szSa2FfMB8GA1UdIwQY
MBaAFFOCwDcC99bdbO9mbOIFMVPJr+lLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTRMQU53TDMxdDFzNzJaczRnVXhVOG12NlVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84ZGM5N2UtZmVmYi00ZTkzLTk4MDkt
YThhYTY3MGYxMWI1LzEvVTRMQU53TDMxdDFzNzJaczRnVXhVOG12NlVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC84ZGM5N2UtZmVmYi00ZTkzLTk4MDktYThhYTY3MGYxMWI1
LzEvVTRMQU53TDMxdDFzNzJaczRnVXhVOG12NlVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsznDNPKi
FfR1ek9/UixTyRFxpgQUclO59VL8VI/ERikIOYSX/uOVj3paVdMlX1ic0ABRdJHM
ZJzTx8huH7KmY6vw4QCkskgTmy0/Dg2gmTuNxfMBQdnCt2SwWGl7O4DCTqb8tlvs
L9qw2mD+Yi/LzhFrXHXv72WtI9SdmK8Ha8TrOiIbRJYEaltW47zLy2rVzembsRc1
B2eWF3isdGKjMYE5jp5BhuvI5Sh4trxA/AqSFB/7y80YoZcgixwMwSEJ6uvYDLcl
+DUhzIp0YmUV3xVVdlxz5l8S6hHhD2YTnuZnxQ+pvijyQQ7pp8h0A7TrG9ujD5jg
vpAhH9CpZFB51w==
-----END CERTIFICATE-----
Generated at Sat Oct 3 21:26:25 2026 by rpki-client