Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
File: U43RixaS2KPncS0-a5KLCaoK5mw.mft (raw, json)
Hash identifier: VGs2EJDUXQ2dd+cNYOgt5w4GMW7muI6fE+re522R4YI=
Subject key identifier: 6D:60:4A:10:74:3D:9D:CC:19:75:47:97:3F:38:2E:5A:D6:0B:32:61
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 01A0D493EF77BF380B84EC36AC8A9C03CBD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
Manifest number: 0551
Signing time: Thu 24 Sep 2026 18:00:59 +0000
Manifest this update: Thu 24 Sep 2026 18:00:59 +0000
Manifest next update: Fri 25 Sep 2026 18:00:59 +0000
Files and hashes: 1: 49wISrZvaWfJmuYUokxBAxCFFnA.roa (hash: fVyYSxQVcSLUIxvGvzkQ4MbdrWMkDcckbPhROtPlP1s=)
2: 4WR_Mj6nx1ODkLhX1tY_XNAYQjg.roa (hash: 6XqeQOi1pXrk/dziPTISnp18OefE2r1v8i2TFX/+jLk=)
3: U43RixaS2KPncS0-a5KLCaoK5mw.crl (hash: gxwh5eEwOY6kC65ynTRDt3pbvKo4+9Y5cCiKfN043Y8=)
4: mIf68_1ah6Ep2uSoyoqrenQSyFw.roa (hash: MYjTP5cIg1pggDvKU1AdgEyEZDmjeJWvuFdi59Buspg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:93:ef:77:bf:38:0b:84:ec:36:ac:8a:9c:03:cb:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: Sep 24 18:00:59 2026 GMT
Not After : Sep 25 18:00:59 2026 GMT
Subject: CN=6d604a10743d9dcc197547973f382e5ad60b3261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6f:38:4f:1f:90:c5:07:d4:db:1f:25:0d:e3:
9c:d6:fc:ba:d9:1c:d3:a6:5f:be:07:da:78:45:d1:
3c:c0:f8:62:fc:be:6c:73:38:06:1a:ab:0e:8f:e0:
11:2d:84:29:0f:f1:f5:9c:62:9e:79:64:04:3c:af:
11:29:b4:76:db:c8:c2:31:a0:42:97:c8:f9:08:16:
77:1f:73:11:e1:f6:1a:05:b7:00:40:95:1d:d5:43:
3a:c4:31:fa:4a:2a:83:e5:ec:59:e4:42:81:31:22:
93:14:3f:56:5a:9b:e2:f4:85:dd:7f:40:51:e6:d5:
08:de:25:71:94:1f:6d:fc:01:95:c7:a2:b6:f4:70:
b3:68:cf:3f:72:27:53:e7:f5:56:cb:a0:f4:e4:ad:
e7:ec:27:9b:56:f7:c8:7d:2d:ed:40:fc:02:20:a9:
40:56:2b:df:d8:40:50:0f:ad:ac:16:c4:d5:50:41:
b7:3b:55:44:26:0e:37:b3:4f:c4:7d:a9:9b:13:64:
bf:16:c3:40:60:09:9a:d0:07:d9:f1:0e:81:9e:8c:
0d:80:b5:88:cc:75:d0:17:55:d8:7c:04:7a:a3:03:
bd:ea:a0:66:97:01:1d:7b:ed:1d:16:4d:fd:cb:96:
cd:44:a1:94:aa:7c:aa:16:7a:a5:c8:89:f5:b2:eb:
43:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:60:4A:10:74:3D:9D:CC:19:75:47:97:3F:38:2E:5A:D6:0B:32:61
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:57:ac:be:ef:4b:22:c3:be:cf:62:e6:1f:74:7b:e8:f6:43:
67:6a:2a:47:be:ed:90:eb:11:25:4b:46:50:26:ae:97:04:91:
