Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
File: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft (raw, json)
Hash identifier: Cg0yWDG409pidEWHrwxqI9rL6DLtENBInmayHZ7Bofc=
Subject key identifier: 62:1D:51:89:A2:91:F3:8B:8B:96:56:7B:55:BD:1C:28:47:CE:14:89
Authority key identifier: 53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
Certificate issuer: /CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Certificate serial: 01A10C5DDD9164B29B36B8F7C737A921B90C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
Manifest number: 1A8D
Signing time: Mon 05 Oct 2026 14:00:40 +0000
Manifest this update: Mon 05 Oct 2026 14:00:40 +0000
Manifest next update: Tue 06 Oct 2026 14:00:40 +0000
Files and hashes: 1: IhNm1XAjTUBP_UYjIGIEELcWiWc.roa (hash: TcGN7ZBSR/KDo/mk7XwRToavEZ6usSTJYaYD26UCIPE=)
2: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl (hash: EAWrDR+PVXjF0cKkrqQ2g8CNsKwtxX06mMMAR+xJF0s=)
3: mjm_jL6FnCZyLJAmMfTaUZL_DF4.roa (hash: 7TBTThhJXxwuqJMKV3smo+3dSUEAzVVTW36ntOu96Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:5d:dd:91:64:b2:9b:36:b8:f7:c7:37:a9:21:b9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Validity
Not Before: Oct 5 14:00:40 2026 GMT
Not After : Oct 6 14:00:40 2026 GMT
Subject: CN=621d5189a291f38b8b96567b55bd1c2847ce1489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:b5:f3:e2:51:34:e3:db:3b:1c:2a:d2:bd:
92:29:ba:dd:28:3c:c6:fe:85:a3:19:93:51:47:10:
ac:cf:8e:6b:6b:fc:6c:8c:e4:20:35:2f:61:59:fe:
d3:b3:eb:39:49:a4:5f:5c:54:78:93:b4:af:82:9b:
30:a0:e7:7d:de:55:b2:4d:7c:b2:f3:57:63:68:ff:
be:f2:7a:f4:6d:0b:4b:8f:b7:db:d8:ea:f9:e9:7e:
85:83:3d:d0:46:22:f0:69:ad:68:56:98:b6:f7:d9:
98:0b:26:73:69:fd:b9:c1:97:dc:ea:06:84:af:c4:
b2:f8:9b:77:fe:c2:1d:45:1b:48:cf:3e:c5:8b:99:
83:9b:5e:32:58:14:56:16:06:45:b5:ec:1f:df:4e:
bc:73:dc:06:b2:bd:eb:b3:b1:84:06:ae:3f:9c:e9:
09:56:84:76:68:c8:a2:04:94:15:c9:50:6c:f7:32:
cd:93:e7:79:7d:f0:a4:a4:68:b6:c4:1a:be:08:a8:
17:4c:bc:f3:53:88:aa:03:76:41:79:45:4a:23:e0:
2a:de:12:3c:20:4a:57:b8:21:7d:c6:5e:05:07:44:
a9:89:4c:70:1b:4d:73:71:f7:29:14:0d:9f:a1:a3:
39:c1:50:05:d6:30:d6:f6:58:ec:78:33:e4:1d:37:
95:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1D:51:89:A2:91:F3:8B:8B:96:56:7B:55:BD:1C:28:47:CE:14:89
X509v3 Authority Key Identifier:
keyid:53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b5:04:cb:54:26:ad:65:64:71:14:7a:5f:26:6b:01:25:fb:
