Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
File: U70JkochUqhtYNljuH0BgXwA_FM.mft (raw, json)
Hash identifier: xW2DlzOlyy3eGYFjApK++6U2wrhNMmhe36dzkWyy7V8=
Subject key identifier: 65:A9:B7:F3:26:54:60:C3:9B:8A:41:AB:1E:A6:ED:22:BE:60:EC:73
Authority key identifier: 53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
Certificate issuer: /CN=53bd0992872152a86d60d963b87d01817c00fc53
Certificate serial: 019FA260555FEC8EFC95EBF13C623BEF6EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 07:00:50 +0000
Manifest this update: Mon 27 Jul 2026 07:00:50 +0000
Manifest next update: Tue 28 Jul 2026 07:00:50 +0000
Files and hashes: 1: S_bLPS21FFHSFgzqZbLQgGjdapU.roa (hash: ntP7qUH7mD4+qqNvUodX6WEcYgeevuhwX8/sIbaDqz4=)
2: U70JkochUqhtYNljuH0BgXwA_FM.crl (hash: D3jKBDjmP8m0Ghiv6Pe35Gw6ZONJOrh4yn5dC86aGto=)
3: vuogQOiw-NsRjP2TO25Dr4VGU1g.roa (hash: /xeIMQbmMftTFD0OnGKJGQk5eie+bKtG5JesE4wKpZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:55:5f:ec:8e:fc:95:eb:f1:3c:62:3b:ef:6e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bd0992872152a86d60d963b87d01817c00fc53
Validity
Not Before: Jul 27 07:00:50 2026 GMT
Not After : Jul 28 07:00:50 2026 GMT
Subject: CN=65a9b7f3265460c39b8a41ab1ea6ed22be60ec73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:28:91:17:26:25:e5:26:f0:e4:94:a4:2e:63:
9d:e5:8c:b2:94:85:d6:47:02:23:9f:4d:55:30:7e:
37:22:b5:23:da:3d:d6:b1:fa:f3:08:f6:56:cd:a3:
66:2c:e7:be:04:d1:42:73:24:aa:c9:c6:81:5f:9c:
2c:a7:5b:57:1b:69:41:10:71:98:0e:0d:ac:9f:a0:
ae:4d:5b:8e:c0:e8:68:83:64:ba:79:2d:80:b2:de:
eb:a3:8a:b8:47:77:5e:69:c3:55:bc:6b:ed:9e:13:
11:b5:86:39:e8:21:68:26:91:4b:e5:0d:64:6d:47:
87:96:f0:ed:52:13:18:8f:96:d0:9c:84:f5:a4:49:
77:aa:10:15:69:f7:87:e7:8f:35:03:d0:36:aa:84:
af:81:a9:32:b6:0c:b9:f3:02:e9:af:5c:1b:3c:2e:
ab:16:ce:59:99:bc:11:e8:12:98:98:fa:b8:4e:74:
1e:8d:05:90:a5:cb:b6:d8:8a:d7:6c:d1:b5:e5:7f:
63:bd:b8:8c:07:37:18:09:be:9d:49:7b:13:e9:73:
77:dc:b2:fd:aa:88:5c:fc:fd:04:cd:73:4e:96:a0:
83:18:23:52:f9:8e:0e:2c:da:d5:e9:30:4c:92:b2:
71:29:be:28:06:17:39:50:d2:52:bf:da:65:ee:76:
18:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A9:B7:F3:26:54:60:C3:9B:8A:41:AB:1E:A6:ED:22:BE:60:EC:73
X509v3 Authority Key Identifier:
keyid:53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:70:43:29:04:d5:ba:11:da:52:b9:68:91:0b:be:d0:35:ec:
37:d6:6a:92:a3:f8:75:d8:ab:5b:3b:c4:48:00:11:bc:8c:43:
