Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
File: UFrRf0xiDVjUU9X218kjP84SZJk.mft (raw, json)
Hash identifier: FW5v+wBqM4Uc3ZH8GZANp765plwiAoRonAgoRHKuA+Y=
Subject key identifier: 71:25:C4:15:E4:64:7C:02:13:07:97:27:DB:58:6E:BA:9A:74:94:6D
Authority key identifier: 50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
Certificate issuer: /CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Certificate serial: 01A00326B3B4BEE917965B4C6F22BCAB9FCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
Manifest number: 0A8C
Signing time: Sat 15 Aug 2026 02:01:03 +0000
Manifest this update: Sat 15 Aug 2026 02:01:03 +0000
Manifest next update: Sun 16 Aug 2026 02:01:03 +0000
Files and hashes: 1: UFrRf0xiDVjUU9X218kjP84SZJk.crl (hash: odhdS1+Bx4iky6OEWmsQ2gntXNTOfkg7EdGc6GlEKpc=)
2: n29c-eqwdShZtcEOhZv3Ign1VGo.roa (hash: uxh/IP+egHWNQsX3vB68RQ/0/wzosXKCxI7jga5PL14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:26:b3:b4:be:e9:17:96:5b:4c:6f:22:bc:ab:9f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Validity
Not Before: Aug 15 02:01:03 2026 GMT
Not After : Aug 16 02:01:03 2026 GMT
Subject: CN=7125c415e4647c0213079727db586eba9a74946d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:27:f4:88:28:16:ab:ee:46:a2:dc:70:16:1d:
45:ac:4a:5b:7d:43:b3:3e:fe:9f:28:df:ec:20:9e:
9d:cb:30:06:d7:5d:6c:8e:6a:19:28:d2:ae:31:c8:
3b:72:36:32:10:5b:7c:0b:4b:60:ba:3b:46:42:40:
e2:56:12:fb:76:03:1b:8e:99:d2:2b:f8:70:ce:56:
88:85:e3:00:14:1b:da:e2:fb:a0:e8:04:9c:aa:7e:
fb:99:6d:3b:f8:8d:84:d1:ed:8c:53:6e:08:c1:d6:
34:85:68:b8:ef:3d:a6:85:00:38:d8:5c:e6:55:03:
69:d1:4f:29:bc:8e:4b:d4:8d:51:58:37:b3:dd:49:
32:50:fb:33:3e:7a:2a:3e:85:f4:f2:d9:c7:6f:36:
7e:75:46:31:3d:77:4e:46:53:84:bd:77:fd:22:b1:
93:ac:f1:c2:f6:db:ef:62:46:32:f5:5a:00:9a:98:
5d:a6:13:93:48:60:d5:6f:ac:d6:60:5b:f1:2a:08:
ce:e0:b6:cc:b5:ab:e7:27:72:52:c9:72:c8:8f:43:
4a:1d:1e:e2:01:35:c7:c1:2f:88:2b:f7:24:b0:b3:
bb:81:5e:6a:64:6c:9a:42:09:3f:42:56:6b:f5:ae:
ed:93:e2:5d:e3:7b:90:f3:63:a9:08:06:8e:f5:53:
d7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:25:C4:15:E4:64:7C:02:13:07:97:27:DB:58:6E:BA:9A:74:94:6D
X509v3 Authority Key Identifier:
keyid:50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:bf:68:37:29:61:8a:13:3b:c0:49:b5:9a:84:1b:a7:b1:cb:
3b:44:a6:ff:45:e3:32:c1:b7:ef:43:fa:8f:a3:c4:54:32:f0:
