Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
File: UF4vLV5wk_-NQAOgK30-ExznChI.mft (raw, json)
Hash identifier: BRQ/xnH8CPGHIdplcgTZF1i9zxxv1AZ4OWhFWoEyfnk=
Subject key identifier: E3:93:05:D3:96:EA:A6:8C:50:91:57:4D:3A:AD:31:06:3F:74:8C:A4
Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
Certificate issuer: /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Certificate serial: 01A0E964ACC6B8869A5982B555C169AD4C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
Manifest number: 1108
Signing time: Mon 28 Sep 2026 19:01:23 +0000
Manifest this update: Mon 28 Sep 2026 19:01:23 +0000
Manifest next update: Tue 29 Sep 2026 19:01:23 +0000
Files and hashes: 1: BBEExDLi9wN2ArwpnoUathyZ5G4.roa (hash: DNC51vwYFelu0Iw03W6o2j0OpPGTm67rvC5dlIgn/R0=)
2: B_hvqyRv6JLmJCV1iTWTImKLqvw.roa (hash: TWMSz8xRjNA5aPk12IuqB7yBAlzSjyaKWTWQ7yxehNE=)
3: UF4vLV5wk_-NQAOgK30-ExznChI.crl (hash: zVn00BIwdv5zMpY1VnkDnqS9TSUkFSx7gmzS4XYCDT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:64:ac:c6:b8:86:9a:59:82:b5:55:c1:69:ad:4c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Validity
Not Before: Sep 28 19:01:23 2026 GMT
Not After : Sep 29 19:01:23 2026 GMT
Subject: CN=e39305d396eaa68c5091574d3aad31063f748ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:31:50:66:02:a6:72:3c:68:8c:20:4b:38:18:
2a:24:bb:6b:e9:51:21:7e:e4:ac:7c:c9:bd:a3:83:
0e:bb:3e:1a:25:da:c9:95:f3:5b:8f:94:30:5d:4c:
ac:26:88:28:b0:91:97:34:e7:48:6e:38:f8:00:72:
75:2b:1b:5b:62:4f:f2:db:91:28:f8:ce:22:e7:ea:
ae:fe:f1:9f:cd:af:fd:b4:27:f5:0f:9c:f3:4c:54:
8c:53:ad:b0:25:c1:2e:c1:8d:8e:5a:16:1a:5e:07:
2b:1a:a8:16:f2:e5:0f:64:5a:55:02:b3:66:09:d2:
96:aa:65:cc:89:5c:25:8d:a5:bd:40:de:1b:91:6c:
68:9d:ec:18:6e:26:bc:b6:12:8b:58:ef:36:f1:6b:
53:6d:67:2a:d9:01:cd:c9:15:54:c9:75:05:3b:a2:
ad:51:9a:14:4a:40:57:2c:3f:1c:9f:3c:96:aa:6e:
77:43:b9:2d:17:9c:3d:c4:b3:6c:12:81:05:7b:42:
a2:d6:cc:b4:33:78:a4:97:2e:80:fb:69:e1:49:94:
68:16:b6:05:02:71:f0:dd:09:9f:a9:5f:65:93:8f:
7f:d5:de:81:3c:32:65:2c:79:22:79:b6:4d:aa:3d:
91:92:c5:4d:67:24:e6:12:dd:f2:53:b3:d3:27:80:
c8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:93:05:D3:96:EA:A6:8C:50:91:57:4D:3A:AD:31:06:3F:74:8C:A4
X509v3 Authority Key Identifier:
keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:bc:86:1a:3e:c2:6d:91:81:fd:49:76:ed:8a:3d:45:93:6a:
7a:6e:4d:2a:72:85:6c:38:75:23:29:f9:0d:1c:73:e0:e0:2e:
bc:be:a1:39:7b:ed:3a:50:94:ec:16:3c:36:4e:91:3e:9a:ab:
54:5f:9a:d2:9b:16:4b:45:08:11:74:9a:ba:76:55:ec:a4:33:
b8:54:96:b9:21:f1:d6:da:47:9d:fe:94:ed:e7:d2:b4:10:9c:
aa:aa:ed:f4:a4:3d:9d:eb:ec:97:03:df:fe:7a:b3:13:e9:17:
34:1e:e9:f7:82:52:9f:55:d8:ad:7e:a1:34:c8:47:b4:7d:7a:
27:f2:55:32:2f:b7:46:80:04:3c:2d:19:cd:4d:82:3c:14:17:
1e:bd:ec:70:d1:b1:c0:c5:15:bf:7f:c0:7d:ce:68:fe:4b:9b:
87:37:d1:a2:11:57:15:be:44:65:7d:7f:45:e7:54:38:17:74:
79:9c:76:15:dd:06:24:7e:94:dc:e3:cf:48:4e:ee:be:84:a6:
49:ca:43:11:4f:64:f6:df:59:5a:e8:79:0d:b1:3b:67:f4:0a:
d8:c0:0f:06:ec:8f:cf:8d:9a:9f:d2:af:1d:03:70:42:5c:d5:
c9:fb:bf:04:63:c0:55:1d:be:15:1e:14:6f:62:5b:ee:91:3f:
15:47:6f:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDpZKzGuIaaWYK1VcFprUxbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNWUyZjJkNWU3MDkzZmY4ZDQwMDNhMDJiN2QzZTEzMWNl
NzBhMTIwHhcNMjYwOTI4MTkwMTIzWhcNMjYwOTI5MTkwMTIzWjAzMTEwLwYDVQQD
EyhlMzkzMDVkMzk2ZWFhNjhjNTA5MTU3NGQzYWFkMzEwNjNmNzQ4Y2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDFQZgKmcjxojCBLOBgqJLtr6VEh
fuSsfMm9o4MOuz4aJdrJlfNbj5QwXUysJogosJGXNOdIbjj4AHJ1KxtbYk/y25Eo
+M4i5+qu/vGfza/9tCf1D5zzTFSMU62wJcEuwY2OWhYaXgcrGqgW8uUPZFpVArNm
CdKWqmXMiVwljaW9QN4bkWxonewYbia8thKLWO828WtTbWcq2QHNyRVUyXUFO6Kt
UZoUSkBXLD8cnzyWqm53Q7ktF5w9xLNsEoEFe0Ki1sy0M3ikly6A+2nhSZRoFrYF
AnHw3QmfqV9lk49/1d6BPDJlLHkiebZNqj2RksVNZyTmEt3yU7PTJ4DIvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOTBdOW6qaMUJFXTTqtMQY/dIykMB8GA1UdIwQY
MBaAFFBeLy1ecJP/jUADoCt9PhMc5woSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUY0dkxWNXdrXy1OUUFPZ0szMC1FeHpuQ2hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81YTc3MzEtZWY1NC00NTAxLTg2ZjQt
OThlOWUyNTEwYmI2LzEvVUY0dkxWNXdrXy1OUUFPZ0szMC1FeHpuQ2hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC81YTc3MzEtZWY1NC00NTAxLTg2ZjQtOThlOWUyNTEwYmI2
LzEvVUY0dkxWNXdrXy1OUUFPZ0szMC1FeHpuQ2hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLyGGj7C
bZGB/Ul27Yo9RZNqem5NKnKFbDh1Iyn5DRxz4OAuvL6hOXvtOlCU7BY8Nk6RPpqr
VF+a0psWS0UIEXSaunZV7KQzuFSWuSHx1tpHnf6U7efStBCcqqrt9KQ9nevslwPf
/nqzE+kXNB7p94JSn1XYrX6hNMhHtH16J/JVMi+3RoAEPC0ZzU2CPBQXHr3scNGx
wMUVv3/Afc5o/kubhzfRohFXFb5EZX1/RedUOBd0eZx2Fd0GJH6U3OPPSE7uvoSm
ScpDEU9k9t9ZWuh5DbE7Z/QK2MAPBuyPz42an9KvHQNwQlzVyfu/BGPAVR2+FR4U
b2Jb7pE/FUdvNg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 22:56:23 2026 by rpki-client