1e:75:c0:96:37:88:6f:32:68:f3:1f:68:9e:5b:ee:ee:0e:93:
c3:52:10:1e:a7:19:33:3a:b6:8c:41:39:a3:28:4d:b4:ed:f1:
f9:3e:9c:8b:12:5c:33:87:fd:35:0f:c3:56:9e:ca:70:63:9f:
76:e4:c6:d2:42:60:9b:bc:76:94:0a:17:bd:c6:ea:a9:67:20:
14:34:bb:00:27:b2:7d:1a:f3:28:0d:0b:d8:44:7b:f3:a7:9f:
3f:a6:0b:dc:1b:31:3a:de:a5:d1:2c:38:a9:d9:f1:bc:e2:ed:
f5:fc:31:f8:18:56:80:82:8c:2b:9f:d0:a4:65:52:a8:3d:55:
8c:c2:ac:14:8c:f9:9d:94:76:5b:ec:26:62:56:06:85:c3:d3:
61:bd:9f:28:18:c8:9b:69:5c:52:86:66:e6:24:73:18:31:30:
b4:a0:86:84:d2:d8:25:f3:76:0f:fe:d2:f5:77:ed:62:e4:ed:
cb:84:c8:10:4f:42:be:ef:91:a6:af:d7:f4:ec:67:e3:81:c6:
e0:ff:4c:f7:24:4f:a9:56:9b:31:b2:26:02:72:ae:08:de:7a:
a7:07:98:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iYFVf7I78levxPGI7726oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYmQwOTkyODcyMTUyYTg2ZDYwZDk2M2I4N2QwMTgxN2Mw
MGZjNTMwHhcNMjYwNzI3MDcwMDUwWhcNMjYwNzI4MDcwMDUwWjAzMTEwLwYDVQQD
Eyg2NWE5YjdmMzI2NTQ2MGMzOWI4YTQxYWIxZWE2ZWQyMmJlNjBlYzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iiRFyYl5Sbw5JSkLmOd5YyylIXW
RwIjn01VMH43IrUj2j3WsfrzCPZWzaNmLOe+BNFCcySqycaBX5wsp1tXG2lBEHGY
Dg2sn6CuTVuOwOhog2S6eS2Ast7ro4q4R3deacNVvGvtnhMRtYY56CFoJpFL5Q1k
bUeHlvDtUhMYj5bQnIT1pEl3qhAVafeH5481A9A2qoSvgakytgy58wLpr1wbPC6r
Fs5ZmbwR6BKYmPq4TnQejQWQpcu22IrXbNG15X9jvbiMBzcYCb6dSXsT6XN33LL9
qohc/P0EzXNOlqCDGCNS+Y4OLNrV6TBMkrJxKb4oBhc5UNJSv9pl7nYYdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWpt/MmVGDDm4pBqx6m7SK+YOxzMB8GA1UdIwQY
MBaAFFO9CZKHIVKobWDZY7h9AYF8APxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTcwSmtvY2hVcWh0WU5sanVIMEJnWHdBX0ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82ZTI2NGUtZDZjZS00MmQ1LWIwNWQt
ZTE1ZjRmODQwOWU2LzEvVTcwSmtvY2hVcWh0WU5sanVIMEJnWHdBX0ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82ZTI2NGUtZDZjZS00MmQ1LWIwNWQtZTE1ZjRmODQwOWU2
LzEvVTcwSmtvY2hVcWh0WU5sanVIMEJnWHdBX0ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtnBDKQTV
uhHaUrlokQu+0DXsN9ZqkqP4ddirWzvESAARvIxDHnXAljeIbzJo8x9onlvu7g6T
w1IQHqcZMzq2jEE5oyhNtO3x+T6cixJcM4f9NQ/DVp7KcGOfduTG0kJgm7x2lAoX
vcbqqWcgFDS7ACeyfRrzKA0L2ER786efP6YL3BsxOt6l0Sw4qdnxvOLt9fwx+BhW
gIKMK5/QpGVSqD1VjMKsFIz5nZR2W+wmYlYGhcPTYb2fKBjIm2lcUoZm5iRzGDEw
tKCGhNLYJfN2D/7S9XftYuTty4TIEE9Cvu+Rpq/X9Oxn44HG4P9M9yRPqVabMbIm
AnKuCN56pweY9g==
-----END CERTIFICATE-----
Generated at Mon Jul 27 16:04:35 2026 by rpki-client