Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
File: Ul0cSVWy778Anp5Bsecupt_4JLM.mft (raw, json)
Hash identifier: AMvEsXGwVZgZiH/9M3JaxSepa16GhYz58/f56iTYcYU=
Subject key identifier: 9F:C1:CE:3D:26:C0:14:18:CF:73:50:1E:F7:64:C8:B6:41:06:20:64
Authority key identifier: 52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
Certificate issuer: /CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Certificate serial: 01A0EC2ED9B312BA12F917B061439683B81D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
Manifest number: 0C0C
Signing time: Tue 29 Sep 2026 08:01:28 +0000
Manifest this update: Tue 29 Sep 2026 08:01:28 +0000
Manifest next update: Wed 30 Sep 2026 08:01:28 +0000
Files and hashes: 1: Efm2bGrofvD9TKo6fR0hCwXyZZY.roa (hash: 8/kSaahEbvJMwKWK7IV2ZU7p4mFsDitwaZrJNwqZgFY=)
2: NDmwsiusftzbyMWBTWDJVW16t3w.roa (hash: vo2FWAXvXazwyLT6897L+Sclc/TCo4ut41EBl8NTSUY=)
3: Ul0cSVWy778Anp5Bsecupt_4JLM.crl (hash: LPJgPfPoX3hEEY1wQcxWaKLvQrA/ae0nc+hwYS6jrJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:d9:b3:12:ba:12:f9:17:b0:61:43:96:83:b8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Validity
Not Before: Sep 29 08:01:28 2026 GMT
Not After : Sep 30 08:01:28 2026 GMT
Subject: CN=9fc1ce3d26c01418cf73501ef764c8b641062064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:bf:db:7b:db:e0:be:48:ff:a6:d1:35:88:
47:f6:ad:3a:d7:8f:65:c6:63:6b:b0:a9:26:85:14:
c6:ed:02:26:f6:1c:8e:99:1e:d2:5f:b0:32:40:e3:
e7:f6:8c:b2:e2:d2:58:88:a9:bb:a8:e3:bb:50:04:
7b:7f:f5:f4:bf:c3:88:54:3f:8e:93:5a:a3:75:e2:
5f:d5:34:60:2a:e3:8e:87:8b:d4:d9:ce:21:f1:71:
e8:3f:5a:41:43:16:06:24:ea:b5:48:3a:12:eb:01:
ee:da:7e:88:48:d6:fb:28:e5:9b:4f:25:93:1c:57:
2d:18:a7:5e:df:a7:a4:61:c7:8f:24:da:85:cf:7e:
67:b3:03:c5:28:c8:cf:3a:5d:a0:f2:87:00:15:67:
56:c5:2f:4a:80:da:57:f3:3b:25:bb:fe:4d:e0:08:
42:58:b7:f9:df:79:87:29:92:c6:fd:a5:b3:ca:4f:
a9:da:27:7f:9c:8f:ba:cf:0f:f7:00:57:ac:17:53:
5a:3e:b8:53:f9:79:59:26:bf:41:08:b9:44:e9:14:
54:0b:8f:fc:7d:4f:7a:52:5b:69:00:91:d4:0a:94:
82:23:8f:25:73:12:f5:c5:fe:8d:e4:1d:e9:2d:91:
30:a6:3a:f5:b1:aa:43:0b:1c:94:7f:75:af:b8:09:
dc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C1:CE:3D:26:C0:14:18:CF:73:50:1E:F7:64:C8:B6:41:06:20:64
X509v3 Authority Key Identifier:
keyid:52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:cd:d5:7c:86:4b:85:e8:30:d3:06:d6:3c:d8:3e:bd:c4:8a:
