Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.mft
File: U4LANwL31t1s72Zs4gUxU8mv6Us.mft (raw, json)
Hash identifier: vTduRlkbE4cOxgcPnaqgaJDb6kLwpDp+6xKwYsD4ACY=
Subject key identifier: 58:76:29:0F:10:90:62:65:CD:37:ED:5B:13:7A:C7:8E:7F:FD:69:8F
Authority key identifier: 53:82:C0:37:02:F7:D6:DD:6C:EF:66:6C:E2:05:31:53:C9:AF:E9:4B
Certificate issuer: /CN=5382c03702f7d6dd6cef666ce2053153c9afe94b
Certificate serial: 01A0CC6C1A811BF103BF9231CD1E3785B594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4LANwL31t1s72Zs4gUxU8mv6Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.mft
Manifest number: 0157
Signing time: Wed 23 Sep 2026 04:00:31 +0000
Manifest this update: Wed 23 Sep 2026 04:00:31 +0000
Manifest next update: Thu 24 Sep 2026 04:00:31 +0000
Files and hashes: 1: U4LANwL31t1s72Zs4gUxU8mv6Us.crl (hash: eJBXVu0oiYlt85ZovDylnpDZwHFSEevGD7dz+l/+9u4=)
2: m_nKiCuVzTi2TKccGiONJSKEB70.roa (hash: S3r/rA3wAxsL4UrMnk+l9Ka3WgxOB/UdzMyaqt2gqiY=)
3: xNohHyHNAtZbFs1TNTPBi4HGfmM.asa (hash: RKzmJOhU01ix0w7bW/M3Ue48L0hu6xJh91dZNeFrjAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4LANwL31t1s72Zs4gUxU8mv6Us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:1a:81:1b:f1:03:bf:92:31:cd:1e:37:85:b5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5382c03702f7d6dd6cef666ce2053153c9afe94b
Validity
Not Before: Sep 23 04:00:31 2026 GMT
Not After : Sep 24 04:00:31 2026 GMT
Subject: CN=5876290f10906265cd37ed5b137ac78e7ffd698f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d5:98:5c:11:4d:cf:a5:fd:01:75:8e:e0:8e:
5a:d1:96:4a:6e:46:a0:80:93:48:47:e3:a3:34:d6:
15:ab:c6:42:58:15:bc:56:2d:20:98:08:f2:8a:9d:
b8:85:b8:d6:e2:ff:89:bc:78:3f:c1:47:49:17:7b:
f3:74:67:36:61:eb:24:ff:ce:c4:f7:a3:ae:3a:aa:
0f:94:47:68:76:a5:8b:94:e9:be:2d:5d:83:ca:11:
a8:9d:ee:ce:73:30:2a:58:0c:f5:a6:25:b6:11:48:
4e:01:71:1a:df:df:19:73:fc:ab:60:d9:01:49:59:
d0:29:12:2b:da:af:83:f4:38:30:84:df:e5:53:44:
9e:1d:10:26:c4:db:e1:24:0d:4d:11:5b:db:74:46:
7f:56:45:4c:17:34:43:18:8e:be:55:2c:7b:00:b6:
28:0c:6e:19:1c:f7:9b:85:9b:77:7d:03:ed:18:7a:
a3:40:f2:1e:da:bb:a3:e0:0b:e7:a2:e4:83:b3:42:
75:1e:6c:95:55:ed:3e:63:b8:5a:cb:34:2a:fd:53:
e9:74:d8:cd:7c:7d:fc:6e:a9:7e:ff:88:ab:58:73:
48:d0:47:a5:c8:65:22:62:5d:5e:a6:2d:90:58:dd:
20:e2:5e:72:ec:03:a4:51:98:70:19:68:0a:94:b2:
fd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:76:29:0F:10:90:62:65:CD:37:ED:5B:13:7A:C7:8E:7F:FD:69:8F
X509v3 Authority Key Identifier:
