Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
File: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft (raw, json)
Hash identifier: KevI5/aoD4cu+MbsDit9A1/rN3Zl0bhACqsEZFkXQx8=
Subject key identifier: F3:38:FE:49:87:B4:5F:AD:0C:5C:81:87:F1:9A:3F:6A:0F:32:9D:0D
Authority key identifier: 53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
Certificate issuer: /CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Certificate serial: 01A174A70FF2A92B8E984D388BED52281C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
Manifest number: 1AC3
Signing time: Sun 25 Oct 2026 20:01:07 +0000
Manifest this update: Sun 25 Oct 2026 20:01:07 +0000
Manifest next update: Mon 26 Oct 2026 20:01:07 +0000
Files and hashes: 1: IhNm1XAjTUBP_UYjIGIEELcWiWc.roa (hash: TcGN7ZBSR/KDo/mk7XwRToavEZ6usSTJYaYD26UCIPE=)
2: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl (hash: sE4bfwBwI9orZH/B4jRlVpkFXA5xv4Ljve4j1beBJQk=)
3: mjm_jL6FnCZyLJAmMfTaUZL_DF4.roa (hash: 7TBTThhJXxwuqJMKV3smo+3dSUEAzVVTW36ntOu96Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:a7:0f:f2:a9:2b:8e:98:4d:38:8b:ed:52:28:1c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Validity
Not Before: Oct 25 20:01:07 2026 GMT
Not After : Oct 26 20:01:07 2026 GMT
Subject: CN=f338fe4987b45fad0c5c8187f19a3f6a0f329d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:65:16:e5:f9:fa:d6:6e:4f:d5:c3:ba:7d:c0:
e0:64:69:20:66:33:cc:a0:9e:6d:6d:bf:86:41:3d:
04:3d:86:a8:d3:84:09:fa:f1:e6:9f:f7:1c:9e:41:
1f:d4:92:9c:44:01:72:fc:dd:74:59:1d:63:23:bc:
3c:23:db:21:2d:95:35:82:67:ca:32:44:10:9e:55:
bb:f4:af:8f:f5:ab:d9:39:ce:d0:c1:fc:5e:eb:13:
65:58:e6:8b:d3:a6:51:dd:92:fc:04:90:54:77:2a:
b8:99:a3:62:f4:7b:85:25:75:e5:e8:41:44:7f:37:
1e:32:2e:69:d0:ae:fe:cc:54:3b:02:93:59:dc:52:
04:0e:72:ad:22:c5:92:30:b1:a6:fe:35:9b:93:34:
48:8c:e6:7b:9e:4d:7b:f1:55:c1:25:d1:5a:a0:55:
fa:16:ae:b8:7a:04:15:2c:8d:43:34:f1:4b:9b:41:
cd:e0:4d:d0:b3:e4:4c:42:2c:b5:be:e9:27:d1:5a:
47:48:0c:e7:e3:b7:80:8e:6b:26:bf:4b:4e:a0:0f:
64:d4:da:2a:49:97:fe:d2:7e:45:f9:87:ab:bc:0d:
1b:49:bf:1c:74:a1:97:db:20:63:5b:0e:df:c3:e1:
89:3d:f7:8d:93:62:14:17:86:70:07:7b:a1:5c:61:
57:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:38:FE:49:87:B4:5F:AD:0C:5C:81:87:F1:9A:3F:6A:0F:32:9D:0D
X509v3 Authority Key Identifier:
keyid:53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:8a:c0:c3:bb:b7:aa:57:d4:81:5c:16:a6:01:ea:cd:87:3c:
