Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
File: U8DiB45PPrpfh5UD_dgJw4O7dig.mft (raw, json)
Hash identifier: dUfZA0LfwyAOtco738h1hI33sdoNpVApwMslf4mNAHM=
Subject key identifier: 5C:62:C1:8B:2E:7A:45:FF:A9:49:BC:8A:91:22:3E:BD:F9:2F:A3:3B
Authority key identifier: 53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
Certificate issuer: /CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Certificate serial: 01A0F00BFD0A3442CE5381D2BACDA369CB42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
Manifest number: 1479
Signing time: Wed 30 Sep 2026 02:01:52 +0000
Manifest this update: Wed 30 Sep 2026 02:01:52 +0000
Manifest next update: Thu 01 Oct 2026 02:01:52 +0000
Files and hashes: 1: 1-GMVzwMDxSiYZaD7figfVQ0BMo8.roa (hash: 6cucZyQkv8Clqp8Dmj2mB2zHAVxhCmtUwPlqKFCqEpw=)
2: U8DiB45PPrpfh5UD_dgJw4O7dig.crl (hash: ufMtZ9w7uohzmM51PA6olN5ZXjf+AvkvrUB7sw2iN6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:0b:fd:0a:34:42:ce:53:81:d2:ba:cd:a3:69:cb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Validity
Not Before: Sep 30 02:01:52 2026 GMT
Not After : Oct 1 02:01:52 2026 GMT
Subject: CN=5c62c18b2e7a45ffa949bc8a91223ebdf92fa33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e0:a4:21:1f:6d:aa:6b:db:49:59:c2:6b:b9:
c8:92:32:f0:25:fd:10:da:2f:4c:aa:7c:56:a8:04:
92:63:da:82:81:91:bf:48:75:61:53:91:b1:17:7b:
59:2c:6b:bb:93:49:54:62:f6:fd:fb:1b:0c:f7:54:
aa:f9:73:a3:02:fc:7b:34:a7:26:fb:41:39:67:c5:
55:84:9d:a1:88:e3:2e:10:39:9d:4f:7e:52:e9:5d:
6b:ce:dd:c3:9c:91:2e:80:d9:bf:6e:db:c3:a1:37:
3d:23:94:a5:79:4e:83:bc:ad:5e:61:d9:0d:47:2e:
da:a0:bd:86:56:14:ed:dc:73:5f:9f:ff:51:d9:6e:
02:08:5a:12:69:99:78:b8:50:5d:80:3d:cb:3d:9d:
ef:19:73:3a:21:75:37:30:d8:63:18:e1:12:af:25:
5c:74:c7:ed:7c:c8:93:b6:75:b6:ca:82:7a:f3:99:
21:ee:01:6b:29:7f:99:3f:92:ff:f3:9d:60:8e:bd:
45:f4:74:af:fd:d0:3c:26:83:b8:b7:81:fa:bd:6b:
19:b8:f7:e2:80:b8:a7:52:58:1f:f5:9c:13:ff:77:
4b:1f:4b:fe:b2:dc:3b:3b:54:79:ed:61:2d:3b:76:
7e:0f:46:53:24:47:db:af:7c:73:21:70:d3:c4:99:
bc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:62:C1:8B:2E:7A:45:FF:A9:49:BC:8A:91:22:3E:BD:F9:2F:A3:3B
X509v3 Authority Key Identifier:
keyid:53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:05:38:f8:01:a8:92:70:fe:bb:5f:bf:f7:06:f2:cd:dc:27:
3e:a1:7f:5c:2e:0d:cd:fd:f1:1b:58:87:c8:2f:64:e9:74:cc:
