Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
File: U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json)
Hash identifier: GRwk2zaT+TNNwnRC2xRgrf31ojWKNQbSKKH5nyBvIBc=
Subject key identifier: 57:E2:5B:68:67:34:92:BC:7E:35:A4:65:EB:84:6E:3A:09:6E:D6:D5
Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Certificate serial: 019EB80EB06CEEDEB59699EC4D713C5B2B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
Manifest number: 063A
Signing time: Thu 11 Jun 2026 19:00:30 +0000
Manifest this update: Thu 11 Jun 2026 19:00:30 +0000
Manifest next update: Fri 12 Jun 2026 19:00:30 +0000
Files and hashes: 1: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: QQWAr79N4y/xOQ3c4rHm8iE4Bkt+X0yJdYi+Xo2Y7uw=)
2: mVapMmHRdrNnHP7qEe61fUd9MJ4.roa (hash: 7gjqh37t5TbJMLovzwK7uE6PbR35tPIiZgeHv6oUC54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:b0:6c:ee:de:b5:96:99:ec:4d:71:3c:5b:2b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Validity
Not Before: Jun 11 19:00:30 2026 GMT
Not After : Jun 12 19:00:30 2026 GMT
Subject: CN=57e25b68673492bc7e35a465eb846e3a096ed6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:73:ab:02:04:f8:9d:41:76:96:f8:01:49:4d:
f0:44:d9:b6:b3:26:e8:f9:92:ca:11:7b:68:a2:90:
94:08:31:bc:eb:4c:29:d1:49:4b:3d:03:a3:a6:a6:
f8:d5:82:8d:69:d9:cb:55:92:8e:da:f0:87:c9:e1:
cc:e1:bf:61:16:e8:81:e5:2c:ce:59:5b:7c:0c:4e:
77:81:6b:8a:da:1b:84:34:61:a6:f3:4e:02:0d:3c:
a1:0b:07:14:f5:a2:03:18:4f:7e:2b:26:ad:9c:82:
b3:19:74:b5:7c:c6:9c:2b:bf:9a:2a:54:73:10:70:
c5:c4:c8:d6:5a:fc:45:d9:d7:17:38:e4:15:f9:8f:
46:eb:c0:db:56:a1:12:8d:f7:2a:28:5e:d8:3e:af:
18:0c:40:79:34:d4:ff:20:33:7f:8a:c5:76:72:51:
da:8a:49:02:0e:54:df:ac:d3:df:92:5c:61:b3:d1:
2f:b7:3e:27:4e:df:42:1c:4b:ef:9c:6c:51:fa:82:
76:67:4c:12:f0:2d:05:0f:87:77:87:e2:8e:53:9b:
ae:73:2c:a0:ad:12:aa:97:5f:51:d1:85:3b:52:a9:
08:2e:72:cd:93:19:d8:d5:d6:cd:b2:29:a6:e4:09:
6e:15:e8:fd:42:aa:bf:da:16:9c:c1:1b:88:e0:ee:
7d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E2:5B:68:67:34:92:BC:7E:35:A4:65:EB:84:6E:3A:09:6E:D6:D5
X509v3 Authority Key Identifier:
keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c3:cd:58:cf:a8:39:0a:1d:76:24:8c:dd:7f:ed:d6:93:58:
bb:b9:84:b0:d3:6a:3e:c1:19:0c:c7:09:e5:b6:36:47:34:55:
c2:e5:f3:8a:35:1a:aa:32:1c:16:b2:c1:1b:5a:9e:05:ab:01:
8c:ad:2e:d2:fd:d5:c2:f7:36:91:54:99:e8:16:45:dd:cf:f1:
af:2f:a2:ef:7d:dd:42:88:8e:bd:c7:3e:df:b4:39:33:c1:a0:
f0:e9:80:82:20:db:a7:18:45:6c:71:d5:3b:b6:33:0d:88:a2:
6a:49:14:68:d3:df:e1:ea:dc:ea:c9:5a:07:ec:4b:e1:a9:07:
d3:57:38:05:e0:79:ac:40:fd:9f:57:c9:69:d8:56:95:73:4c:
22:69:f3:18:0e:20:57:a8:e1:06:bb:77:cd:10:ec:54:a3:65:
75:c5:42:4b:cc:d1:78:d8:ea:aa:8d:ca:ac:67:ed:1a:37:08:
03:5c:68:14:af:b2:ea:58:1a:ec:e7:a6:59:e6:ae:d2:8b:9c:
ba:05:e5:b7:8b:b4:b5:2d:9b:f9:1a:3b:ea:64:20:dd:7e:6c:
ff:73:9e:1e:30:9e:1d:3f:80:20:87:03:de:51:a5:7e:4e:8c:
20:64:ac:3e:3a:1a:e5:db:db:d6:7f:48:51:52:3c:67:73:07:
91:97:59:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64DrBs7t61lpnsTXE8WyuDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzOThlYzNjMTViMTRmZDhhZDkxM2NiYjk1NjU3ZDhlYTgy
ZTdlMjUwHhcNMjYwNjExMTkwMDMwWhcNMjYwNjEyMTkwMDMwWjAzMTEwLwYDVQQD
Eyg1N2UyNWI2ODY3MzQ5MmJjN2UzNWE0NjVlYjg0NmUzYTA5NmVkNmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3OrAgT4nUF2lvgBSU3wRNm2sybo
+ZLKEXtoopCUCDG860wp0UlLPQOjpqb41YKNadnLVZKO2vCHyeHM4b9hFuiB5SzO
WVt8DE53gWuK2huENGGm804CDTyhCwcU9aIDGE9+KyatnIKzGXS1fMacK7+aKlRz
EHDFxMjWWvxF2dcXOOQV+Y9G68DbVqESjfcqKF7YPq8YDEB5NNT/IDN/isV2clHa
ikkCDlTfrNPfklxhs9Evtz4nTt9CHEvvnGxR+oJ2Z0wS8C0FD4d3h+KOU5uucyyg
rRKql19R0YU7UqkILnLNkxnY1dbNsimm5AluFej9Qqq/2hacwRuI4O59ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfiW2hnNJK8fjWkZeuEbjoJbtbVMB8GA1UdIwQY
MBaAFFOY7DwVsU/YrZE8u5VlfY6oLn4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84OGU4ZjQtNzRhZi00YjcyLWJlY2Mt
ZjU3NjczODE2N2UxLzEvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi84OGU4ZjQtNzRhZi00YjcyLWJlY2MtZjU3NjczODE2N2Ux
LzEvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8PNWM+o
OQoddiSM3X/t1pNYu7mEsNNqPsEZDMcJ5bY2RzRVwuXzijUaqjIcFrLBG1qeBasB
jK0u0v3Vwvc2kVSZ6BZF3c/xry+i733dQoiOvcc+37Q5M8Gg8OmAgiDbpxhFbHHV
O7YzDYiiakkUaNPf4erc6slaB+xL4akH01c4BeB5rED9n1fJadhWlXNMImnzGA4g
V6jhBrt3zRDsVKNldcVCS8zReNjqqo3KrGftGjcIA1xoFK+y6lga7OemWeau0ouc
ugXlt4u0tS2b+Ro76mQg3X5s/3OeHjCeHT+AIIcD3lGlfk6MIGSsPjoa5dvb1n9I
UVI8Z3MHkZdZFg==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:14 2026 by rpki-client