
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.mft
File: U9xdTpyQVzxt330Ay-iy7aQT_IY.mft (raw, json)
Hash identifier: H33gr2sBXUmPXdCM2UAOBGC9/6PJXtfPgkg2k/DHcP0=
Subject key identifier: B6:CD:DE:59:70:14:4A:F9:5D:DE:E4:B7:F2:52:40:5C:15:FF:EB:17
Authority key identifier: 53:DC:5D:4E:9C:90:57:3C:6D:DF:7D:00:CB:E8:B2:ED:A4:13:FC:86
Certificate issuer: /CN=53dc5d4e9c90573c6ddf7d00cbe8b2eda413fc86
Certificate serial: 019F8FB5C82EE84358085D092324F121918B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9xdTpyQVzxt330Ay-iy7aQT_IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.mft
Manifest number: 017E
Signing time: Thu 23 Jul 2026 16:01:22 +0000
Manifest this update: Thu 23 Jul 2026 16:01:22 +0000
Manifest next update: Fri 24 Jul 2026 16:01:22 +0000
Files and hashes: 1: PsU7x_frD08SU2YYN4xYvGI8q1E.roa (hash: k6MudYJE0V8N7WpGxi22h24h9nGg9VIaakZ/jcGCILw=)
2: U9xdTpyQVzxt330Ay-iy7aQT_IY.crl (hash: DH3LEAffBsQM/jd5Ayy+Z4XdS7no6c+/8eM8GuBz5zs=)
3: fOZ6kY7go8H3U7EGMazIlVOf4S8.asa (hash: ZG2DRjQ6yjHyZJgJZLq1YZ9mSn6uEwFWnifyu/zanYY=)
4: xOttd6TpxOr24A9NYb5gHM_31mk.roa (hash: acecs5fYnCii+jIlRbpWYRX+vj6OKx+EgPOK7cU5+y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9xdTpyQVzxt330Ay-iy7aQT_IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:c8:2e:e8:43:58:08:5d:09:23:24:f1:21:91:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53dc5d4e9c90573c6ddf7d00cbe8b2eda413fc86
Validity
Not Before: Jul 23 16:01:22 2026 GMT
Not After : Jul 24 16:01:22 2026 GMT
Subject: CN=b6cdde5970144af95ddee4b7f252405c15ffeb17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:86:94:47:9d:0d:08:73:4c:5b:aa:f6:70:1d:
84:fa:04:ec:a9:3f:7a:9b:d4:c3:72:cb:02:46:88:
f9:ca:7f:dc:8e:c8:f0:94:07:61:f5:f3:04:94:c7:
5f:a2:0c:2f:d8:ae:3a:f0:41:32:64:96:25:b4:41:
ac:32:4e:04:0b:75:75:c8:75:d4:82:d0:05:64:95:
c8:5a:c0:53:b0:44:41:f9:e7:3c:0d:76:6b:ab:b2:
e0:6e:9f:93:54:e9:65:05:57:22:ee:5a:89:ce:22:
c5:9b:21:d1:8c:96:50:d0:48:6f:f8:de:b5:43:11:
8e:6c:2a:9e:1d:a9:53:5d:41:20:c9:8c:12:3a:78:
98:dd:4f:92:ff:78:7b:ef:d0:ec:d2:c7:a9:bb:57:
13:bd:0e:31:5c:9a:2c:99:3d:05:16:0d:06:7b:15:
56:f4:06:5d:8b:47:b5:0a:64:d0:54:a3:f7:86:9e:
a6:b2:3a:23:ec:2e:97:6b:2b:b9:a1:a8:27:bc:e2:
2b:9c:ed:bf:63:b6:b1:e5:46:8a:79:0c:01:22:a6:
11:d4:a4:73:a7:23:32:bb:e7:f1:e8:cd:49:d4:e8:
02:cc:19:67:c0:6a:a2:bd:e6:d2:49:ce:6d:88:04:
2a:b9:36:c7:43:d9:b5:ee:6a:e4:dd:82:4f:dc:84:
d4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CD:DE:59:70:14:4A:F9:5D:DE:E4:B7:F2:52:40:5C:15:FF:EB:17
X509v3 Authority Key Identifier:
keyid:53:DC:5D:4E:9C:90:57:3C:6D:DF:7D:00:CB:E8:B2:ED:A4:13:FC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9xdTpyQVzxt330Ay-iy7aQT_IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9c:fc:5e:f0:e3:c3:4b:1a:da:38:91:95:ef:dc:7b:60:34:
2c:48:ba:05:bb:f0:29:33:ad:24:e4:c9:be:d7:4c:00:af:cb:
37:0b:da:13:eb:c1:8c:45:3b:bb:82:71:e1:41:1c:1a:94:32:
ff:78:19:04:e8:e0:47:22:c3:a3:72:ec:2a:4d:26:d6:fe:cc:
70:fa:5f:56:3a:5c:80:d5:2d:a1:75:0e:5e:f3:76:78:65:81:
5e:1d:9e:11:f3:9a:0b:02:9c:da:4e:e8:9b:3f:a5:78:54:dc:
ac:fb:64:ec:46:00:c5:a7:e8:d4:cb:d0:36:bb:70:a5:70:c9:
2e:eb:9e:40:e4:6c:c1:72:f5:29:01:db:b0:7a:b3:6c:1d:0e:
d6:ac:85:43:12:de:00:25:31:9a:eb:ee:be:11:fb:57:5a:58:
00:7d:2a:4f:a8:d0:7d:e2:50:aa:ff:f8:bc:25:74:ef:b8:38:
a2:a6:25:fb:88:7d:09:a1:30:b1:59:4f:f9:91:cf:bd:ad:70:
c9:40:29:18:e2:bc:2d:72:13:b4:8d:ba:ae:d1:51:2e:6b:92:
00:ea:df:45:4b:27:5a:ca:22:fe:e3:56:0d:88:b6:26:5b:23:
27:28:65:e7:f8:f7:f1:45:06:3e:f4:d7:fb:58:f3:5a:31:4d:
43:40:9a:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ptcgu6ENYCF0JIyTxIZGLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZGM1ZDRlOWM5MDU3M2M2ZGRmN2QwMGNiZThiMmVkYTQx
M2ZjODYwHhcNMjYwNzIzMTYwMTIyWhcNMjYwNzI0MTYwMTIyWjAzMTEwLwYDVQQD
EyhiNmNkZGU1OTcwMTQ0YWY5NWRkZWU0YjdmMjUyNDA1YzE1ZmZlYjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoaUR50NCHNMW6r2cB2E+gTsqT96
m9TDcssCRoj5yn/cjsjwlAdh9fMElMdfogwv2K468EEyZJYltEGsMk4EC3V1yHXU
gtAFZJXIWsBTsERB+ec8DXZrq7Lgbp+TVOllBVci7lqJziLFmyHRjJZQ0Ehv+N61
QxGObCqeHalTXUEgyYwSOniY3U+S/3h779Ds0sepu1cTvQ4xXJosmT0FFg0GexVW
9AZdi0e1CmTQVKP3hp6msjoj7C6Xayu5oagnvOIrnO2/Y7ax5UaKeQwBIqYR1KRz
pyMyu+fx6M1J1OgCzBlnwGqivebSSc5tiAQquTbHQ9m17mrk3YJP3ITUVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbN3llwFEr5Xd7kt/JSQFwV/+sXMB8GA1UdIwQY
MBaAFFPcXU6ckFc8bd99AMvosu2kE/yGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTl4ZFRweVFWenh0MzMwQXktaXk3YVFUX0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84NmVjZjEtOGFhZi00NmM2LTk1MWQt
YWQ2NjcyMmQzNDllLzEvVTl4ZFRweVFWenh0MzMwQXktaXk3YVFUX0lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC84NmVjZjEtOGFhZi00NmM2LTk1MWQtYWQ2NjcyMmQzNDll
LzEvVTl4ZFRweVFWenh0MzMwQXktaXk3YVFUX0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZz8XvDj
w0sa2jiRle/ce2A0LEi6BbvwKTOtJOTJvtdMAK/LNwvaE+vBjEU7u4Jx4UEcGpQy
/3gZBOjgRyLDo3LsKk0m1v7McPpfVjpcgNUtoXUOXvN2eGWBXh2eEfOaCwKc2k7o
mz+leFTcrPtk7EYAxafo1MvQNrtwpXDJLuueQORswXL1KQHbsHqzbB0O1qyFQxLe
ACUxmuvuvhH7V1pYAH0qT6jQfeJQqv/4vCV077g4oqYl+4h9CaEwsVlP+ZHPva1w
yUApGOK8LXITtI26rtFRLmuSAOrfRUsnWsoi/uNWDYi2JlsjJyhl5/j38UUGPvTX
+1jzWjFNQ0Ca8Q==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:41 2026 by rpki-client