Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
File: U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json)
Hash identifier: XlhjO5kh6ro7FLvlCsSgSMxd6zAeJ0l4gHQRyomNsLg=
Subject key identifier: 52:C3:8F:AE:57:0B:30:F0:93:E6:12:0C:59:2B:47:1C:29:A3:AF:9B
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial: 01A17BBB7C77577360B25AF478A2830F7394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
Manifest number: 1182
Signing time: Tue 27 Oct 2026 05:00:46 +0000
Manifest this update: Tue 27 Oct 2026 05:00:46 +0000
Manifest next update: Wed 28 Oct 2026 05:00:46 +0000
Files and hashes: 1: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: G7mh+qGMGLmjotSb/J7mrV7IsPEwH7kzMTl42eZXpk4=)
2: WzohaVzPLEBKuPQD-sbPCaZXcnQ.roa (hash: SIJFdx4blAk5vec/FV7gfH5KB998Y+98D4gZTEETEKk=)
3: nM6XYB2iwgJ17oTR8XmeIg2xI2M.roa (hash: 1o7tQyZeZiqzL+ktcifE7MOOMo51KCeyAAEwmbZDyZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:7c:77:57:73:60:b2:5a:f4:78:a2:83:0f:73:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Validity
Not Before: Oct 27 05:00:46 2026 GMT
Not After : Oct 28 05:00:46 2026 GMT
Subject: CN=52c38fae570b30f093e6120c592b471c29a3af9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:86:56:87:b2:a8:63:d3:35:c7:b7:a3:43:1c:
ba:a7:0e:47:7c:4c:49:f8:9a:58:86:ec:4f:81:be:
27:46:48:1e:e0:36:cf:4c:fc:b5:d3:5c:cf:07:1a:
de:49:af:3d:b7:8f:fc:b4:98:51:5a:2c:2d:18:80:
0e:98:3c:89:c6:3c:57:32:01:7e:27:6e:01:a0:9c:
a5:87:9b:58:00:d3:c4:ea:8d:10:2c:f9:db:4b:60:
69:d1:05:28:ce:02:14:8c:03:c7:21:79:8e:73:0f:
3f:df:aa:54:02:f3:aa:07:26:3c:e2:9d:27:35:e0:
61:f9:fa:3e:4a:9b:84:1a:ea:54:a0:b2:fa:6a:12:
f3:06:60:7f:96:5b:01:5d:de:da:f2:a2:ac:fd:5f:
aa:c6:d9:6e:d4:99:94:8b:64:dc:8c:1f:de:6c:49:
fa:6d:3e:16:10:9c:54:de:e5:70:4d:2f:5a:b7:ec:
07:2c:61:09:d2:be:fe:4b:15:b7:27:3a:c0:bf:b5:
ce:fa:4e:20:35:b1:7a:db:e8:6a:0c:21:2c:53:22:
58:62:e9:5b:6d:df:7b:5a:4f:a0:46:78:29:6c:83:
1c:95:c5:3b:23:b1:f9:2e:1d:12:b3:d4:d8:b4:26:
61:5f:92:ad:f2:5e:22:0d:f3:a9:a2:13:e8:10:15:
a7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C3:8F:AE:57:0B:30:F0:93:E6:12:0C:59:2B:47:1C:29:A3:AF:9B
X509v3 Authority Key Identifier:
keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:10:6f:83:9b:c1:83:5d:85:a5:7a:d2:ec:1c:57:10:9d:da:
1f:8b:28:ca:b8:ec:d6:a1:11:98:57:c0:b3:16:60:0b:11:18:
20:54:3f:93:0d:91:6f:04:11:fa:18:45:8a:1c:1a:4a:0e:ac:
73:af:c8:90:3c:99:f0:65:2a:ae:fe:42:79:32:d8:e6:7a:f5:
22:9a:b7:82:c8:b1:a7:7d:fc:59:c3:25:00:b7:82:d1:bf:4e:
bb:9d:a8:49:c5:61:1e:4c:bb:13:78:2b:e9:37:76:e4:8c:2f:
ea:92:84:e4:67:32:df:9b:8e:df:91:88:dc:ce:a6:a3:81:c0:
dd:59:63:77:02:aa:2a:f2:f0:e0:44:e0:ee:20:0a:34:64:05:
ca:7a:1d:6c:53:67:cb:45:c5:dc:eb:e2:37:81:cc:30:a9:55:
94:c4:9e:a2:90:b6:43:38:30:89:fb:c7:6a:2d:76:c6:25:5d:
e4:ea:94:23:68:09:36:05:bb:09:c0:a5:68:2f:8c:3c:21:c7:
ad:80:e4:21:3a:1c:22:dd:e5:44:23:8e:da:d4:5d:d0:55:0a:
b1:b5:18:9d:02:a4:b3:6c:eb:1b:bf:24:f2:64:07:db:48:2a:
7f:eb:1c:cf:67:e2:59:f8:8b:84:1e:07:a1:69:ed:bd:8a:87:
84:30:e2:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7u3x3V3Ngslr0eKKDD3OUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzOTNhYjkzZTg1NzAxYTczZWY0ZDVlMDBlZDZlYjk4OTM5
MzczOTQwHhcNMjYxMDI3MDUwMDQ2WhcNMjYxMDI4MDUwMDQ2WjAzMTEwLwYDVQQD
Eyg1MmMzOGZhZTU3MGIzMGYwOTNlNjEyMGM1OTJiNDcxYzI5YTNhZjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IZWh7KoY9M1x7ejQxy6pw5HfExJ
+JpYhuxPgb4nRkge4DbPTPy101zPBxreSa89t4/8tJhRWiwtGIAOmDyJxjxXMgF+
J24BoJylh5tYANPE6o0QLPnbS2Bp0QUozgIUjAPHIXmOcw8/36pUAvOqByY84p0n
NeBh+fo+SpuEGupUoLL6ahLzBmB/llsBXd7a8qKs/V+qxtlu1JmUi2TcjB/ebEn6
bT4WEJxU3uVwTS9at+wHLGEJ0r7+SxW3JzrAv7XO+k4gNbF62+hqDCEsUyJYYulb
bd97Wk+gRngpbIMclcU7I7H5Lh0Ss9TYtCZhX5Kt8l4iDfOpohPoEBWnwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLDj65XCzDwk+YSDFkrRxwpo6+bMB8GA1UdIwQY
MBaAFFOTq5PoVwGnPvTV4A7W65iTk3OUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hZDc2NjItNzNmZi00NTk0LThlMzAt
NTlhN2VmZDM4NGMwLzEvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hZDc2NjItNzNmZi00NTk0LThlMzAtNTlhN2VmZDM4NGMw
LzEvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKxBvg5vB
g12FpXrS7BxXEJ3aH4soyrjs1qERmFfAsxZgCxEYIFQ/kw2RbwQR+hhFihwaSg6s
c6/IkDyZ8GUqrv5CeTLY5nr1Ipq3gsixp338WcMlALeC0b9Ou52oScVhHky7E3gr
6Td25Iwv6pKE5Gcy35uO35GI3M6mo4HA3VljdwKqKvLw4ETg7iAKNGQFynodbFNn
y0XF3OviN4HMMKlVlMSeopC2QzgwifvHai12xiVd5OqUI2gJNgW7CcClaC+MPCHH
rYDkITocIt3lRCOO2tRd0FUKsbUYnQKks2zrG78k8mQH20gqf+scz2fiWfiLhB4H
oWntvYqHhDDi0w==
-----END CERTIFICATE-----
Generated at Tue Oct 27 09:22:34 2026 by rpki-client