Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
File: Ul0cSVWy778Anp5Bsecupt_4JLM.mft (raw, json)
Hash identifier: dspRsBgS1qgaboNshXn6qISkg6k31p7hkZf/U9H2yTw=
Subject key identifier: 17:AE:DF:63:6C:1A:0D:29:E1:62:08:95:CE:E2:31:C4:A6:F7:48:97
Authority key identifier: 52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
Certificate issuer: /CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Certificate serial: 01A08D8D1636460C6F79CEC9015515E1E606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
Manifest number: 0BDB
Signing time: Thu 10 Sep 2026 23:00:28 +0000
Manifest this update: Thu 10 Sep 2026 23:00:28 +0000
Manifest next update: Fri 11 Sep 2026 23:00:28 +0000
Files and hashes: 1: Efm2bGrofvD9TKo6fR0hCwXyZZY.roa (hash: 8/kSaahEbvJMwKWK7IV2ZU7p4mFsDitwaZrJNwqZgFY=)
2: NDmwsiusftzbyMWBTWDJVW16t3w.roa (hash: vo2FWAXvXazwyLT6897L+Sclc/TCo4ut41EBl8NTSUY=)
3: Ul0cSVWy778Anp5Bsecupt_4JLM.crl (hash: 9cE0lKail2KchF7AgyWPyRc3qsbc/zr37FYO/pXrcAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:16:36:46:0c:6f:79:ce:c9:01:55:15:e1:e6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Validity
Not Before: Sep 10 23:00:28 2026 GMT
Not After : Sep 11 23:00:28 2026 GMT
Subject: CN=17aedf636c1a0d29e1620895cee231c4a6f74897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:23:05:89:5b:77:05:7d:e2:03:d0:2e:34:b4:
52:e7:28:9d:df:0e:41:71:85:85:c2:40:dd:16:cf:
71:0f:49:9b:44:0b:fb:f2:5b:b5:53:70:3a:40:db:
fb:8b:50:7b:9a:a2:cc:3e:a3:9d:36:c3:8a:6f:23:
fe:8d:46:24:71:0c:86:a9:41:78:10:1e:02:a1:be:
a8:d0:d0:b4:16:77:94:35:ab:7f:05:e1:1a:66:c4:
b3:3f:96:94:00:6e:ac:c5:e3:e7:d9:76:0c:35:f5:
38:ae:26:14:26:a4:63:c9:0d:77:0a:79:9d:c5:38:
4e:0e:fd:dc:bd:a1:75:cb:bd:75:89:5f:0b:2e:17:
34:79:04:86:0d:c6:13:62:be:61:d6:1c:4b:17:f0:
57:84:8d:a9:ca:5a:c6:bf:38:55:0c:07:58:45:61:
72:f2:c2:a4:eb:6e:d4:b5:b4:2e:5e:f1:8c:d2:23:
74:af:4f:c9:f7:87:4c:c1:db:2d:da:eb:ff:0f:81:
a0:57:c3:7b:40:f6:f8:f1:b5:06:fe:ab:3f:56:33:
75:df:3d:33:d7:5c:85:b9:4f:2c:90:15:0e:f9:7e:
31:d8:ce:41:b5:11:be:b1:73:d5:6b:89:8f:84:6b:
ba:ec:72:f3:73:ba:b2:df:09:d2:d2:27:5e:81:01:
3f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AE:DF:63:6C:1A:0D:29:E1:62:08:95:CE:E2:31:C4:A6:F7:48:97
X509v3 Authority Key Identifier:
keyid:52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:f0:25:c8:63:f4:af:e0:9e:1b:b9:3d:f8:9d:ba:a4:2c:53:
