Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
File: U70JkochUqhtYNljuH0BgXwA_FM.mft (raw, json)
Hash identifier: djAmNfwuwDMBmV8df7hZIahEZRTiHVxMId9JyR3lv7w=
Subject key identifier: 26:3D:16:39:0C:53:88:8E:5C:F9:FE:0E:11:45:58:EF:30:1D:B4:AD
Authority key identifier: 53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
Certificate issuer: /CN=53bd0992872152a86d60d963b87d01817c00fc53
Certificate serial: 01A0B49B2CC6B87F3EDADCCFBA927224AA0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
Manifest number: 1A5E
Signing time: Fri 18 Sep 2026 13:01:03 +0000
Manifest this update: Fri 18 Sep 2026 13:01:03 +0000
Manifest next update: Sat 19 Sep 2026 13:01:03 +0000
Files and hashes: 1: S_bLPS21FFHSFgzqZbLQgGjdapU.roa (hash: ntP7qUH7mD4+qqNvUodX6WEcYgeevuhwX8/sIbaDqz4=)
2: U70JkochUqhtYNljuH0BgXwA_FM.crl (hash: kEf0YU7bv0gnU8gJgrOUCHC+SYt1jSOwUbKvkIeBRSQ=)
3: vuogQOiw-NsRjP2TO25Dr4VGU1g.roa (hash: /xeIMQbmMftTFD0OnGKJGQk5eie+bKtG5JesE4wKpZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:9b:2c:c6:b8:7f:3e:da:dc:cf:ba:92:72:24:aa:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bd0992872152a86d60d963b87d01817c00fc53
Validity
Not Before: Sep 18 13:01:03 2026 GMT
Not After : Sep 19 13:01:03 2026 GMT
Subject: CN=263d16390c53888e5cf9fe0e114558ef301db4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5c:45:e5:ed:0b:e9:9c:64:7c:ea:27:3f:98:
a2:06:45:18:48:92:2d:23:c7:3d:a6:c1:95:00:93:
e8:9d:21:c0:8f:32:e7:32:fc:b9:ff:b0:26:61:1f:
c6:6f:16:9a:9e:aa:68:df:da:4b:7b:a3:b8:48:e0:
89:dd:21:8c:65:b9:cb:ce:19:d4:23:bb:aa:d3:0a:
90:a8:b2:ad:82:e3:86:25:b5:ca:2a:8f:19:ab:26:
39:8e:9e:d4:0c:3c:06:9e:2f:8a:10:80:f0:e6:3a:
bb:a5:5f:51:42:cb:17:bd:f8:03:ab:0d:02:0f:47:
56:08:4e:7e:e1:d8:fe:b6:b0:83:da:31:0b:93:2c:
ff:4f:32:10:09:3b:4c:55:45:b0:5d:f7:67:f0:f2:
ee:d6:e1:49:de:d5:39:d2:85:03:24:98:59:e0:5c:
33:65:f0:cb:02:f1:cc:4b:18:af:ba:0e:68:2f:0b:
9d:4b:09:f2:6d:64:9e:fd:c2:e7:ef:77:5b:00:29:
f2:7e:2d:e9:96:ae:03:a2:b4:71:ea:27:34:56:5f:
f6:d0:f4:0c:82:ac:74:6c:ad:80:51:a7:f2:ee:7b:
e3:cb:2a:40:70:7f:ba:8c:64:e2:7c:f0:04:07:5e:
ee:35:cd:05:67:bd:da:65:40:c9:69:d2:10:1f:ea:
de:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3D:16:39:0C:53:88:8E:5C:F9:FE:0E:11:45:58:EF:30:1D:B4:AD
X509v3 Authority Key Identifier:
keyid:53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:42:fa:a7:50:46:76:0d:10:ad:97:69:71:e2:e3:d3:2b:7b:
51:e5:5a:51:a6:06:b5:d5:14:9c:2e:1e:f1:83:6f:4b:af:49:
b9:45:47:51:7f:83:98:ae:76:1d:8f:5b:90:0b:4c:13:c6:c5:
85:8a:99:68:69:c4:53:39:a9:5b:fd:ac:23:1c:b9:f5:08:37:
fd:c0:8d:80:5c:4b:99:cf:74:0d:3d:4e:ce:66:aa:4a:1f:e9:
4e:0a:a6:d9:b9:2d:31:4d:42:1e:d3:49:e9:d4:b7:bf:d5:de:
73:e1:09:06:91:c1:5a:c8:75:0c:89:d2:84:d1:25:2a:a7:cb:
ab:c0:83:c4:8c:ad:f9:88:90:f9:cd:c1:84:b0:22:81:71:8d:
df:86:0d:03:7e:70:fc:b3:84:a2:30:1d:26:a9:41:c5:07:4f:
76:aa:cc:91:82:ee:08:04:6f:b8:3c:59:9b:07:87:f9:23:ba:
db:30:6d:37:44:b2:79:c8:b0:fd:e1:d6:9a:de:81:4b:e2:17:
ba:51:c3:24:e6:53:2f:0c:3d:0a:54:68:ce:0c:b8:e4:24:11:
5f:45:7e:f1:a0:f2:8a:4d:df:a0:95:e2:7d:a0:4f:c9:ef:20:
4c:3b:7a:10:78:e7:e1:6d:cd:fd:a3:02:42:9b:be:00:e0:6e:
44:c4:95:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC0myzGuH8+2tzPupJyJKoNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYmQwOTkyODcyMTUyYTg2ZDYwZDk2M2I4N2QwMTgxN2Mw
MGZjNTMwHhcNMjYwOTE4MTMwMTAzWhcNMjYwOTE5MTMwMTAzWjAzMTEwLwYDVQQD
EygyNjNkMTYzOTBjNTM4ODhlNWNmOWZlMGUxMTQ1NThlZjMwMWRiNGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1xF5e0L6ZxkfOonP5iiBkUYSJIt
I8c9psGVAJPonSHAjzLnMvy5/7AmYR/Gbxaanqpo39pLe6O4SOCJ3SGMZbnLzhnU
I7uq0wqQqLKtguOGJbXKKo8ZqyY5jp7UDDwGni+KEIDw5jq7pV9RQssXvfgDqw0C
D0dWCE5+4dj+trCD2jELkyz/TzIQCTtMVUWwXfdn8PLu1uFJ3tU50oUDJJhZ4Fwz
ZfDLAvHMSxivug5oLwudSwnybWSe/cLn73dbACnyfi3plq4DorRx6ic0Vl/20PQM
gqx0bK2AUafy7nvjyypAcH+6jGTifPAEB17uNc0FZ73aZUDJadIQH+recwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCY9FjkMU4iOXPn+DhFFWO8wHbStMB8GA1UdIwQY
MBaAFFO9CZKHIVKobWDZY7h9AYF8APxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTcwSmtvY2hVcWh0WU5sanVIMEJnWHdBX0ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82ZTI2NGUtZDZjZS00MmQ1LWIwNWQt
ZTE1ZjRmODQwOWU2LzEvVTcwSmtvY2hVcWh0WU5sanVIMEJnWHdBX0ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82ZTI2NGUtZDZjZS00MmQ1LWIwNWQtZTE1ZjRmODQwOWU2
LzEvVTcwSmtvY2hVcWh0WU5sanVIMEJnWHdBX0ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUL6p1BG
dg0QrZdpceLj0yt7UeVaUaYGtdUUnC4e8YNvS69JuUVHUX+DmK52HY9bkAtME8bF
hYqZaGnEUzmpW/2sIxy59Qg3/cCNgFxLmc90DT1OzmaqSh/pTgqm2bktMU1CHtNJ
6dS3v9Xec+EJBpHBWsh1DInShNElKqfLq8CDxIyt+YiQ+c3BhLAigXGN34YNA35w
/LOEojAdJqlBxQdPdqrMkYLuCARvuDxZmweH+SO62zBtN0Syeciw/eHWmt6BS+IX
ulHDJOZTLww9ClRozgy45CQRX0V+8aDyik3foJXifaBPye8gTDt6EHjn4W3N/aMC
Qpu+AOBuRMSVbA==
-----END CERTIFICATE-----
Generated at Fri Sep 18 22:58:44 2026 by rpki-client