6e:85:bf:8e:dd:14:33:d2:25:dd:49:8a:e6:5c:c5:e9:88:18:
22:d5:e9:9c:b1:2c:6f:70:62:a4:03:09:53:fd:19:7f:be:91:
50:8b:08:14:0b:e4:d2:f6:44:1f:f7:ac:d6:f9:ef:93:d3:0b:
43:aa:a2:28:90:bc:bf:f1:10:e1:80:54:c3:f2:f8:68:55:6e:
11:3a:3b:f9:ee:a1:1d:d5:d1:07:da:f9:d5:97:9e:59:fe:e0:
04:94:c6:1a:b3:3d:a8:ff:96:1d:c2:b6:33:7b:50:2e:6a:a3:
39:ca:4f:ce:97:32:15:00:7a:19:25:0a:ef:84:89:6e:fe:3e:
da:28:de:3b:f5:2c:30:22:d7:34:1b:ee:ae:94:7d:e7:95:d4:
4d:c5:4a:1d:fe:86:ee:8d:5e:3c:27:2c:36:0b:b1:7c:a2:b3:
07:3f:0a:87:e4:1d:f1:1b:5b:cd:41:d5:5f:ae:45:cd:03:79:
de:c4:b6:dd:e1:5d:de:56:ac:35:bd:ef:a6:ff:e4:aa:d9:db:
e8:06:a0:93:72:6b:1a:04:b9:63:7b:ca:39:35:5e:8c:ea:18:
3a:43:1a:86:dc:8b:b8:04:18:d8:ea:8d:9b:98:68:45:52:03:
a2:64:33:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF0pw/yqSuOmE04i+1SKByYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYjFhOGViYzNlY2Y3ZjVkYjdmNmNhY2QwMGU5MjBhZjg1
YWU4YjQwHhcNMjYxMDI1MjAwMTA3WhcNMjYxMDI2MjAwMTA3WjAzMTEwLwYDVQQD
EyhmMzM4ZmU0OTg3YjQ1ZmFkMGM1YzgxODdmMTlhM2Y2YTBmMzI5ZDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2UW5fn61m5P1cO6fcDgZGkgZjPM
oJ5tbb+GQT0EPYao04QJ+vHmn/ccnkEf1JKcRAFy/N10WR1jI7w8I9shLZU1gmfK
MkQQnlW79K+P9avZOc7Qwfxe6xNlWOaL06ZR3ZL8BJBUdyq4maNi9HuFJXXl6EFE
fzceMi5p0K7+zFQ7ApNZ3FIEDnKtIsWSMLGm/jWbkzRIjOZ7nk178VXBJdFaoFX6
Fq64egQVLI1DNPFLm0HN4E3Qs+RMQiy1vukn0VpHSAzn47eAjmsmv0tOoA9k1Noq
SZf+0n5F+YervA0bSb8cdKGX2yBjWw7fw+GJPfeNk2IUF4ZwB3uhXGFXRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPM4/kmHtF+tDFyBh/GaP2oPMp0NMB8GA1UdIwQY
MBaAFFOxqOvD7Pf1239srNAOkgr4Wui0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTdHbzY4UHM5X1hiZjJ5czBBNlNDdmhhNkxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wNzA2MzAtNTIzNC00OWM0LTg0ZmUt
MTViZGE2Yjg2N2NiLzEvVTdHbzY4UHM5X1hiZjJ5czBBNlNDdmhhNkxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wNzA2MzAtNTIzNC00OWM0LTg0ZmUtMTViZGE2Yjg2N2Ni
LzEvVTdHbzY4UHM5X1hiZjJ5czBBNlNDdmhhNkxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4orAw7u3
qlfUgVwWpgHqzYc8boW/jt0UM9Il3UmK5lzF6YgYItXpnLEsb3BipAMJU/0Zf76R
UIsIFAvk0vZEH/es1vnvk9MLQ6qiKJC8v/EQ4YBUw/L4aFVuETo7+e6hHdXRB9r5
1ZeeWf7gBJTGGrM9qP+WHcK2M3tQLmqjOcpPzpcyFQB6GSUK74SJbv4+2ijeO/Us
MCLXNBvurpR955XUTcVKHf6G7o1ePCcsNguxfKKzBz8Kh+Qd8RtbzUHVX65FzQN5
3sS23eFd3lasNb3vpv/kqtnb6Aagk3JrGgS5Y3vKOTVejOoYOkMahtyLuAQY2OqN
m5hoRVIDomQzOg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 03:46:22 2026 by rpki-client