Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
File: U8kSoEEbsBdFBwktDKNaka15kFw.mft (raw, json)
Hash identifier: nO7RCetH4ki4ZiJMJ91GsyuM/Eqr7eRZ/GyDyUi2U/o=
Subject key identifier: 0E:B5:49:F1:E5:BC:E0:4E:4A:EB:81:05:DD:FA:D6:03:27:57:C7:E2
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Certificate issuer: /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial: 01A0CFDB5B939EE976F8A4A2EF3BB2646D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
Manifest number: 1A74
Signing time: Wed 23 Sep 2026 20:00:54 +0000
Manifest this update: Wed 23 Sep 2026 20:00:54 +0000
Manifest next update: Thu 24 Sep 2026 20:00:54 +0000
Files and hashes: 1: 92JgNy2UniVvWNA6kvsz4sovFIA.roa (hash: lAqICp0tk9GujbZHx2/6RHqqJpx7oSWIDsAW5NqmUFs=)
2: CRXS8yJabkFe9zngcADmlt5Mjh8.roa (hash: V+gmBDqtYsm9sl2kIiueYpvE2PqUIfwWQ+IMlLrBBzI=)
3: Jgm412TDqz8eqc-jU7VKAy0ZDsw.roa (hash: z/uYXvq2xIRczyrsXkqCGG5d8yfec3+FGNIntpcNWWU=)
4: QbAALDYZ_RGHs07gYUQih_CDJyk.roa (hash: +Uv/ugRA2zDra5XT10jpvOYMi9ZmxhbMWKYPoPRN5bM=)
5: U8kSoEEbsBdFBwktDKNaka15kFw.crl (hash: cdk25S0xTgKR6qbxeyeTr8b/vH/MVzDJYA2hrZzSWII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:5b:93:9e:e9:76:f8:a4:a2:ef:3b:b2:64:6d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
Validity
Not Before: Sep 23 20:00:54 2026 GMT
Not After : Sep 24 20:00:54 2026 GMT
Subject: CN=0eb549f1e5bce04e4aeb8105ddfad6032757c7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f5:6a:5f:21:81:7f:c7:bf:54:ac:8d:a8:7c:
b2:01:22:19:82:10:2b:69:49:9e:61:99:5c:f0:2d:
68:ab:ba:39:4f:cc:04:56:cc:89:3b:76:70:8d:81:
17:08:df:85:48:ab:9d:c7:31:f6:66:50:48:da:5e:
0d:7c:c0:f4:ac:34:db:07:d2:10:65:ab:90:82:7d:
c4:a4:17:49:77:ed:ef:b4:af:ba:a6:13:d3:08:72:
a1:89:8d:14:5e:0e:5d:15:03:dc:8b:e3:6f:72:00:
39:86:15:78:c2:8e:07:66:c0:6f:41:17:d5:c0:49:
2a:3e:c0:c0:65:f8:ba:5a:36:c1:d6:88:34:4e:d7:
64:21:04:df:21:3d:30:cd:ab:30:ed:9b:4c:94:f6:
c8:5a:a9:6c:37:fd:29:62:2a:28:bd:68:32:f0:ae:
18:aa:10:ef:de:96:2b:10:54:ed:51:cf:fb:50:89:
0b:01:95:97:12:f1:14:83:0c:47:ce:95:12:8f:ec:
93:e1:47:5a:35:ca:ca:77:f1:af:e2:40:89:71:98:
42:ea:b9:74:57:0c:5f:e2:f7:9c:45:48:0d:74:56:
55:70:a9:7d:c7:b3:53:ea:87:93:84:06:32:0e:87:
fa:08:ae:39:a3:24:0d:50:d5:ea:ff:3e:f8:95:ef:
d9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B5:49:F1:E5:BC:E0:4E:4A:EB:81:05:DD:FA:D6:03:27:57:C7:E2
X509v3 Authority Key Identifier:
keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c7:c8:a2:6b:c3:2d:91:de:e7:1f:2e:60:78:81:e1:d0:b6:
ae:5e:7f:92:99:4e:9c:ee:04:f3:8c:a9:c6:6d:53:9f:f4:68:
07:2b:f8:35:ab:bf:77:71:45:43:23:c4:9a:75:7e:c0:f3:9b:
1e:68:f4:e4:f1:6f:b8:29:38:52:c8:a8:89:1b:c7:d4:58:03:
1c:c3:df:88:ba:47:c1:1f:4c:8e:e1:c1:91:01:a7:c8:93:94:
3c:61:32:cc:00:a3:dd:c2:5b:1c:ad:85:cc:fd:53:f8:96:2e:
78:61:45:95:58:82:1b:68:7b:aa:0a:b0:08:ba:17:26:db:c0:
61:7f:6f:47:df:45:d8:a7:96:65:55:b3:19:ee:05:96:0f:09:
23:fd:5a:ee:d8:9a:57:56:55:ec:4e:85:4e:c1:40:09:d7:95:
f8:26:70:0f:d1:40:28:3f:c4:e4:be:ef:53:68:82:74:4a:dd:
5d:4a:15:c8:75:6e:3f:ce:05:d3:95:8c:6a:74:55:a6:9b:4c:
14:c2:f5:38:4e:eb:2c:ab:46:b9:12:8e:a2:1e:5e:12:9c:a6:
67:2b:e4:fe:39:a8:f6:19:c4:ac:6a:ea:68:0e:a1:ec:0a:95:
cf:af:09:be:70:e4:2b:44:fd:47:50:2c:ac:e8:fb:21:24:ea:
41:b7:b5:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDP21uTnul2+KSi7zuyZG1nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYzkxMmEwNDExYmIwMTc0NTA3MDkyZDBjYTM1YTkxYWQ3
OTkwNWMwHhcNMjYwOTIzMjAwMDU0WhcNMjYwOTI0MjAwMDU0WjAzMTEwLwYDVQQD
EygwZWI1NDlmMWU1YmNlMDRlNGFlYjgxMDVkZGZhZDYwMzI3NTdjN2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fVqXyGBf8e/VKyNqHyyASIZghAr
aUmeYZlc8C1oq7o5T8wEVsyJO3ZwjYEXCN+FSKudxzH2ZlBI2l4NfMD0rDTbB9IQ
ZauQgn3EpBdJd+3vtK+6phPTCHKhiY0UXg5dFQPci+NvcgA5hhV4wo4HZsBvQRfV
wEkqPsDAZfi6WjbB1og0TtdkIQTfIT0wzasw7ZtMlPbIWqlsN/0pYioovWgy8K4Y
qhDv3pYrEFTtUc/7UIkLAZWXEvEUgwxHzpUSj+yT4UdaNcrKd/Gv4kCJcZhC6rl0
Vwxf4vecRUgNdFZVcKl9x7NT6oeThAYyDof6CK45oyQNUNXq/z74le/Z8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA61SfHlvOBOSuuBBd361gMnV8fiMB8GA1UdIwQY
MBaAFFPJEqBBG7AXRQcJLQyjWpGteZBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVThrU29FRWJzQmRGQndrdERLTmFrYTE1a0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9kNzdlNjAtODkxNi00Zjk2LThlZDAt
ZTIxYzQzNmI2MmVmLzEvVThrU29FRWJzQmRGQndrdERLTmFrYTE1a0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9kNzdlNjAtODkxNi00Zjk2LThlZDAtZTIxYzQzNmI2MmVm
LzEvVThrU29FRWJzQmRGQndrdERLTmFrYTE1a0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsfIomvD
LZHe5x8uYHiB4dC2rl5/kplOnO4E84ypxm1Tn/RoByv4Nau/d3FFQyPEmnV+wPOb
Hmj05PFvuCk4UsioiRvH1FgDHMPfiLpHwR9MjuHBkQGnyJOUPGEyzACj3cJbHK2F
zP1T+JYueGFFlViCG2h7qgqwCLoXJtvAYX9vR99F2KeWZVWzGe4Flg8JI/1a7tia
V1ZV7E6FTsFACdeV+CZwD9FAKD/E5L7vU2iCdErdXUoVyHVuP84F05WManRVpptM
FML1OE7rLKtGuRKOoh5eEpymZyvk/jmo9hnErGrqaA6h7AqVz68JvnDkK0T9R1As
rOj7ISTqQbe1cg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 03:53:52 2026 by rpki-client