
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
File: U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json)
Hash identifier: 9PbhXtldFTc9S53IzsErnVYCzZGgQP67BGU89dAuFNs=
Subject key identifier: 13:9F:EE:22:57:2B:6D:67:2E:3F:FA:AE:75:B4:36:83:57:66:E1:A0
Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Certificate serial: 01A13D1302048B6DB4B2D4DD6C16C5A1D5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
Manifest number: 0788
Signing time: Thu 15 Oct 2026 01:00:18 +0000
Manifest this update: Thu 15 Oct 2026 01:00:18 +0000
Manifest next update: Fri 16 Oct 2026 01:00:18 +0000
Files and hashes: 1: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: xLs6Myj6rT8isUEwAe5+iMPQdYR23uxj+P1W1gVuq/Y=)
2: mVapMmHRdrNnHP7qEe61fUd9MJ4.roa (hash: 7gjqh37t5TbJMLovzwK7uE6PbR35tPIiZgeHv6oUC54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:02:04:8b:6d:b4:b2:d4:dd:6c:16:c5:a1:d5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Validity
Not Before: Oct 15 01:00:18 2026 GMT
Not After : Oct 16 01:00:18 2026 GMT
Subject: CN=139fee22572b6d672e3ffaae75b436835766e1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c5:8c:be:7d:da:47:6f:5e:95:97:3e:e0:6b:
fd:d7:aa:17:a7:6a:41:28:9d:0e:09:78:fc:dd:e6:
1f:e7:1c:3d:9e:0e:6b:2b:b6:81:40:d1:b5:73:6f:
d8:8e:4d:f7:ed:ff:68:23:53:f3:a8:b6:16:53:6c:
cc:9a:55:af:c8:ca:5d:91:5a:c8:a1:36:dc:45:33:
42:71:52:e8:de:e9:19:e9:e8:9e:15:de:8b:fd:a6:
1a:9e:6e:de:f4:d7:56:2e:55:32:53:ac:18:29:47:
23:f7:8e:31:c3:18:ec:a3:d8:45:08:db:6f:12:7f:
2a:3d:d6:17:5a:57:4e:e6:ac:09:1c:94:ee:98:ca:
a6:96:d1:4a:96:e8:2e:23:a1:05:27:88:c8:8d:fe:
63:e0:39:f3:0c:1f:e4:e5:5e:76:1f:b8:0f:0a:19:
93:ec:1f:59:38:4a:09:9b:d6:ae:ea:91:cd:35:c4:
b4:ad:41:61:5a:2d:68:5f:57:85:26:aa:2e:7a:82:
37:e3:c3:03:78:ef:af:ed:c8:22:57:b9:61:94:94:
07:c8:35:0d:56:ce:a1:32:57:92:bc:80:6f:50:04:
d2:60:4b:a7:4e:d2:bf:b2:ca:af:7a:be:f0:c3:00:
40:31:d1:fa:6a:0d:50:b3:b1:81:aa:2f:58:10:07:
e9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9F:EE:22:57:2B:6D:67:2E:3F:FA:AE:75:B4:36:83:57:66:E1:A0
X509v3 Authority Key Identifier:
keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ee:c2:57:12:91:a4:32:b5:e0:77:fd:94:6f:4d:7b:c5:b2:
49:e7:86:d0:9d:34:64:f0:97:49:bb:ae:db:30:46:38:6f:d6:
9b:3c:15:20:34:df:36:3c:c4:3d:82:4b:0f:bb:03:77:b4:de:
c2:ea:4d:ff:af:5e:bd:dc:10:96:eb:4f:c8:b0:f4:8d:c0:53:
77:a9:60:38:91:42:a5:10:e3:88:f9:9c:9e:c6:62:72:f7:e3:
0a:b1:0f:f1:ba:b3:98:1f:09:88:73:ed:04:85:c7:9e:5c:9f:
3e:9d:fd:be:81:53:b2:7d:be:7a:de:bb:e9:ed:89:86:c9:21:
8a:c1:93:5e:21:41:98:00:02:aa:31:6f:7a:34:1b:b7:0f:2a:
0d:bb:63:7a:fc:b7:be:1f:9a:05:7f:42:b2:2e:9b:cc:99:0b:
83:a6:cc:5f:03:d4:26:87:20:27:f9:08:30:3e:ce:77:fa:67:
3c:d0:1b:c5:e7:4c:71:62:3e:cc:12:9b:9b:a3:ce:0b:5c:b3:
f2:62:15:eb:1d:df:8e:f3:46:1e:61:4e:b2:16:a8:97:d2:88:
0f:94:e4:e7:48:23:d7:6b:39:72:8b:12:08:bb:51:b9:5f:d8:
e8:37:8f:00:76:7b:84:16:b9:64:4d:0d:1d:f0:c1:04:87:a6:
f3:06:a2:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9EwIEi220stTdbBbFodW8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzOThlYzNjMTViMTRmZDhhZDkxM2NiYjk1NjU3ZDhlYTgy
ZTdlMjUwHhcNMjYxMDE1MDEwMDE4WhcNMjYxMDE2MDEwMDE4WjAzMTEwLwYDVQQD
EygxMzlmZWUyMjU3MmI2ZDY3MmUzZmZhYWU3NWI0MzY4MzU3NjZlMWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sWMvn3aR29elZc+4Gv916oXp2pB
KJ0OCXj83eYf5xw9ng5rK7aBQNG1c2/Yjk337f9oI1PzqLYWU2zMmlWvyMpdkVrI
oTbcRTNCcVLo3ukZ6eieFd6L/aYanm7e9NdWLlUyU6wYKUcj944xwxjso9hFCNtv
En8qPdYXWldO5qwJHJTumMqmltFKluguI6EFJ4jIjf5j4DnzDB/k5V52H7gPChmT
7B9ZOEoJm9au6pHNNcS0rUFhWi1oX1eFJqoueoI348MDeO+v7cgiV7lhlJQHyDUN
Vs6hMleSvIBvUATSYEunTtK/ssqver7wwwBAMdH6ag1Qs7GBqi9YEAfpbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOf7iJXK21nLj/6rnW0NoNXZuGgMB8GA1UdIwQY
MBaAFFOY7DwVsU/YrZE8u5VlfY6oLn4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84OGU4ZjQtNzRhZi00YjcyLWJlY2Mt
ZjU3NjczODE2N2UxLzEvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi84OGU4ZjQtNzRhZi00YjcyLWJlY2MtZjU3NjczODE2N2Ux
LzEvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKe7CVxKR
pDK14Hf9lG9Ne8WySeeG0J00ZPCXSbuu2zBGOG/WmzwVIDTfNjzEPYJLD7sDd7Te
wupN/69evdwQlutPyLD0jcBTd6lgOJFCpRDjiPmcnsZicvfjCrEP8bqzmB8JiHPt
BIXHnlyfPp39voFTsn2+et676e2JhskhisGTXiFBmAACqjFvejQbtw8qDbtjevy3
vh+aBX9Csi6bzJkLg6bMXwPUJocgJ/kIMD7Od/pnPNAbxedMcWI+zBKbm6POC1yz
8mIV6x3fjvNGHmFOshaol9KID5Tk50gj12s5cosSCLtRuV/Y6DePAHZ7hBa5ZE0N
HfDBBIem8waiIw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 09:27:26 2026 by rpki-client