cf:bf:a6:cd:c6:7e:4a:97:17:57:e0:68:a8:89:7d:60:7f:3d:
e7:80:d3:6d:05:d1:35:1c:cb:d7:a5:12:6f:36:d9:43:3b:e8:
c0:3c:31:c9:8f:5f:d1:fc:80:87:51:c4:f8:c1:26:e7:40:88:
92:65:5b:1d:a0:27:31:de:db:e5:3e:04:3b:32:8c:36:8f:78:
e8:80:fd:11:ed:a5:b5:a5:bb:64:5f:f3:d7:e3:9f:c3:e0:73:
d8:c3:9b:fd:3a:b6:e9:f1:8b:ff:c1:90:89:da:2a:68:7a:07:
9d:d5:93:35:b6:13:8a:fa:dc:91:a4:08:0d:6d:0d:1b:7f:f4:
56:78:1d:10:94:c8:87:2c:f8:37:3f:27:9b:93:fe:bd:4b:6c:
eb:b4:a0:38:20:8a:37:55:e5:d6:30:e8:fb:88:cd:44:b8:dd:
42:4e:fa:cd:9e:5b:bd:3b:a6:2c:12:1a:b5:8f:bc:5a:b2:3f:
db:50:cf:3c:58:c6:12:9e:d8:f1:23:ec:46:11:67:c3:c1:27:
73:23:83:d7:26:9f:ff:b5:16:1f:9d:24:1f:55:5e:dd:7d:53:
33:7e:d8:73:95:93:95:0f:ca:40:3d:20:6d:f3:f5:0e:92:58:
b7:1b:a4:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEMXd2RZLKbNrj3xzepIbkMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYjFhOGViYzNlY2Y3ZjVkYjdmNmNhY2QwMGU5MjBhZjg1
YWU4YjQwHhcNMjYxMDA1MTQwMDQwWhcNMjYxMDA2MTQwMDQwWjAzMTEwLwYDVQQD
Eyg2MjFkNTE4OWEyOTFmMzhiOGI5NjU2N2I1NWJkMWMyODQ3Y2UxNDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/C18+JRNOPbOxwq0r2SKbrdKDzG
/oWjGZNRRxCsz45ra/xsjOQgNS9hWf7Ts+s5SaRfXFR4k7SvgpswoOd93lWyTXyy
81djaP++8nr0bQtLj7fb2Or56X6Fgz3QRiLwaa1oVpi299mYCyZzaf25wZfc6gaE
r8Sy+Jt3/sIdRRtIzz7Fi5mDm14yWBRWFgZFtewf3068c9wGsr3rs7GEBq4/nOkJ
VoR2aMiiBJQVyVBs9zLNk+d5ffCkpGi2xBq+CKgXTLzzU4iqA3ZBeUVKI+Aq3hI8
IEpXuCF9xl4FB0SpiUxwG01zcfcpFA2foaM5wVAF1jDW9ljseDPkHTeVkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIdUYmikfOLi5ZWe1W9HChHzhSJMB8GA1UdIwQY
MBaAFFOxqOvD7Pf1239srNAOkgr4Wui0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTdHbzY4UHM5X1hiZjJ5czBBNlNDdmhhNkxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wNzA2MzAtNTIzNC00OWM0LTg0ZmUt
MTViZGE2Yjg2N2NiLzEvVTdHbzY4UHM5X1hiZjJ5czBBNlNDdmhhNkxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wNzA2MzAtNTIzNC00OWM0LTg0ZmUtMTViZGE2Yjg2N2Ni
LzEvVTdHbzY4UHM5X1hiZjJ5czBBNlNDdmhhNkxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArbUEy1Qm
rWVkcRR6XyZrASX7z7+mzcZ+SpcXV+BoqIl9YH8954DTbQXRNRzL16USbzbZQzvo
wDwxyY9f0fyAh1HE+MEm50CIkmVbHaAnMd7b5T4EOzKMNo946ID9Ee2ltaW7ZF/z
1+Ofw+Bz2MOb/Tq26fGL/8GQidoqaHoHndWTNbYTivrckaQIDW0NG3/0VngdEJTI
hyz4Nz8nm5P+vUts67SgOCCKN1Xl1jDo+4jNRLjdQk76zZ5bvTumLBIatY+8WrI/
21DPPFjGEp7Y8SPsRhFnw8EncyOD1yaf/7UWH50kH1Ve3X1TM37Yc5WTlQ/KQD0g
bfP1DpJYtxuklA==
-----END CERTIFICATE-----
Generated at Mon Oct 5 18:57:29 2026 by rpki-client