Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
File: U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft (raw, json)
Hash identifier: F2Qpts3U8J2ypkMPaCOZfmw0pEg/0ZpgSg2pDSZouP8=
Subject key identifier: 8D:FC:E7:7D:70:2A:1C:4E:3B:95:DF:34:8A:5D:B6:48:CD:D5:80:7A
Authority key identifier: 53:49:C2:D0:0B:A4:6B:E9:24:4B:76:19:4B:AA:10:F3:3C:E3:46:2C
Certificate issuer: /CN=5349c2d00ba46be9244b76194baa10f33ce3462c
Certificate serial: 019F92B5E8A980A870F0A80416058E9F7AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
Manifest number: 0A54
Signing time: Fri 24 Jul 2026 06:00:22 +0000
Manifest this update: Fri 24 Jul 2026 06:00:22 +0000
Manifest next update: Sat 25 Jul 2026 06:00:22 +0000
Files and hashes: 1: U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl (hash: k9VBMvf6WAf4M7VwW5dYVsMPR6E+FQWR0BGv0d5ziHQ=)
2: XcRX1RAJL4NGdzyun1ejeZqAF24.roa (hash: YNAZegeHiWzquonxoxjxpFIiVyp3kn/I+1eygwpZVIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:e8:a9:80:a8:70:f0:a8:04:16:05:8e:9f:7a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5349c2d00ba46be9244b76194baa10f33ce3462c
Validity
Not Before: Jul 24 06:00:22 2026 GMT
Not After : Jul 25 06:00:22 2026 GMT
Subject: CN=8dfce77d702a1c4e3b95df348a5db648cdd5807a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d9:4a:54:b4:de:e8:4a:ae:17:a2:af:70:ce:
e3:73:22:62:20:29:5c:3b:82:a6:50:7a:4e:53:d9:
79:19:d4:21:78:46:86:f8:3e:a6:64:45:9f:cb:20:
d6:20:cd:66:5d:92:67:3a:47:3b:f9:90:22:3b:86:
ae:03:b5:52:9b:30:24:d1:ca:7b:31:b4:25:98:02:
51:4f:2e:3d:ee:87:9d:67:35:94:03:79:c3:93:8c:
76:22:47:c1:89:89:eb:07:e3:05:b1:e2:c8:9a:98:
79:3c:3d:c7:94:2a:bf:32:69:30:74:13:41:75:77:
e7:5c:0d:4c:59:48:22:f8:b8:a4:16:78:ab:12:24:
4e:04:84:5a:66:f0:44:ca:ea:04:c4:99:36:f5:b9:
cb:bb:be:3d:c9:83:8d:f5:a0:3c:41:1b:47:7d:14:
c7:95:04:8d:31:a4:bd:8b:c7:3e:19:37:20:9c:3a:
a9:03:72:75:b7:b4:cc:7e:bd:72:2e:11:19:c2:23:
c8:2c:60:79:65:9b:1c:c7:c4:5b:db:cd:06:64:0c:
82:90:15:10:43:28:43:01:03:39:2e:41:b1:ad:78:
8c:f9:f5:e5:66:74:5b:02:eb:4c:6c:cf:5b:09:bc:
bd:80:28:94:c5:99:12:9d:14:c9:ce:55:d0:65:24:
5a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FC:E7:7D:70:2A:1C:4E:3B:95:DF:34:8A:5D:B6:48:CD:D5:80:7A
X509v3 Authority Key Identifier:
keyid:53:49:C2:D0:0B:A4:6B:E9:24:4B:76:19:4B:AA:10:F3:3C:E3:46:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4c:f1:e8:3e:9b:02:52:1d:7a:d3:7a:57:25:e8:fa:07:bf:
