Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
File: U0OOy3Xh1es-gP26waaw-vg_c-E.mft (raw, json)
Hash identifier: kJgOwCTH/B8SOUTfjv4W0re2cpb68S8E2dO1lgXDlHc=
Subject key identifier: 0B:48:42:82:CA:32:14:C0:82:F4:5B:F5:45:CE:E9:E3:7B:56:8D:15
Authority key identifier: 53:43:8E:CB:75:E1:D5:EB:3E:80:FD:BA:C1:A6:B0:FA:F8:3F:73:E1
Certificate issuer: /CN=53438ecb75e1d5eb3e80fdbac1a6b0faf83f73e1
Certificate serial: 01A091D8A6B1D30DCB1CF87C6F5DA37CFC28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
Manifest number: 0253
Signing time: Fri 11 Sep 2026 19:01:29 +0000
Manifest this update: Fri 11 Sep 2026 19:01:29 +0000
Manifest next update: Sat 12 Sep 2026 19:01:29 +0000
Files and hashes: 1: 6yK0rTOIU4100VkJhvlL7615x-Q.roa (hash: 912+lG9sTeHd4OGye179bG8W3Z4J1YwKjtqF0na5AJY=)
2: U0OOy3Xh1es-gP26waaw-vg_c-E.crl (hash: fFHKGY0HQFngMo5eonrRlnK8qTYiEy9Fop6Uh7ZH62E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:d8:a6:b1:d3:0d:cb:1c:f8:7c:6f:5d:a3:7c:fc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53438ecb75e1d5eb3e80fdbac1a6b0faf83f73e1
Validity
Not Before: Sep 11 19:01:29 2026 GMT
Not After : Sep 12 19:01:29 2026 GMT
Subject: CN=0b484282ca3214c082f45bf545cee9e37b568d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fc:22:0b:23:c5:10:d7:dd:8a:2a:b6:4b:ad:
b7:84:09:19:ce:43:7e:ad:11:b9:8b:07:2b:d6:37:
ab:59:cb:7d:ac:70:c4:1b:ef:d5:f9:99:02:55:76:
55:36:8f:4e:28:1a:22:a4:78:5e:35:4c:52:6f:42:
a2:cc:49:63:43:5c:68:35:db:cf:40:88:78:94:82:
8e:46:e4:3e:c1:04:ed:ba:fd:19:98:29:4d:5c:05:
29:0e:05:de:75:2d:b6:24:18:6d:b5:0f:f5:35:65:
ac:18:0e:c8:a8:ad:b5:2a:14:21:7b:c6:af:b2:ab:
fb:37:5a:92:8d:31:9e:36:40:ab:aa:9b:b6:18:e0:
e0:3b:71:e1:5b:51:c6:38:c1:2f:26:77:13:25:23:
b3:58:ff:24:f3:92:51:07:1c:7c:fa:fd:76:f1:05:
c5:5a:77:13:82:19:08:78:7d:05:47:fb:6e:b8:02:
42:14:51:4d:c5:a7:91:86:93:e0:c8:24:94:8d:ac:
15:49:84:7d:7a:41:cc:ba:d0:8a:c2:c0:e7:78:56:
dc:ab:a7:9a:f3:e1:b0:18:4c:18:64:32:52:e3:ee:
21:34:ee:7f:eb:8d:25:4b:f7:71:63:fc:22:42:2c:
8d:10:7c:6b:36:eb:00:6b:a1:5e:b5:32:ea:78:d9:
fe:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:48:42:82:CA:32:14:C0:82:F4:5B:F5:45:CE:E9:E3:7B:56:8D:15
X509v3 Authority Key Identifier:
keyid:53:43:8E:CB:75:E1:D5:EB:3E:80:FD:BA:C1:A6:B0:FA:F8:3F:73:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d1:79:90:32:0f:5e:20:f1:a5:6e:ab:71:4f:1e:75:4e:b2:
