Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
File: U1UECuknhr8XJ7a07MEJO4p0Aes.mft (raw, json)
Hash identifier: sN47hqWbxdLCLg16aepr5TSvS7CI91MgvL4GdjbDgvM=
Subject key identifier: A4:5A:97:95:E0:B3:87:D8:45:16:61:06:49:95:1B:FA:7E:29:38:5A
Authority key identifier: 53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
Certificate issuer: /CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Certificate serial: 019F932417916575E7B09AAD2DD62F7DF507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
Manifest number: 0E2A
Signing time: Fri 24 Jul 2026 08:00:43 +0000
Manifest this update: Fri 24 Jul 2026 08:00:43 +0000
Manifest next update: Sat 25 Jul 2026 08:00:43 +0000
Files and hashes: 1: U1UECuknhr8XJ7a07MEJO4p0Aes.crl (hash: oIxReX4i3SbK4tf7SfyVSU0YdYglxkln7cnpsMnKK4o=)
2: hb1tf1cv2DqeNoOeMed75lCHkr0.roa (hash: 2osj3Tca5M4y8jWIziarmiD4CXLpdYxZP6w7GJCWBu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:17:91:65:75:e7:b0:9a:ad:2d:d6:2f:7d:f5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Validity
Not Before: Jul 24 08:00:43 2026 GMT
Not After : Jul 25 08:00:43 2026 GMT
Subject: CN=a45a9795e0b387d84516610649951bfa7e29385a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:38:89:db:26:94:18:98:d2:5e:f9:8c:a9:
18:d9:2b:0b:f7:1a:2f:3c:e6:68:41:e7:6f:5f:87:
e2:2e:40:72:08:e0:94:d0:62:b2:75:ba:f9:d5:ca:
0f:f2:65:4f:b8:d9:5e:2d:f9:a6:8c:06:b3:e8:78:
7e:48:34:46:f9:00:7c:8e:46:34:95:93:37:90:dc:
be:be:19:37:64:5e:a3:ee:8b:2e:45:8f:96:f6:a2:
e7:c8:12:53:a5:2b:59:38:24:c8:26:18:18:6c:ec:
17:c6:89:4e:b8:93:c7:4f:08:c3:e4:41:8c:47:c3:
e9:68:22:3e:00:e3:80:b5:74:ea:dd:c6:99:73:ad:
76:15:0a:ce:7d:ca:61:41:aa:7a:a1:55:eb:8c:bd:
a5:71:20:4e:64:ce:06:88:94:55:60:89:4d:b7:e5:
1f:1b:73:c9:aa:99:4e:95:c5:64:91:3d:98:d3:6c:
e2:20:76:50:9a:08:bd:4c:5e:f6:b2:02:b1:1b:4f:
1b:1c:02:e5:d0:a3:df:6e:e5:44:db:e9:d8:c0:79:
bb:cf:ad:c5:01:dc:02:24:8e:84:fe:c5:15:0b:85:
eb:67:c2:fb:2c:59:df:81:bd:7e:1b:86:cd:9b:f2:
00:0f:ad:98:e7:76:43:2e:28:98:12:8e:9c:18:d5:
5b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5A:97:95:E0:B3:87:D8:45:16:61:06:49:95:1B:FA:7E:29:38:5A
X509v3 Authority Key Identifier:
keyid:53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:06:ef:ed:c1:f4:5f:3f:8f:66:5f:84:fe:46:da:11:50:7f:
bc:09:a4:83:99:99:f5:c5:84:ff:50:d4:df:03:fb:9e:ca:3e:
52:67:a4:9d:41:bb:31:4b:db:75:e0:a8:bc:0d:06:12:a0:62:
4e:82:2d:2c:ad:33:97:b8:f9:71:f3:70:7b:d4:e2:1f:e2:9f:
5e:89:d5:c9:a2:f5:54:24:d4:cc:a4:af:1f:d7:6b:0b:c2:99:
07:43:43:68:6c:7e:96:9e:33:a5:52:e6:47:24:b8:13:09:40:
73:8f:e1:1f:24:63:8e:11:8f:1b:c2:b2:17:57:0e:ff:a0:0a:
6d:7c:e7:60:76:e7:84:8b:d3:84:bc:9b:4a:0e:0f:38:72:63:
b0:b1:4d:40:d7:1c:61:4b:36:d2:1c:2f:50:53:bb:77:99:a1:
fc:51:56:89:8c:eb:19:1b:35:e0:a6:e6:a7:f8:27:9f:63:3d:
60:f1:30:e1:98:da:d2:54:d9:16:e6:15:25:03:f8:ac:54:d6:
d9:4c:c5:e9:77:be:86:5e:56:3b:30:ce:2a:9e:30:8a:50:46:
4e:f3:96:a3:2d:d1:d9:30:9e:33:fb:2f:93:c8:51:dd:77:96:
be:b4:98:df:e9:fc:1d:e9:8b:f4:69:c8:05:07:1b:af:f1:8a:
bb:51:47:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TJBeRZXXnsJqtLdYvffUHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNTUwNDBhZTkyNzg2YmYxNzI3YjZiNGVjYzEwOTNiOGE3
NDAxZWIwHhcNMjYwNzI0MDgwMDQzWhcNMjYwNzI1MDgwMDQzWjAzMTEwLwYDVQQD
EyhhNDVhOTc5NWUwYjM4N2Q4NDUxNjYxMDY0OTk1MWJmYTdlMjkzODVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4Q4idsmlBiY0l75jKkY2SsL9xov
POZoQedvX4fiLkByCOCU0GKydbr51coP8mVPuNleLfmmjAaz6Hh+SDRG+QB8jkY0
lZM3kNy+vhk3ZF6j7osuRY+W9qLnyBJTpStZOCTIJhgYbOwXxolOuJPHTwjD5EGM
R8PpaCI+AOOAtXTq3caZc612FQrOfcphQap6oVXrjL2lcSBOZM4GiJRVYIlNt+Uf
G3PJqplOlcVkkT2Y02ziIHZQmgi9TF72sgKxG08bHALl0KPfbuVE2+nYwHm7z63F
AdwCJI6E/sUVC4XrZ8L7LFnfgb1+G4bNm/IAD62Y53ZDLiiYEo6cGNVbxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRal5Xgs4fYRRZhBkmVG/p+KThaMB8GA1UdIwQY
MBaAFFNVBArpJ4a/Fye2tOzBCTuKdAHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFVRUN1a25ocjhYSjdhMDdNRUpPNHAwQWVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9hZjU2NTctYzhiMi00ODU1LTgyYTct
MWRkNTdlM2YzZDk3LzEvVTFVRUN1a25ocjhYSjdhMDdNRUpPNHAwQWVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9hZjU2NTctYzhiMi00ODU1LTgyYTctMWRkNTdlM2YzZDk3
LzEvVTFVRUN1a25ocjhYSjdhMDdNRUpPNHAwQWVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgbv7cH0
Xz+PZl+E/kbaEVB/vAmkg5mZ9cWE/1DU3wP7nso+UmeknUG7MUvbdeCovA0GEqBi
ToItLK0zl7j5cfNwe9TiH+KfXonVyaL1VCTUzKSvH9drC8KZB0NDaGx+lp4zpVLm
RyS4EwlAc4/hHyRjjhGPG8KyF1cO/6AKbXznYHbnhIvThLybSg4POHJjsLFNQNcc
YUs20hwvUFO7d5mh/FFWiYzrGRs14Kbmp/gnn2M9YPEw4Zja0lTZFuYVJQP4rFTW
2UzF6Xe+hl5WOzDOKp4wilBGTvOWoy3R2TCeM/svk8hR3XeWvrSY3+n8HemL9GnI
BQcbr/GKu1FHUg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:51 2026 by rpki-client