Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
File: U-8ohOShM1XbZJo0k1J8RCKJc7g.mft (raw, json)
Hash identifier: 2uR/wwH/hkOePHm3IN+niBaEz+WPgS9DFIJttG+0CeY=
Subject key identifier: AE:EB:82:BE:3A:58:95:FF:50:BC:03:6F:96:7D:6E:F2:DC:FA:00:17
Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8
Certificate serial: 019E20C84C300DDD33E90F5DB34EB65D87E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
Manifest number: 1406
Signing time: Wed 13 May 2026 10:00:58 +0000
Manifest this update: Wed 13 May 2026 10:00:58 +0000
Manifest next update: Thu 14 May 2026 10:00:58 +0000
Files and hashes: 1: E-486E0-raIhh0cU7uEvlJrtVq8.roa (hash: vna5ocXCF4M8ZuD7JNv3pkr7ZzkpCUbGfeYWFBWtRTs=)
2: U-8ohOShM1XbZJo0k1J8RCKJc7g.crl (hash: xPK8JRfeP+GpjDJ7Ecbqzv6adOhp5vT3SJIYXzJmuD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:4c:30:0d:dd:33:e9:0f:5d:b3:4e:b6:5d:87:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8
Validity
Not Before: May 13 10:00:58 2026 GMT
Not After : May 14 10:00:58 2026 GMT
Subject: CN=aeeb82be3a5895ff50bc036f967d6ef2dcfa0017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:38:a2:b6:a1:d5:f0:37:96:80:d2:bb:b4:e4:
b6:0f:f7:74:c2:d3:c6:f8:88:4a:35:74:04:4c:6c:
ce:50:9e:af:c1:2d:96:2f:5c:00:1f:81:4b:7e:d1:
4a:d1:04:07:37:56:50:60:26:a0:08:bb:e7:83:57:
7e:5d:79:0e:0a:59:2f:e9:98:a0:77:51:c4:ad:2d:
b3:c5:eb:e9:50:6d:6b:d3:a6:3d:08:18:04:ae:01:
b8:13:64:50:f5:4e:ba:8e:1b:57:af:5f:e0:b3:7b:
16:75:f8:8d:40:f4:e9:76:9b:35:25:cb:17:d4:9c:
48:fc:c5:f9:26:97:6f:a4:5b:7a:a5:56:f8:c7:84:
93:63:23:53:97:24:a4:c2:77:e6:6a:2a:fd:4f:f1:
e6:2a:18:e0:e0:62:2e:d2:72:9c:c2:24:b8:56:95:
54:98:86:8f:f5:bd:0f:59:4d:40:1d:f8:f8:09:e8:
71:51:8d:9d:f0:7f:1f:86:4f:87:84:33:b0:4a:3e:
2d:d5:cc:96:53:c7:df:2d:47:61:94:04:0f:e5:de:
1e:f5:59:e2:f3:af:4f:bb:a7:88:6e:f3:c7:44:a2:
63:d0:15:e6:1b:9d:52:c7:ec:34:ba:98:58:ac:5c:
d9:13:eb:81:00:4d:b5:6c:dd:57:29:3d:7f:db:92:
e4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EB:82:BE:3A:58:95:FF:50:BC:03:6F:96:7D:6E:F2:DC:FA:00:17
X509v3 Authority Key Identifier:
keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:52:f3:f0:64:50:8a:a3:55:a9:9a:3f:2e:93:b1:23:d1:f7:
98:0f:36:20:26:b0:42:b4:28:f2:f4:f6:9c:1a:1b:52:06:e6:
a5:78:76:2f:b3:9f:3b:5b:8b:a2:55:f5:30:04:6f:b9:84:9a:
75:84:35:85:35:31:f1:6c:ca:4d:69:a1:98:92:a8:0b:1c:f5:
fa:87:65:8a:d2:dd:43:4e:96:38:68:6e:10:bf:19:4b:29:61:
1a:cc:a5:94:c6:3e:8d:bc:ed:56:4f:cb:54:03:70:84:b6:bb:
c9:30:e6:49:70:69:37:ce:ef:fb:03:6d:b1:be:87:42:6a:b3:
8c:50:c5:7b:01:8e:40:5a:43:4b:b1:f4:b9:68:fa:0c:ec:57:
f0:c4:12:34:bb:1f:43:63:6f:18:cc:f7:77:85:89:0a:21:18:
93:c6:ba:18:f7:50:31:96:f6:75:ef:c8:cf:61:cc:2b:b8:70:
0e:8b:42:5a:04:f9:7d:34:ee:4e:44:f8:bf:28:b6:a4:23:f9:
b6:0a:5f:87:e0:02:84:24:d8:80:6d:d3:04:53:a5:20:48:29:
e4:d3:44:75:9d:b6:18:53:18:4a:6a:03:86:31:97:f9:89:93:
c1:40:80:6b:81:ce:d8:e4:77:1a:6b:48:8a:e4:83:91:b0:fa:
03:3d:65:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gyEwwDd0z6Q9ds062XYfgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZWYyODg0ZTRhMTMzNTVkYjY0OWEzNDkzNTI3YzQ0MjI4
OTczYjgwHhcNMjYwNTEzMTAwMDU4WhcNMjYwNTE0MTAwMDU4WjAzMTEwLwYDVQQD
EyhhZWViODJiZTNhNTg5NWZmNTBiYzAzNmY5NjdkNmVmMmRjZmEwMDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDiitqHV8DeWgNK7tOS2D/d0wtPG
+IhKNXQETGzOUJ6vwS2WL1wAH4FLftFK0QQHN1ZQYCagCLvng1d+XXkOClkv6Zig
d1HErS2zxevpUG1r06Y9CBgErgG4E2RQ9U66jhtXr1/gs3sWdfiNQPTpdps1JcsX
1JxI/MX5JpdvpFt6pVb4x4STYyNTlySkwnfmair9T/HmKhjg4GIu0nKcwiS4VpVU
mIaP9b0PWU1AHfj4CehxUY2d8H8fhk+HhDOwSj4t1cyWU8ffLUdhlAQP5d4e9Vni
869Pu6eIbvPHRKJj0BXmG51Sx+w0uphYrFzZE+uBAE21bN1XKT1/25LkOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7rgr46WJX/ULwDb5Z9bvLc+gAXMB8GA1UdIwQY
MBaAFFPvKITkoTNV22SaNJNSfEQiiXO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xM2E1N2MtY2M0Zi00NWJjLWFmOWYt
OTM2N2U0MjM4OWQ5LzEvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xM2E1N2MtY2M0Zi00NWJjLWFmOWYtOTM2N2U0MjM4OWQ5
LzEvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1Lz8GRQ
iqNVqZo/LpOxI9H3mA82ICawQrQo8vT2nBobUgbmpXh2L7OfO1uLolX1MARvuYSa
dYQ1hTUx8WzKTWmhmJKoCxz1+odlitLdQ06WOGhuEL8ZSylhGsyllMY+jbztVk/L
VANwhLa7yTDmSXBpN87v+wNtsb6HQmqzjFDFewGOQFpDS7H0uWj6DOxX8MQSNLsf
Q2NvGMz3d4WJCiEYk8a6GPdQMZb2de/Iz2HMK7hwDotCWgT5fTTuTkT4vyi2pCP5
tgpfh+AChCTYgG3TBFOlIEgp5NNEdZ22GFMYSmoDhjGX+YmTwUCAa4HO2OR3GmtI
iuSDkbD6Az1l7Q==
-----END CERTIFICATE-----
Generated at Wed May 13 19:54:16 2026 by rpki-client