db:d3:a1:2a:16:f1:8e:c2:0e:e2:29:5f:3d:2c:0e:9c:ee:bc:
be:e4:c2:ce:80:c9:48:7f:a8:7f:72:b0:b2:72:4e:0d:69:2d:
99:ef:81:0c:64:53:03:3e:28:b2:b2:b9:05:a0:5b:6b:e5:b7:
01:ec:86:d6:ae:be:1d:04:d7:7e:63:6d:d4:11:4c:9f:04:df:
e5:1b:83:d3:29:1c:49:77:e7:8c:c6:90:75:8e:7d:62:d2:0e:
32:65:a3:10:33:61:76:ff:89:c8:52:70:63:e1:ba:53:27:9b:
6f:e2:0b:27:ff:37:df:43:9f:60:3b:e7:14:b3:23:85:6f:3d:
b4:b4:8e:ff:42:1a:8b:79:f5:55:65:b3:19:9a:9e:b6:70:19:
d0:cb:f5:fd:39:c4:80:34:0f:36:70:b9:11:46:be:a3:f5:36:
ec:2c:9f:f6:1c:4b:b4:44:2e:8e:2b:65:2e:c6:fe:0a:e8:28:
09:58:da:e0:4c:e0:a2:56:9a:45:95:c4:0b:a7:a2:68:e1:c3:
97:03:a3:c7:ca:2d:b4:e9:7e:fb:15:b3:77:51:23:e0:64:20:
8b:8d:f0:88:20:89:73:e1:2d:f0:6c:3e:f8:3e:65:c0:10:42:
67:97:b1:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCNjRY2Rgxvec7JAVUV4eYGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNWQxYzQ5NTViMmVmYmYwMDllOWU0MWIxZTcyZWE2ZGZm
ODI0YjMwHhcNMjYwOTEwMjMwMDI4WhcNMjYwOTExMjMwMDI4WjAzMTEwLwYDVQQD
EygxN2FlZGY2MzZjMWEwZDI5ZTE2MjA4OTVjZWUyMzFjNGE2Zjc0ODk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyMFiVt3BX3iA9AuNLRS5yid3w5B
cYWFwkDdFs9xD0mbRAv78lu1U3A6QNv7i1B7mqLMPqOdNsOKbyP+jUYkcQyGqUF4
EB4Cob6o0NC0FneUNat/BeEaZsSzP5aUAG6sxePn2XYMNfU4riYUJqRjyQ13Cnmd
xThODv3cvaF1y711iV8LLhc0eQSGDcYTYr5h1hxLF/BXhI2pylrGvzhVDAdYRWFy
8sKk627UtbQuXvGM0iN0r0/J94dMwdst2uv/D4GgV8N7QPb48bUG/qs/VjN13z0z
11yFuU8skBUO+X4x2M5BtRG+sXPVa4mPhGu67HLzc7qy3wnS0idegQE/uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBeu32NsGg0p4WIIlc7iMcSm90iXMB8GA1UdIwQY
MBaAFFJdHElVsu+/AJ6eQbHnLqbf+CSzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWwwY1NWV3k3NzhBbnA1QnNlY3VwdF80SkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84MTk1YjMtYzQ3NS00Y2E0LWI0MmQt
NjYyN2E0ZWI1OTYzLzEvVWwwY1NWV3k3NzhBbnA1QnNlY3VwdF80SkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi84MTk1YjMtYzQ3NS00Y2E0LWI0MmQtNjYyN2E0ZWI1OTYz
LzEvVWwwY1NWV3k3NzhBbnA1QnNlY3VwdF80SkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvfAlyGP0
r+CeG7k9+J26pCxT29OhKhbxjsIO4ilfPSwOnO68vuTCzoDJSH+of3KwsnJODWkt
me+BDGRTAz4osrK5BaBba+W3AeyG1q6+HQTXfmNt1BFMnwTf5RuD0ykcSXfnjMaQ
dY59YtIOMmWjEDNhdv+JyFJwY+G6Uyebb+ILJ/8330OfYDvnFLMjhW89tLSO/0Ia
i3n1VWWzGZqetnAZ0Mv1/TnEgDQPNnC5EUa+o/U27Cyf9hxLtEQujitlLsb+Cugo
CVja4EzgolaaRZXEC6eiaOHDlwOjx8ottOl++xWzd1Ej4GQgi43wiCCJc+Et8Gw+
+D5lwBBCZ5exrw==
-----END CERTIFICATE-----
Generated at Fri Sep 11 05:06:19 2026 by rpki-client