e3:53:f8:9e:8d:31:13:64:d3:5f:ce:e2:cd:e8:69:b8:ed:cd:
59:33:5c:1e:42:1d:59:80:9c:a7:bc:13:fd:45:bb:fa:c8:c6:
bf:ec:ff:38:f0:2c:81:8c:c5:9e:a0:a0:4e:b6:45:d5:a9:16:
db:9f:b6:42:ae:2e:9b:35:87:7e:27:1e:01:06:f1:0f:7e:2b:
9c:fc:1b:1d:88:65:dc:0f:b3:d0:5e:8d:bc:14:b2:12:d0:7d:
7e:dc:98:3f:91:c0:a2:f0:e1:49:59:05:15:d3:59:b7:76:69:
ae:d8:32:50:b6:01:2a:4a:8e:27:97:1b:f5:dc:bc:80:6e:de:
06:a8:9f:e2:a7:0f:b8:79:75:f7:22:3a:34:fa:5c:5d:7d:a3:
9e:47:89:26:2c:c7:a1:f6:41:75:59:e3:9d:de:62:35:63:d7:
d7:17:fc:ad:36:39:d0:4a:50:6c:a1:0d:38:a6:7b:b5:ca:08:
d4:85:1b:25:00:d6:9b:c1:10:0d:fc:d0:c6:26:c9:f5:4a:37:
e7:23:5f:b1:ed:3e:39:29:02:9c:d2:0d:0f:cc:72:71:4b:6b:
00:a6:90:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDwC/0KNELOU4HSus2jactCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYzBlMjA3OGU0ZjNlYmE1Zjg3OTUwM2ZkZDgwOWMzODNi
Yjc2MjgwHhcNMjYwOTMwMDIwMTUyWhcNMjYxMDAxMDIwMTUyWjAzMTEwLwYDVQQD
Eyg1YzYyYzE4YjJlN2E0NWZmYTk0OWJjOGE5MTIyM2ViZGY5MmZhMzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreCkIR9tqmvbSVnCa7nIkjLwJf0Q
2i9MqnxWqASSY9qCgZG/SHVhU5GxF3tZLGu7k0lUYvb9+xsM91Sq+XOjAvx7NKcm
+0E5Z8VVhJ2hiOMuEDmdT35S6V1rzt3DnJEugNm/btvDoTc9I5SleU6DvK1eYdkN
Ry7aoL2GVhTt3HNfn/9R2W4CCFoSaZl4uFBdgD3LPZ3vGXM6IXU3MNhjGOESryVc
dMftfMiTtnW2yoJ685kh7gFrKX+ZP5L/851gjr1F9HSv/dA8JoO4t4H6vWsZuPfi
gLinUlgf9ZwT/3dLH0v+stw7O1R57WEtO3Z+D0ZTJEfbr3xzIXDTxJm8OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxiwYsuekX/qUm8ipEiPr35L6M7MB8GA1UdIwQY
MBaAFFPA4geOTz66X4eVA/3YCcODu3YoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVThEaUI0NVBQcnBmaDVVRF9kZ0p3NE83ZGlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iMzY2MzYtMzMwNi00NDhmLThlY2Yt
NTY0ODJiMzkwNjc4LzEvVThEaUI0NVBQcnBmaDVVRF9kZ0p3NE83ZGlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iMzY2MzYtMzMwNi00NDhmLThlY2YtNTY0ODJiMzkwNjc4
LzEvVThEaUI0NVBQcnBmaDVVRF9kZ0p3NE83ZGlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAU4+AGo
knD+u1+/9wbyzdwnPqF/XC4Nzf3xG1iHyC9k6XTM41P4no0xE2TTX87izehpuO3N
WTNcHkIdWYCcp7wT/UW7+sjGv+z/OPAsgYzFnqCgTrZF1akW25+2Qq4umzWHfice
AQbxD34rnPwbHYhl3A+z0F6NvBSyEtB9ftyYP5HAovDhSVkFFdNZt3ZprtgyULYB
KkqOJ5cb9dy8gG7eBqif4qcPuHl19yI6NPpcXX2jnkeJJizHofZBdVnjnd5iNWPX
1xf8rTY50EpQbKENOKZ7tcoI1IUbJQDWm8EQDfzQxibJ9Uo35yNfse0+OSkCnNIN
D8xycUtrAKaQYQ==
-----END CERTIFICATE-----
Generated at Wed Sep 30 12:05:58 2026 by rpki-client