Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
File: U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft (raw, json)
Hash identifier: E0dosJii3ITo4uZGKBzk13pWwvjq1Y5nxSLopzwlxQs=
Subject key identifier: 52:5E:8C:86:A0:B6:B7:93:CB:88:2C:71:FE:99:62:ED:80:89:DC:45
Authority key identifier: 53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
Certificate issuer: /CN=535a0905ad5684f414182c99e1ed998163093001
Certificate serial: 019E1F10F9F0A2F06826ADE7326642C38ED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 02:01:06 +0000
Manifest this update: Wed 13 May 2026 02:01:06 +0000
Manifest next update: Thu 14 May 2026 02:01:06 +0000
Files and hashes: 1: 1-OdbV9pffyE-MtyJfK7HNQXo7NI.roa (hash: BTb2LGVfDU/NF7VOnzuEayBkQx1CY6SsEpcdjflREFo=)
2: U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl (hash: M/lODDuo0ak46IAWAipQYwovKDEy2oLu2SH5ccxzzDk=)
3: dLJKUxaN6lGmKQZKOER9LafS-VU.roa (hash: avkp8AIkxpP6EiwxL7+BnoTzdDtAkOmhGqUZUTqV12w=)
4: kUCFqt07I3jOUhsa9vnLRiDNVxk.roa (hash: 5MGQy531WnFyAMvE7uD+I/swY7k4A1YC68qxb4dhi1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:f9:f0:a2:f0:68:26:ad:e7:32:66:42:c3:8e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535a0905ad5684f414182c99e1ed998163093001
Validity
Not Before: May 13 02:01:06 2026 GMT
Not After : May 14 02:01:06 2026 GMT
Subject: CN=525e8c86a0b6b793cb882c71fe9962ed8089dc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:57:65:62:6b:8e:9b:cb:16:35:fa:f3:70:a0:
d6:35:37:d1:84:ff:67:8e:c6:87:f7:af:a3:a9:db:
72:7c:35:4c:9d:49:5a:53:22:27:67:99:61:f9:b8:
e9:1e:95:dd:54:f9:59:6c:55:1a:13:d1:ce:7e:e0:
3c:c1:b7:7f:88:9b:48:e7:2f:a4:49:b8:89:e5:3f:
83:d3:49:77:ac:b1:8c:c4:77:9f:41:5d:75:c8:80:
64:6f:82:f0:a0:2b:49:2c:b6:ee:24:7a:9e:e8:7e:
78:89:fb:6c:b6:60:37:57:82:cf:3e:c3:43:e6:a9:
c7:8d:01:e5:d2:f4:fa:8c:01:1c:1b:89:f7:0b:8f:
b0:38:f8:1f:f6:47:e0:a4:87:a2:48:97:08:b0:89:
75:df:c3:54:8e:ad:7a:56:f6:00:7a:b8:6f:b8:b5:
9a:95:52:48:79:8a:59:ad:ec:72:96:50:85:f5:9a:
3e:32:19:ca:f5:f2:46:ef:61:89:89:29:23:34:2b:
5e:30:bb:f7:6a:1f:af:cf:fe:35:be:08:c9:27:94:
a6:38:c2:22:58:c5:48:c4:40:9e:50:fe:46:bc:8d:
30:73:71:bf:7f:05:9d:62:c9:4c:75:ab:65:cb:73:
7d:d4:7c:69:b6:84:e3:b9:1b:c0:21:83:74:91:1d:
43:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5E:8C:86:A0:B6:B7:93:CB:88:2C:71:FE:99:62:ED:80:89:DC:45
X509v3 Authority Key Identifier:
keyid:53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9a:5b:9d:fe:b0:9e:d7:cc:88:67:19:05:a5:58:0b:25:b1:
64:4c:b7:ca:6b:9d:dd:12:b7:cf:6a:90:57:5a:da:dc:01:89:
a7:d3:97:c2:e5:4a:3a:2c:f1:7d:9b:48:fe:8f:c6:be:d8:cb:
e3:38:11:69:33:8d:ba:a4:a5:16:49:41:94:45:54:5f:23:f5:
3a:1f:eb:60:f7:88:d4:aa:b8:1c:f2:c2:a4:15:7e:8e:c8:d2:
52:60:1a:62:30:60:fa:50:d3:1c:30:b4:1f:bf:1e:d0:0d:cf:
72:4b:eb:1a:ed:f1:86:c5:6f:df:c5:30:16:1f:8d:5b:04:b4:
c9:5f:0e:d1:b2:71:39:f9:5f:ef:61:95:fa:a5:d3:07:04:16:
bf:a7:38:7e:2c:e5:e7:84:a1:1a:d0:5f:88:9c:16:86:75:74:
31:c8:9b:e9:36:5f:c7:71:61:fb:eb:26:35:ef:32:ca:8a:4d:
a6:43:13:b3:e2:47:fb:aa:84:15:bf:32:d3:47:32:ef:90:fc:
2f:3f:37:8c:1e:06:53:e0:5e:71:76:59:d7:e4:89:83:37:34:
9d:b2:d3:2f:c1:c4:ba:e9:74:71:2e:7e:5e:89:52:a8:32:f6:
fc:40:19:f7:4a:9e:86:d3:93:40:82:a6:d7:67:53:69:ae:cf:
9e:80:45:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEPnwovBoJq3nMmZCw47TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNWEwOTA1YWQ1Njg0ZjQxNDE4MmM5OWUxZWQ5OTgxNjMw
OTMwMDEwHhcNMjYwNTEzMDIwMTA2WhcNMjYwNTE0MDIwMTA2WjAzMTEwLwYDVQQD
Eyg1MjVlOGM4NmEwYjZiNzkzY2I4ODJjNzFmZTk5NjJlZDgwODlkYzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVdlYmuOm8sWNfrzcKDWNTfRhP9n
jsaH96+jqdtyfDVMnUlaUyInZ5lh+bjpHpXdVPlZbFUaE9HOfuA8wbd/iJtI5y+k
SbiJ5T+D00l3rLGMxHefQV11yIBkb4LwoCtJLLbuJHqe6H54iftstmA3V4LPPsND
5qnHjQHl0vT6jAEcG4n3C4+wOPgf9kfgpIeiSJcIsIl138NUjq16VvYAerhvuLWa
lVJIeYpZrexyllCF9Zo+MhnK9fJG72GJiSkjNCteMLv3ah+vz/41vgjJJ5SmOMIi
WMVIxECeUP5GvI0wc3G/fwWdYslMdatly3N91HxptoTjuRvAIYN0kR1DPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJejIagtreTy4gscf6ZYu2AidxFMB8GA1UdIwQY
MBaAFFNaCQWtVoT0FBgsmeHtmYFjCTABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFvSkJhMVdoUFFVR0N5WjRlMlpnV01KTUFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iMjdiYWYtZTY4MS00YWI2LWI5MDMt
NmExMGM2ZTMyMjJkLzEvVTFvSkJhMVdoUFFVR0N5WjRlMlpnV01KTUFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9iMjdiYWYtZTY4MS00YWI2LWI5MDMtNmExMGM2ZTMyMjJk
LzEvVTFvSkJhMVdoUFFVR0N5WjRlMlpnV01KTUFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZpbnf6w
ntfMiGcZBaVYCyWxZEy3ymud3RK3z2qQV1ra3AGJp9OXwuVKOizxfZtI/o/GvtjL
4zgRaTONuqSlFklBlEVUXyP1Oh/rYPeI1Kq4HPLCpBV+jsjSUmAaYjBg+lDTHDC0
H78e0A3PckvrGu3xhsVv38UwFh+NWwS0yV8O0bJxOflf72GV+qXTBwQWv6c4fizl
54ShGtBfiJwWhnV0Mcib6TZfx3Fh++smNe8yyopNpkMTs+JH+6qEFb8y00cy75D8
Lz83jB4GU+BecXZZ1+SJgzc0nbLTL8HEuul0cS5+XolSqDL2/EAZ90qehtOTQIKm
12dTaa7PnoBFxQ==
-----END CERTIFICATE-----
Generated at Wed May 13 08:16:42 2026 by rpki-client