61:8c:29:fe:09:b3:b0:41:5b:54:94:c4:ab:fe:f0:18:0d:bd:
d5:e3:10:e8:0b:3b:2d:7a:43:6f:5d:b1:32:af:d1:f0:4a:09:
19:6a:af:cf:6e:69:2d:1a:1e:11:7a:65:09:ae:73:f1:87:d9:
fe:51:25:73:48:ed:8b:23:b9:fc:93:6a:46:61:58:14:a4:bb:
43:e2:57:49:1d:d1:db:21:61:86:4b:cb:0e:f3:c8:38:e6:b1:
82:d3:8c:38:fd:96:85:84:cd:25:f4:c0:ee:e4:8b:fb:4c:1d:
62:f4:00:9a:44:be:dd:10:97:cd:d9:82:c2:fd:ce:bc:cb:cb:
40:79:f9:32:63:a4:2d:fa:54:3f:10:41:0b:a0:8a:12:45:9e:
9f:5d:75:23:d9:10:7a:57:f8:7a:57:fc:d0:00:e8:51:7d:53:
1c:9a:30:7a:da:03:98:ae:85:24:72:15:d0:76:f7:24:dd:c1:
6d:cd:2a:b4:0e:e6:40:f5:5a:22:ea:d0:9a:79:79:21:1c:25:
ff:d3:a3:95:15:fa:6d:ae:bb:c2:c1:21:bb:02:6c:24:4a:51:
16:6f:f0:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADJrO0vukXlltMbyK8q5/PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNWFkMTdmNGM2MjBkNThkNDUzZDVmNmQ3YzkyMzNmY2Ux
MjY0OTkwHhcNMjYwODE1MDIwMTAzWhcNMjYwODE2MDIwMTAzWjAzMTEwLwYDVQQD
Eyg3MTI1YzQxNWU0NjQ3YzAyMTMwNzk3MjdkYjU4NmViYTlhNzQ5NDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCf0iCgWq+5GotxwFh1FrEpbfUOz
Pv6fKN/sIJ6dyzAG111sjmoZKNKuMcg7cjYyEFt8C0tgujtGQkDiVhL7dgMbjpnS
K/hwzlaIheMAFBva4vug6AScqn77mW07+I2E0e2MU24IwdY0hWi47z2mhQA42Fzm
VQNp0U8pvI5L1I1RWDez3UkyUPszPnoqPoX08tnHbzZ+dUYxPXdORlOEvXf9IrGT
rPHC9tvvYkYy9VoAmphdphOTSGDVb6zWYFvxKgjO4LbMtavnJ3JSyXLIj0NKHR7i
ATXHwS+IK/cksLO7gV5qZGyaQgk/QlZr9a7tk+Jd43uQ82OpCAaO9VPXHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHElxBXkZHwCEweXJ9tYbrqadJRtMB8GA1UdIwQY
MBaAFFBa0X9MYg1Y1FPV9tfJIz/OEmSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZyUmYweGlEVmpVVTlYMjE4a2pQODRTWkprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hMmZjMTgtNTM0Yi00NDU0LTliZDEt
ZmU2YmIwNDkzMzdkLzEvVUZyUmYweGlEVmpVVTlYMjE4a2pQODRTWkprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9hMmZjMTgtNTM0Yi00NDU0LTliZDEtZmU2YmIwNDkzMzdk
LzEvVUZyUmYweGlEVmpVVTlYMjE4a2pQODRTWkprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA79oNylh
ihM7wEm1moQbp7HLO0Sm/0XjMsG370P6j6PEVDLwYYwp/gmzsEFbVJTEq/7wGA29
1eMQ6As7LXpDb12xMq/R8EoJGWqvz25pLRoeEXplCa5z8YfZ/lElc0jtiyO5/JNq
RmFYFKS7Q+JXSR3R2yFhhkvLDvPIOOaxgtOMOP2WhYTNJfTA7uSL+0wdYvQAmkS+
3RCXzdmCwv3OvMvLQHn5MmOkLfpUPxBBC6CKEkWen111I9kQelf4elf80ADoUX1T
HJowetoDmK6FJHIV0Hb3JN3Bbc0qtA7mQPVaIurQmnl5IRwl/9OjlRX6ba67wsEh
uwJsJEpRFm/wCA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:15:14 2026 by rpki-client