bb:83:df:2a:db:94:89:6f:48:87:6e:83:8c:5d:c5:e6:26:10:
3f:60:84:1c:ba:30:23:a5:6a:57:0b:35:9f:3c:a2:7b:84:de:
53:a7:a2:49:f6:c8:60:66:0a:f2:4d:72:4f:9f:17:f7:e6:94:
db:01:a0:4a:ca:32:9b:bc:73:73:e7:0b:37:68:89:eb:6f:8b:
87:03:aa:77:33:2c:3b:d1:05:d2:b7:c6:96:92:b5:e2:1f:b3:
b2:92:23:95:d2:6c:4d:33:21:85:70:7b:c5:d1:b5:2e:5d:4b:
36:47:ed:30:d8:41:26:17:73:d9:64:08:f2:46:fd:ca:d1:b4:
c4:3e:61:3d:a9:32:da:9b:20:f9:b7:42:f2:f1:7d:c0:9b:4b:
37:c8:5b:e3:0e:d3:d1:ec:eb:3c:0f:ff:d4:98:2a:12:bc:1e:
86:33:d9:95:4f:e3:61:2f:cd:83:47:45:cc:36:4a:99:a2:1d:
fd:24:03:ca:ce:35:d2:55:c0:1a:50:fe:e6:cc:90:6a:bb:a8:
54:c1:28:1e:39:00:df:45:d5:9a:1c:08:48:98:be:37:9a:3f:
47:1c:13:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUk+93vzgLhOw2rIqcA8vQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzOGRkMThiMTY5MmQ4YTNlNzcxMmQzZTZiOTI4YjA5YWEw
YWU2NmMwHhcNMjYwOTI0MTgwMDU5WhcNMjYwOTI1MTgwMDU5WjAzMTEwLwYDVQQD
Eyg2ZDYwNGExMDc0M2Q5ZGNjMTk3NTQ3OTczZjM4MmU1YWQ2MGIzMjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5m84Tx+QxQfU2x8lDeOc1vy62RzT
pl++B9p4RdE8wPhi/L5sczgGGqsOj+ARLYQpD/H1nGKeeWQEPK8RKbR228jCMaBC
l8j5CBZ3H3MR4fYaBbcAQJUd1UM6xDH6SiqD5exZ5EKBMSKTFD9WWpvi9IXdf0BR
5tUI3iVxlB9t/AGVx6K29HCzaM8/cidT5/VWy6D05K3n7CebVvfIfS3tQPwCIKlA
Vivf2EBQD62sFsTVUEG3O1VEJg43s0/EfambE2S/FsNAYAma0AfZ8Q6BnowNgLWI
zHXQF1XYfAR6owO96qBmlwEde+0dFk39y5bNRKGUqnyqFnqlyIn1sutDewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1gShB0PZ3MGXVHlz84LlrWCzJhMB8GA1UdIwQY
MBaAFFON0YsWktij53EtPmuSiwmqCuZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTQzUml4YVMyS1BuY1MwLWE1S0xDYW9LNW13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85Y2IwZTktNTM3ZC00ZjZlLWI5OGUt
MmViNzBhMzYwMmU5LzEvVTQzUml4YVMyS1BuY1MwLWE1S0xDYW9LNW13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85Y2IwZTktNTM3ZC00ZjZlLWI5OGUtMmViNzBhMzYwMmU5
LzEvVTQzUml4YVMyS1BuY1MwLWE1S0xDYW9LNW13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFesvu9L
IsO+z2LmH3R76PZDZ2oqR77tkOsRJUtGUCaulwSRu4PfKtuUiW9Ih26DjF3F5iYQ
P2CEHLowI6VqVws1nzyie4TeU6eiSfbIYGYK8k1yT58X9+aU2wGgSsoym7xzc+cL
N2iJ62+LhwOqdzMsO9EF0rfGlpK14h+zspIjldJsTTMhhXB7xdG1Ll1LNkftMNhB
Jhdz2WQI8kb9ytG0xD5hPaky2psg+bdC8vF9wJtLN8hb4w7T0ezrPA//1JgqErwe
hjPZlU/jYS/Ng0dFzDZKmaId/SQDys410lXAGlD+5syQaruoVMEoHjkA30XVmhwI
SJi+N5o/RxwTRQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 01:06:38 2026 by rpki-client