ac:26:5b:20:8b:39:04:72:e1:9a:ac:41:eb:a3:33:2a:88:2c:
71:dc:e0:6b:f3:ee:6b:7b:6c:9d:18:ad:82:40:ad:8e:fe:05:
b2:5c:87:5b:29:ba:4b:75:76:5c:5e:9e:98:e2:43:dc:56:69:
81:ac:0e:05:16:ed:e1:4b:fa:0f:1e:91:8a:06:a5:a7:9a:63:
62:4c:7c:b0:38:fd:a8:d5:2a:e0:c8:45:3e:0c:ab:94:1e:71:
47:65:86:2b:dc:01:3e:97:54:f7:95:20:74:aa:6c:de:a5:98:
f5:f2:7a:f6:22:74:43:27:b3:2e:72:00:ad:7b:03:25:4b:f5:
bf:a3:89:b4:40:88:93:07:e5:56:75:b9:3d:c8:67:94:b2:e1:
6c:ae:29:09:8b:0c:22:8b:14:f4:7e:4b:5a:21:43:68:51:9f:
fe:b3:69:42:eb:76:6b:a0:6d:fc:32:a7:15:4e:de:23:3d:0b:
ba:97:cb:84:e1:90:d4:3b:ef:a8:dd:2c:dd:b7:51:97:be:8f:
c2:e3:48:35:0d:14:b3:5d:57:8b:95:aa:38:e9:32:31:8c:9d:
15:56:18:ea:f4:f0:13:3d:4b:8d:8e:2d:79:8a:e7:08:af:b8:
bd:b9:0a:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SteipgKhw8KgEFgWOn3qgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNDljMmQwMGJhNDZiZTkyNDRiNzYxOTRiYWExMGYzM2Nl
MzQ2MmMwHhcNMjYwNzI0MDYwMDIyWhcNMjYwNzI1MDYwMDIyWjAzMTEwLwYDVQQD
Eyg4ZGZjZTc3ZDcwMmExYzRlM2I5NWRmMzQ4YTVkYjY0OGNkZDU4MDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNlKVLTe6EquF6KvcM7jcyJiIClc
O4KmUHpOU9l5GdQheEaG+D6mZEWfyyDWIM1mXZJnOkc7+ZAiO4auA7VSmzAk0cp7
MbQlmAJRTy497oedZzWUA3nDk4x2IkfBiYnrB+MFseLImph5PD3HlCq/MmkwdBNB
dXfnXA1MWUgi+LikFnirEiROBIRaZvBEyuoExJk29bnLu749yYON9aA8QRtHfRTH
lQSNMaS9i8c+GTcgnDqpA3J1t7TMfr1yLhEZwiPILGB5ZZscx8Rb280GZAyCkBUQ
QyhDAQM5LkGxrXiM+fXlZnRbAutMbM9bCby9gCiUxZkSnRTJzlXQZSRaXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI38531wKhxOO5XfNIpdtkjN1YB6MB8GA1UdIwQY
MBaAFFNJwtALpGvpJEt2GUuqEPM840YsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTBuQzBBdWthLWtrUzNZWlM2b1E4enpqUml3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mOGFlNDctMGVkNC00NjgxLTljMTIt
ZmExMjYwODUwNzA5LzEvVTBuQzBBdWthLWtrUzNZWlM2b1E4enpqUml3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mOGFlNDctMGVkNC00NjgxLTljMTItZmExMjYwODUwNzA5
LzEvVTBuQzBBdWthLWtrUzNZWlM2b1E4enpqUml3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEzx6D6b
AlIdetN6VyXo+ge/rCZbIIs5BHLhmqxB66MzKogscdzga/Pua3tsnRitgkCtjv4F
slyHWym6S3V2XF6emOJD3FZpgawOBRbt4Uv6Dx6Rigalp5pjYkx8sDj9qNUq4MhF
PgyrlB5xR2WGK9wBPpdU95UgdKps3qWY9fJ69iJ0QyezLnIArXsDJUv1v6OJtECI
kwflVnW5PchnlLLhbK4pCYsMIosU9H5LWiFDaFGf/rNpQut2a6Bt/DKnFU7eIz0L
upfLhOGQ1DvvqN0s3bdRl76PwuNINQ0Us11Xi5WqOOkyMYydFVYY6vTwEz1LjY4t
eYrnCK+4vbkKeQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:42:34 2026 by rpki-client