40:7a:84:fe:2c:f0:e5:2f:8f:d2:77:4d:24:17:1e:58:b8:3a:
8c:12:7b:db:67:ab:e8:8d:e6:dd:90:e8:13:35:e3:13:a0:34:
3b:3e:3d:bb:03:b9:10:1a:fa:0b:c1:15:05:60:ae:a6:a3:a2:
a7:d2:95:01:d1:ba:55:4f:93:35:cf:6c:ef:c4:1e:4b:8c:ca:
51:e2:25:7d:d6:2a:11:cf:0b:0b:3a:78:76:1b:0e:9f:77:6d:
c1:89:00:a0:28:ce:3c:b7:6a:1d:55:10:5f:04:99:ea:85:9e:
b8:c6:fa:9c:be:5e:7a:56:0f:be:a9:b0:62:f0:51:5d:1b:a6:
24:e2:f7:b8:6c:de:de:d9:a5:cd:ce:d7:c7:e9:a9:d4:84:33:
a6:5d:32:a5:ad:73:be:bb:17:eb:79:a9:ba:a8:44:7f:51:51:
61:9f:7a:35:94:ae:7f:cf:ab:19:93:9a:23:ac:aa:4e:6f:cf:
e2:2b:5b:5d:de:e6:7b:78:f4:f4:a6:0d:2f:f3:c8:39:21:07:
7d:f2:b2:21:be:94:4b:5a:da:94:d3:9b:b8:0e:02:dc:43:b1:
f7:ae:a3:bc:cf:df:78:e7:46:4f:38:ab:d9:8a:52:2e:fc:2b:
83:e2:91:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCR2Kax0w3LHPh8b12jfPwoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNDM4ZWNiNzVlMWQ1ZWIzZTgwZmRiYWMxYTZiMGZhZjgz
ZjczZTEwHhcNMjYwOTExMTkwMTI5WhcNMjYwOTEyMTkwMTI5WjAzMTEwLwYDVQQD
EygwYjQ4NDI4MmNhMzIxNGMwODJmNDViZjU0NWNlZTllMzdiNTY4ZDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPwiCyPFENfdiiq2S623hAkZzkN+
rRG5iwcr1jerWct9rHDEG+/V+ZkCVXZVNo9OKBoipHheNUxSb0KizEljQ1xoNdvP
QIh4lIKORuQ+wQTtuv0ZmClNXAUpDgXedS22JBhttQ/1NWWsGA7IqK21KhQhe8av
sqv7N1qSjTGeNkCrqpu2GODgO3HhW1HGOMEvJncTJSOzWP8k85JRBxx8+v128QXF
WncTghkIeH0FR/tuuAJCFFFNxaeRhpPgyCSUjawVSYR9ekHMutCKwsDneFbcq6ea
8+GwGEwYZDJS4+4hNO5/640lS/dxY/wiQiyNEHxrNusAa6FetTLqeNn+MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtIQoLKMhTAgvRb9UXO6eN7Vo0VMB8GA1UdIwQY
MBaAFFNDjst14dXrPoD9usGmsPr4P3PhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTBPT3kzWGgxZXMtZ1AyNndhYXctdmdfYy1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hNzVkYTMtZDgxZS00YmJmLThjYzYt
NDk4NjhkN2NlOWExLzEvVTBPT3kzWGgxZXMtZ1AyNndhYXctdmdfYy1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9hNzVkYTMtZDgxZS00YmJmLThjYzYtNDk4NjhkN2NlOWEx
LzEvVTBPT3kzWGgxZXMtZ1AyNndhYXctdmdfYy1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAENF5kDIP
XiDxpW6rcU8edU6yQHqE/izw5S+P0ndNJBceWLg6jBJ722er6I3m3ZDoEzXjE6A0
Oz49uwO5EBr6C8EVBWCupqOip9KVAdG6VU+TNc9s78QeS4zKUeIlfdYqEc8LCzp4
dhsOn3dtwYkAoCjOPLdqHVUQXwSZ6oWeuMb6nL5eelYPvqmwYvBRXRumJOL3uGze
3tmlzc7Xx+mp1IQzpl0ypa1zvrsX63mpuqhEf1FRYZ96NZSuf8+rGZOaI6yqTm/P
4itbXd7me3j09KYNL/PIOSEHffKyIb6US1ralNObuA4C3EOx966jvM/feOdGTzir
2YpSLvwrg+KRcQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 23:43:38 2026 by rpki-client