Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
File: UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft (raw, json)
Hash identifier: 0NEnxTx8S3qb4UlwVTEW3JwMNWZZe2nfxFBpRFI15CY=
Subject key identifier: 29:04:FD:07:D3:DF:CE:B7:6A:EC:19:3B:C1:3F:42:D4:34:2A:25:49
Authority key identifier: 50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
Certificate issuer: /CN=507e582adc9369da8ae85dd935740123081c7eed
Certificate serial: 01A0D8DF26F8B05A44F9F9FDD99D0530A326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
Manifest number: 0D2A
Signing time: Fri 25 Sep 2026 14:01:38 +0000
Manifest this update: Fri 25 Sep 2026 14:01:38 +0000
Manifest next update: Sat 26 Sep 2026 14:01:38 +0000
Files and hashes: 1: UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl (hash: +rTQj6wRgjdVFySG7AA4NoGfXC4l6Tf7l9XBZZRIuyA=)
2: oMiHSOY4UpwwpdYJ-YwzlBrerYo.roa (hash: 4HJuj+rF75MFgy3hHG2f3m8rThIv9PhuU60sXijKG80=)
3: vwvW1Ad1jPnRXRdjbJDp97AR8iQ.roa (hash: rHp1bLQ38wfktmQvruIWIEUStakR7R1FCh+zLkjl1H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:26:f8:b0:5a:44:f9:f9:fd:d9:9d:05:30:a3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=507e582adc9369da8ae85dd935740123081c7eed
Validity
Not Before: Sep 25 14:01:38 2026 GMT
Not After : Sep 26 14:01:38 2026 GMT
Subject: CN=2904fd07d3dfceb76aec193bc13f42d4342a2549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b6:53:20:e4:17:92:07:65:99:eb:ab:e6:23:
4f:4a:bc:47:07:9c:87:57:6d:c6:42:ae:5e:c3:a9:
78:47:24:24:8a:9a:c9:69:77:05:a2:90:86:43:9e:
86:c2:61:3c:1f:eb:c0:f5:aa:30:bc:ff:00:88:33:
02:27:27:6b:e2:ba:74:e6:11:b0:79:1e:8c:b0:26:
23:4b:04:b4:d7:da:0e:32:36:62:97:36:f7:3d:42:
ce:3a:d2:1a:23:1c:46:45:14:44:74:2e:07:c7:e0:
c3:11:da:74:14:8a:9f:9e:cb:a2:29:9a:33:9c:34:
15:2f:0e:54:bf:f6:84:36:2a:2c:3a:37:00:d8:da:
0a:24:3c:2c:10:1a:88:3d:50:03:20:4a:fc:77:e8:
6c:07:84:c5:d9:e3:99:01:9a:df:ab:c7:ef:a6:59:
f4:a2:2d:49:5c:c7:b6:3b:15:8e:9a:0c:ba:a0:c5:
e4:ab:02:2e:11:96:cc:71:20:79:89:5d:d8:e6:13:
f2:11:be:d6:12:d9:75:4e:89:e8:fb:b2:ce:66:34:
90:41:16:eb:16:ff:ba:80:d6:e1:8d:2e:d7:56:e1:
93:f5:2b:5e:e3:25:49:6c:47:e9:27:a6:4d:d6:06:
61:38:41:8d:dd:a5:4b:63:8f:c3:19:84:86:26:ea:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:04:FD:07:D3:DF:CE:B7:6A:EC:19:3B:C1:3F:42:D4:34:2A:25:49
X509v3 Authority Key Identifier:
keyid:50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f9:4e:5d:c1:86:a9:0e:6f:0d:a3:84:42:d6:61:95:42:a6:
d4:4f:47:61:12:33:ba:40:48:67:d6:44:d0:7c:f7:ca:f3:45:
ed:f5:e5:13:8e:ca:4d:37:84:34:ff:cd:52:84:9d:69:76:53:
30:d0:82:2f:09:36:04:5e:e9:b7:4c:98:92:20:3c:d5:b6:2a:
67:1a:e9:1b:0f:64:8c:54:56:e6:81:62:93:44:bc:81:d8:c1:
9b:a4:32:93:ab:28:6f:43:bf:60:9e:8e:cb:54:ec:ce:d2:b4:
85:ab:ad:4c:93:ac:4c:5c:ae:be:7f:49:6f:c0:29:80:4e:f1:
23:7e:09:a8:f5:ee:21:c1:e6:76:8b:a4:33:b8:fa:68:5f:2f:
af:31:0e:a9:da:b9:ba:9f:b5:bc:66:4f:ad:31:3b:c2:d5:45:
53:9c:3f:9a:25:5f:6c:39:56:db:d6:bf:79:8e:7b:a3:8d:82:
8e:e9:cf:f3:76:f6:95:a0:e3:a8:e2:0f:a0:97:d7:2d:77:c1:
17:8e:db:eb:5f:46:76:3a:ad:83:50:e2:09:0f:68:c2:9d:eb:
46:f3:b8:71:c6:50:75:97:97:81:72:9c:ae:50:10:a4:cc:08:
16:f6:b5:74:dc:aa:e6:3c:46:44:da:ef:3d:d5:e6:7b:50:68:
c7:25:19:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDY3yb4sFpE+fn92Z0FMKMmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwN2U1ODJhZGM5MzY5ZGE4YWU4NWRkOTM1NzQwMTIzMDgx
YzdlZWQwHhcNMjYwOTI1MTQwMTM4WhcNMjYwOTI2MTQwMTM4WjAzMTEwLwYDVQQD
EygyOTA0ZmQwN2QzZGZjZWI3NmFlYzE5M2JjMTNmNDJkNDM0MmEyNTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLZTIOQXkgdlmeur5iNPSrxHB5yH
V23GQq5ew6l4RyQkiprJaXcFopCGQ56GwmE8H+vA9aowvP8AiDMCJydr4rp05hGw
eR6MsCYjSwS019oOMjZilzb3PULOOtIaIxxGRRREdC4Hx+DDEdp0FIqfnsuiKZoz
nDQVLw5Uv/aENiosOjcA2NoKJDwsEBqIPVADIEr8d+hsB4TF2eOZAZrfq8fvpln0
oi1JXMe2OxWOmgy6oMXkqwIuEZbMcSB5iV3Y5hPyEb7WEtl1Tono+7LOZjSQQRbr
Fv+6gNbhjS7XVuGT9Ste4yVJbEfpJ6ZN1gZhOEGN3aVLY4/DGYSGJuq8FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkE/QfT3863auwZO8E/QtQ0KiVJMB8GA1UdIwQY
MBaAFFB+WCrck2naiuhd2TV0ASMIHH7tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUg1WUt0eVRhZHFLNkYzWk5YUUJJd2djZnUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS82ZWQ0MzQtY2Q1MS00MTUyLWFhNDMt
MDU2YmFlMjcyODhlLzEvVUg1WUt0eVRhZHFLNkYzWk5YUUJJd2djZnUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS82ZWQ0MzQtY2Q1MS00MTUyLWFhNDMtMDU2YmFlMjcyODhl
LzEvVUg1WUt0eVRhZHFLNkYzWk5YUUJJd2djZnUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/lOXcGG
qQ5vDaOEQtZhlUKm1E9HYRIzukBIZ9ZE0Hz3yvNF7fXlE47KTTeENP/NUoSdaXZT
MNCCLwk2BF7pt0yYkiA81bYqZxrpGw9kjFRW5oFik0S8gdjBm6Qyk6sob0O/YJ6O
y1TsztK0hautTJOsTFyuvn9Jb8ApgE7xI34JqPXuIcHmdoukM7j6aF8vrzEOqdq5
up+1vGZPrTE7wtVFU5w/miVfbDlW29a/eY57o42CjunP83b2laDjqOIPoJfXLXfB
F47b619Gdjqtg1DiCQ9owp3rRvO4ccZQdZeXgXKcrlAQpMwIFva1dNyq5jxGRNrv
PdXme1BoxyUZNQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:07:34 2026 by rpki-client