e5:e3:6a:1c:ac:c4:7e:41:81:68:5c:52:e4:7d:e1:e3:42:c3:
37:77:f1:68:4f:3b:23:fb:88:80:11:8c:c4:0d:f1:59:91:9d:
cb:28:dc:cf:83:70:48:0b:e3:f4:56:59:f8:01:47:2d:4f:1c:
83:18:5f:75:e3:d0:98:08:9f:47:24:cf:4d:0c:c6:d9:28:2f:
ad:21:d4:2e:06:4a:f8:68:8e:35:77:0c:30:ed:32:de:e7:47:
d0:54:45:6e:9a:c0:7e:61:5c:1e:27:f5:c5:97:13:00:55:e7:
d5:e1:a7:7a:a8:7f:4d:48:e9:58:60:cc:e6:eb:06:7c:c1:8c:
42:d3:3a:7e:a8:2a:22:69:64:ab:13:d1:80:c9:cb:5f:df:82:
b8:da:70:c4:71:bd:13:2c:5c:7c:51:a5:54:53:e7:04:6e:f9:
0c:a2:ba:c4:10:02:eb:4d:02:1e:33:3a:dc:95:5f:ab:07:d0:
36:25:ce:f2:8a:fc:ee:30:72:76:cb:b9:0f:77:36:35:1e:3f:
f7:c1:53:07:23:e2:3e:6c:59:f0:b5:f2:68:7b:9a:dc:d9:72:
3a:ea:74:ea:a8:be:70:b1:37:fe:e3:38:9c:71:09:9a:87:eb:
24:36:d5:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDsLtmzEroS+RewYUOWg7gdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNWQxYzQ5NTViMmVmYmYwMDllOWU0MWIxZTcyZWE2ZGZm
ODI0YjMwHhcNMjYwOTI5MDgwMTI4WhcNMjYwOTMwMDgwMTI4WjAzMTEwLwYDVQQD
Eyg5ZmMxY2UzZDI2YzAxNDE4Y2Y3MzUwMWVmNzY0YzhiNjQxMDYyMDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmu/23vb4L5I/6bRNYhH9q06149l
xmNrsKkmhRTG7QIm9hyOmR7SX7AyQOPn9oyy4tJYiKm7qOO7UAR7f/X0v8OIVD+O
k1qjdeJf1TRgKuOOh4vU2c4h8XHoP1pBQxYGJOq1SDoS6wHu2n6ISNb7KOWbTyWT
HFctGKde36ekYcePJNqFz35nswPFKMjPOl2g8ocAFWdWxS9KgNpX8zslu/5N4AhC
WLf533mHKZLG/aWzyk+p2id/nI+6zw/3AFesF1NaPrhT+XlZJr9BCLlE6RRUC4/8
fU96UltpAJHUCpSCI48lcxL1xf6N5B3pLZEwpjr1sapDCxyUf3WvuAncwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/Bzj0mwBQYz3NQHvdkyLZBBiBkMB8GA1UdIwQY
MBaAFFJdHElVsu+/AJ6eQbHnLqbf+CSzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWwwY1NWV3k3NzhBbnA1QnNlY3VwdF80SkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84MTk1YjMtYzQ3NS00Y2E0LWI0MmQt
NjYyN2E0ZWI1OTYzLzEvVWwwY1NWV3k3NzhBbnA1QnNlY3VwdF80SkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi84MTk1YjMtYzQ3NS00Y2E0LWI0MmQtNjYyN2E0ZWI1OTYz
LzEvVWwwY1NWV3k3NzhBbnA1QnNlY3VwdF80SkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS83VfIZL
hegw0wbWPNg+vcSK5eNqHKzEfkGBaFxS5H3h40LDN3fxaE87I/uIgBGMxA3xWZGd
yyjcz4NwSAvj9FZZ+AFHLU8cgxhfdePQmAifRyTPTQzG2SgvrSHULgZK+GiONXcM
MO0y3udH0FRFbprAfmFcHif1xZcTAFXn1eGneqh/TUjpWGDM5usGfMGMQtM6fqgq
ImlkqxPRgMnLX9+CuNpwxHG9EyxcfFGlVFPnBG75DKK6xBAC600CHjM63JVfqwfQ
NiXO8or87jBydsu5D3c2NR4/98FTByPiPmxZ8LXyaHua3NlyOup06qi+cLE3/uM4
nHEJmofrJDbV9g==
-----END CERTIFICATE-----
Generated at Tue Sep 29 11:12:40 2026 by rpki-client