keyid:53:82:C0:37:02:F7:D6:DD:6C:EF:66:6C:E2:05:31:53:C9:AF:E9:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4LANwL31t1s72Zs4gUxU8mv6Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f7:a9:05:7f:be:cd:2e:1a:3f:2b:2f:fa:7f:ec:49:14:c0:
71:9a:f3:79:55:3d:8b:66:f1:c0:6f:98:a2:7f:92:e4:a8:01:
9a:c6:9f:3f:54:cd:41:f6:74:62:82:e7:3b:08:d1:16:f9:37:
28:34:53:3c:dd:9b:0e:b7:0b:54:70:56:eb:56:68:63:8b:9b:
cb:15:99:ce:48:1b:ab:7a:1b:56:66:d4:b1:17:0a:b2:2e:94:
c5:9d:35:01:bf:5b:45:e8:f6:12:b8:25:93:37:c4:b7:c9:b4:
8d:fe:0e:5d:03:8c:f5:f9:a9:05:f3:04:e2:40:07:4c:10:c1:
87:a9:ab:10:8d:44:fb:36:94:76:30:ee:c3:09:b1:fd:33:57:
cd:e9:de:d5:69:3c:64:6a:59:c7:19:ba:f1:e7:39:bc:80:cc:
37:b1:05:93:aa:b9:b0:d4:3b:a0:ee:cc:ee:e1:08:72:eb:3e:
de:46:86:04:e4:03:d5:11:5a:21:08:b4:01:32:ca:8d:f6:38:
a4:7e:1c:04:0f:57:77:91:ef:13:7e:9b:6c:27:1c:af:17:09:
97:f5:69:d7:a2:17:43:d0:ce:e7:3a:36:cd:54:b8:7e:0b:c3:
35:d9:07:b4:19:14:dc:d2:cd:7a:68:85:b1:c7:67:9b:a3:18:
47:da:48:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMbBqBG/EDv5IxzR43hbWUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzODJjMDM3MDJmN2Q2ZGQ2Y2VmNjY2Y2UyMDUzMTUzYzlh
ZmU5NGIwHhcNMjYwOTIzMDQwMDMxWhcNMjYwOTI0MDQwMDMxWjAzMTEwLwYDVQQD
Eyg1ODc2MjkwZjEwOTA2MjY1Y2QzN2VkNWIxMzdhYzc4ZTdmZmQ2OThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtWYXBFNz6X9AXWO4I5a0ZZKbkag
gJNIR+OjNNYVq8ZCWBW8Vi0gmAjyip24hbjW4v+JvHg/wUdJF3vzdGc2Yesk/87E
96OuOqoPlEdodqWLlOm+LV2DyhGone7OczAqWAz1piW2EUhOAXEa398Zc/yrYNkB
SVnQKRIr2q+D9DgwhN/lU0SeHRAmxNvhJA1NEVvbdEZ/VkVMFzRDGI6+VSx7ALYo
DG4ZHPebhZt3fQPtGHqjQPIe2ruj4AvnouSDs0J1HmyVVe0+Y7hayzQq/VPpdNjN
fH38bql+/4irWHNI0EelyGUiYl1epi2QWN0g4l5y7AOkUZhwGWgKlLL95wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFh2KQ8QkGJlzTftWxN6x45//WmPMB8GA1UdIwQY
MBaAFFOCwDcC99bdbO9mbOIFMVPJr+lLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTRMQU53TDMxdDFzNzJaczRnVXhVOG12NlVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84ZGM5N2UtZmVmYi00ZTkzLTk4MDkt
YThhYTY3MGYxMWI1LzEvVTRMQU53TDMxdDFzNzJaczRnVXhVOG12NlVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC84ZGM5N2UtZmVmYi00ZTkzLTk4MDktYThhYTY3MGYxMWI1
LzEvVTRMQU53TDMxdDFzNzJaczRnVXhVOG12NlVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/epBX++
zS4aPysv+n/sSRTAcZrzeVU9i2bxwG+Yon+S5KgBmsafP1TNQfZ0YoLnOwjRFvk3
KDRTPN2bDrcLVHBW61ZoY4ubyxWZzkgbq3obVmbUsRcKsi6UxZ01Ab9bRej2Ergl
kzfEt8m0jf4OXQOM9fmpBfME4kAHTBDBh6mrEI1E+zaUdjDuwwmx/TNXzene1Wk8
ZGpZxxm68ec5vIDMN7EFk6q5sNQ7oO7M7uEIcus+3kaGBOQD1RFaIQi0ATLKjfY4
pH4cBA9Xd5HvE36bbCccrxcJl/Vp16IXQ9DO5zo2zVS4fgvDNdkHtBkU3NLNemiF
scdnm6MYR9pIHA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:26:50 2026 by rpki-client