Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
File: U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json)
Hash identifier: Q8QRyphPL4WdxO51CWCWikRgIvrI9kp/ZVRVjrzoYEg=
Subject key identifier: EB:4D:87:C1:21:6F:12:D0:63:03:0A:E9:1B:7D:CA:DE:5C:75:66:0F
Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Certificate serial: 019F943687DC485D807F2A93CA8BE22C7F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
Manifest number: 06AC
Signing time: Fri 24 Jul 2026 13:00:29 +0000
Manifest this update: Fri 24 Jul 2026 13:00:29 +0000
Manifest next update: Sat 25 Jul 2026 13:00:29 +0000
Files and hashes: 1: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: Kq24v5xh4CWm/TX+rUcS73kmku84ywUQyPsV5OKArwA=)
2: mVapMmHRdrNnHP7qEe61fUd9MJ4.roa (hash: 7gjqh37t5TbJMLovzwK7uE6PbR35tPIiZgeHv6oUC54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:87:dc:48:5d:80:7f:2a:93:ca:8b:e2:2c:7f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Validity
Not Before: Jul 24 13:00:29 2026 GMT
Not After : Jul 25 13:00:29 2026 GMT
Subject: CN=eb4d87c1216f12d063030ae91b7dcade5c75660f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:d7:45:04:5b:ac:60:d0:4b:d2:0d:9d:a6:
ba:c3:f4:14:d4:86:bd:79:11:44:0d:33:f0:80:9f:
2f:1a:3a:99:62:da:4f:90:96:c3:a6:d4:69:62:88:
e3:b3:7f:51:3f:3b:65:77:5d:b4:94:69:3c:fc:f2:
c7:ea:2e:f8:02:8e:27:ee:08:c7:96:4c:7b:85:ad:
92:1e:8c:f1:c8:47:96:a0:8e:54:b7:bc:89:5a:f1:
f1:1b:35:cf:ca:47:da:32:ec:a5:8b:54:56:e5:3e:
3f:d8:f2:f0:f5:2f:fe:ad:67:9c:53:59:02:85:ea:
c4:a5:dd:31:25:0c:89:2d:15:4e:c7:86:38:32:09:
f9:80:cf:6b:55:e3:b6:39:82:08:e4:d9:65:79:bc:
a1:3a:98:d5:4f:20:66:f5:e8:20:f7:c6:c2:0f:ec:
16:8c:fd:bd:29:32:64:de:89:40:74:64:1a:69:0d:
ec:25:35:f5:5c:2e:c9:ac:ff:ce:76:b7:f7:fb:31:
89:42:30:7d:ac:85:b2:8a:bf:ee:50:26:0c:a8:b4:
e8:c1:34:f8:74:0e:49:d8:76:59:b6:6e:e9:b7:d1:
a8:65:b0:74:8b:80:de:44:27:cc:9c:2e:ed:b4:5a:
7b:3a:7a:40:10:3b:90:c9:a4:14:e8:26:5a:e0:7f:
85:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4D:87:C1:21:6F:12:D0:63:03:0A:E9:1B:7D:CA:DE:5C:75:66:0F
X509v3 Authority Key Identifier:
keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:01:98:0e:ec:54:b2:a7:4b:b6:41:02:fc:de:65:f8:5d:a2:
99:0b:1c:76:c9:22:25:3e:5b:56:d0:3b:1c:ca:57:2e:ae:cd:
6f:4c:f7:86:74:d5:73:97:c4:70:cf:01:91:c7:06:48:08:d0:
46:c1:99:e5:f1:6c:76:4c:12:69:04:6c:e6:d4:77:34:72:fc:
94:a8:d2:46:f9:d2:8a:7e:2f:5d:15:ea:2b:5c:ca:5f:9f:23:
a3:c0:c8:4c:3f:71:b6:46:77:b7:8f:b7:bf:bf:4d:60:85:97:
2b:a2:76:8f:44:01:bc:46:1c:d8:dc:34:1d:96:c8:24:a1:3d:
d4:e9:45:5e:80:26:4f:3a:0c:c7:15:23:15:8e:40:c4:0e:03:
f1:ab:7f:28:bf:85:b8:e2:5e:68:55:a1:92:e0:d2:07:15:11:
9f:f4:8f:02:24:81:e3:d1:ba:d2:a0:fc:9b:82:f3:f8:50:c4:
08:58:7f:9f:09:c2:00:4a:45:93:3a:7d:e7:30:b7:eb:04:f8:
5d:5e:d0:8b:c3:22:f6:c7:db:0d:ec:a0:f9:8c:6d:49:cd:6c:
1c:3b:80:94:6a:35:74:78:12:6d:ad:34:16:19:5f:c7:a4:95:
c7:83:9a:21:c6:91:92:9f:0f:8a:19:b6:04:be:72:72:e3:7f:
ca:a2:7e:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UNofcSF2AfyqTyoviLH80MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzOThlYzNjMTViMTRmZDhhZDkxM2NiYjk1NjU3ZDhlYTgy
ZTdlMjUwHhcNMjYwNzI0MTMwMDI5WhcNMjYwNzI1MTMwMDI5WjAzMTEwLwYDVQQD
EyhlYjRkODdjMTIxNmYxMmQwNjMwMzBhZTkxYjdkY2FkZTVjNzU2NjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOfXRQRbrGDQS9INnaa6w/QU1Ia9
eRFEDTPwgJ8vGjqZYtpPkJbDptRpYojjs39RPztld120lGk8/PLH6i74Ao4n7gjH
lkx7ha2SHozxyEeWoI5Ut7yJWvHxGzXPykfaMuyli1RW5T4/2PLw9S/+rWecU1kC
herEpd0xJQyJLRVOx4Y4Mgn5gM9rVeO2OYII5NllebyhOpjVTyBm9egg98bCD+wW
jP29KTJk3olAdGQaaQ3sJTX1XC7JrP/Odrf3+zGJQjB9rIWyir/uUCYMqLTowTT4
dA5J2HZZtm7pt9GoZbB0i4DeRCfMnC7ttFp7OnpAEDuQyaQU6CZa4H+FoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtNh8EhbxLQYwMK6Rt9yt5cdWYPMB8GA1UdIwQY
MBaAFFOY7DwVsU/YrZE8u5VlfY6oLn4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84OGU4ZjQtNzRhZi00YjcyLWJlY2Mt
ZjU3NjczODE2N2UxLzEvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi84OGU4ZjQtNzRhZi00YjcyLWJlY2MtZjU3NjczODE2N2Ux
LzEvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwGYDuxU
sqdLtkEC/N5l+F2imQscdskiJT5bVtA7HMpXLq7Nb0z3hnTVc5fEcM8BkccGSAjQ
RsGZ5fFsdkwSaQRs5tR3NHL8lKjSRvnSin4vXRXqK1zKX58jo8DITD9xtkZ3t4+3
v79NYIWXK6J2j0QBvEYc2Nw0HZbIJKE91OlFXoAmTzoMxxUjFY5AxA4D8at/KL+F
uOJeaFWhkuDSBxURn/SPAiSB49G60qD8m4Lz+FDECFh/nwnCAEpFkzp95zC36wT4
XV7Qi8Mi9sfbDeyg+YxtSc1sHDuAlGo1dHgSba00Fhlfx6SVx4OaIcaRkp8Pihm2
BL5ycuN/yqJ+CA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:31:57 2026 by rpki-client