Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
File: U-8ohOShM1XbZJo0k1J8RCKJc7g.mft (raw, json)
Hash identifier: WXk9gOAQKo7yZSWunf8B84HdCfi+3iQDjTaNDn1O1uw=
Subject key identifier: D3:C0:E4:76:23:2E:AA:0B:DE:EB:EE:AA:F4:FA:D0:C5:20:8D:69:C6
Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8
Certificate serial: 019F9391BB71EA73D3248F2FE1CC149DB1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
Manifest number: 14C6
Signing time: Fri 24 Jul 2026 10:00:28 +0000
Manifest this update: Fri 24 Jul 2026 10:00:28 +0000
Manifest next update: Sat 25 Jul 2026 10:00:28 +0000
Files and hashes: 1: E-486E0-raIhh0cU7uEvlJrtVq8.roa (hash: vna5ocXCF4M8ZuD7JNv3pkr7ZzkpCUbGfeYWFBWtRTs=)
2: U-8ohOShM1XbZJo0k1J8RCKJc7g.crl (hash: 1OYY63a5vEyhbeyR39CTw8a6QCa9R6NenHaY+bVOXmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:bb:71:ea:73:d3:24:8f:2f:e1:cc:14:9d:b1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8
Validity
Not Before: Jul 24 10:00:28 2026 GMT
Not After : Jul 25 10:00:28 2026 GMT
Subject: CN=d3c0e476232eaa0bdeebeeaaf4fad0c5208d69c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:75:9a:e8:aa:92:bc:8b:e7:42:ad:bc:21:
4d:aa:00:32:3f:0e:7e:6d:e7:07:81:c6:3d:de:10:
e3:f5:0e:ce:f2:5a:24:88:3b:a5:90:1f:cd:09:78:
a5:ba:a1:3c:7d:bd:af:de:5f:09:18:e8:f8:0a:28:
88:b8:bd:28:93:02:d4:3c:05:7b:ce:d7:cc:a6:32:
68:e6:dd:1f:04:0d:b7:e0:35:aa:bd:4a:a9:63:5d:
97:89:a8:05:dc:4c:e4:e1:cf:91:ea:30:e6:88:b2:
fb:b6:a9:c0:e8:e8:de:2a:cc:eb:bb:7d:e2:0d:39:
05:04:36:67:6d:fa:af:f6:c4:f3:19:e9:c7:d9:50:
0a:1c:31:9d:49:90:ed:ff:b7:f7:8a:ea:9f:90:28:
76:aa:41:bf:fb:d4:31:2e:f3:f7:60:00:17:84:86:
5c:08:33:53:35:f4:27:d6:b4:8d:1d:95:40:c1:4f:
3c:14:f2:0f:5a:4f:46:ff:c1:0d:40:76:73:04:a4:
63:09:f6:b6:dc:e3:61:e9:ff:01:33:97:56:45:ba:
73:b7:19:0f:aa:dc:a4:9d:a8:e7:ff:d3:80:a3:aa:
24:10:89:1f:4d:a1:5b:db:c7:33:4b:a7:c2:87:14:
96:1c:70:48:5c:ff:b8:5a:52:67:9c:9b:86:56:5d:
13:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C0:E4:76:23:2E:AA:0B:DE:EB:EE:AA:F4:FA:D0:C5:20:8D:69:C6
X509v3 Authority Key Identifier:
keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:8a:36:99:a1:9d:7f:43:5a:83:44:e3:c7:10:c7:cd:e4:6b:
94:4f:23:16:36:ba:8e:92:5a:b9:85:eb:bf:f9:3c:ff:45:8e:
32:fd:ec:b9:e1:c7:f7:c5:81:a4:54:c1:cc:37:65:ee:af:76:
91:97:39:30:88:81:0e:fd:52:b2:7c:c6:22:7c:41:1a:4f:de:
cf:1e:21:ec:53:31:ac:a6:e3:ad:35:6f:76:99:4c:96:85:b6:
ca:b4:d0:d5:6a:b3:1c:f1:b9:2a:62:f4:92:ad:d3:a3:e0:86:
db:8e:26:aa:d6:95:0c:cf:f4:07:12:4a:2d:47:74:ab:43:4c:
71:b9:c6:85:44:a8:cb:4e:c3:f1:77:d6:fe:3a:c0:b8:83:06:
3b:4a:16:99:09:a3:42:84:d8:24:70:d6:80:d7:02:70:53:65:
41:3c:17:d7:bd:95:d2:c4:ee:b9:99:49:dd:03:82:a8:d5:ad:
ad:c4:02:c8:b8:5b:00:5f:18:fa:66:bc:de:f2:24:58:7b:27:
dd:88:82:a5:36:72:af:86:31:ea:86:00:a4:f2:0a:aa:2c:c9:
15:24:f0:ce:0a:17:1e:36:1d:0a:fd:58:07:6b:a7:fa:d3:80:
c2:fd:ac:c7:dc:a7:89:cc:bb:6d:0c:4f:af:6f:4a:17:60:26:
2e:78:e3:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Tkbtx6nPTJI8v4cwUnbH0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZWYyODg0ZTRhMTMzNTVkYjY0OWEzNDkzNTI3YzQ0MjI4
OTczYjgwHhcNMjYwNzI0MTAwMDI4WhcNMjYwNzI1MTAwMDI4WjAzMTEwLwYDVQQD
EyhkM2MwZTQ3NjIzMmVhYTBiZGVlYmVlYWFmNGZhZDBjNTIwOGQ2OWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM91muiqkryL50KtvCFNqgAyPw5+
becHgcY93hDj9Q7O8lokiDulkB/NCXiluqE8fb2v3l8JGOj4CiiIuL0okwLUPAV7
ztfMpjJo5t0fBA234DWqvUqpY12XiagF3Ezk4c+R6jDmiLL7tqnA6OjeKszru33i
DTkFBDZnbfqv9sTzGenH2VAKHDGdSZDt/7f3iuqfkCh2qkG/+9QxLvP3YAAXhIZc
CDNTNfQn1rSNHZVAwU88FPIPWk9G/8ENQHZzBKRjCfa23ONh6f8BM5dWRbpztxkP
qtyknajn/9OAo6okEIkfTaFb28czS6fChxSWHHBIXP+4WlJnnJuGVl0T7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPA5HYjLqoL3uvuqvT60MUgjWnGMB8GA1UdIwQY
MBaAFFPvKITkoTNV22SaNJNSfEQiiXO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xM2E1N2MtY2M0Zi00NWJjLWFmOWYt
OTM2N2U0MjM4OWQ5LzEvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xM2E1N2MtY2M0Zi00NWJjLWFmOWYtOTM2N2U0MjM4OWQ5
LzEvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYo2maGd
f0Nag0TjxxDHzeRrlE8jFja6jpJauYXrv/k8/0WOMv3sueHH98WBpFTBzDdl7q92
kZc5MIiBDv1SsnzGInxBGk/ezx4h7FMxrKbjrTVvdplMloW2yrTQ1WqzHPG5KmL0
kq3To+CG244mqtaVDM/0BxJKLUd0q0NMcbnGhUSoy07D8XfW/jrAuIMGO0oWmQmj
QoTYJHDWgNcCcFNlQTwX172V0sTuuZlJ3QOCqNWtrcQCyLhbAF8Y+ma83vIkWHsn
3YiCpTZyr4Yx6oYApPIKqizJFSTwzgoXHjYdCv1YB2un+tOAwv2sx9ynicy7bQxP
r29KF2AmLnjjjQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:07:28 2026 by rpki-client