Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
File: U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json)
Hash identifier: RHCva3nYX09sGKQuS3/61MCNySOCVo+RpliNbGU6oGs=
Subject key identifier: 53:3C:34:78:BA:11:EF:D5:2C:1A:76:B1:3B:46:21:17:EC:AB:BB:BD
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial: 019F9135B02F000E93DD850A032250AD7615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
Manifest number: 1084
Signing time: Thu 23 Jul 2026 23:00:42 +0000
Manifest this update: Thu 23 Jul 2026 23:00:42 +0000
Manifest next update: Fri 24 Jul 2026 23:00:42 +0000
Files and hashes: 1: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: TqTRMhDMEY64nbqsO8AKRq9jrUZ0M+4R680m9X1nCsM=)
2: WzohaVzPLEBKuPQD-sbPCaZXcnQ.roa (hash: SIJFdx4blAk5vec/FV7gfH5KB998Y+98D4gZTEETEKk=)
3: nM6XYB2iwgJ17oTR8XmeIg2xI2M.roa (hash: 1o7tQyZeZiqzL+ktcifE7MOOMo51KCeyAAEwmbZDyZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:b0:2f:00:0e:93:dd:85:0a:03:22:50:ad:76:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Validity
Not Before: Jul 23 23:00:42 2026 GMT
Not After : Jul 24 23:00:42 2026 GMT
Subject: CN=533c3478ba11efd52c1a76b13b462117ecabbbbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:b4:f0:d6:d1:b6:1a:66:aa:37:50:97:f1:
85:7c:be:a8:fc:49:54:da:13:a5:c2:94:d1:39:4d:
4e:42:af:53:64:90:b2:29:d0:c6:fc:ca:c0:7a:0b:
6e:9b:8a:93:f3:9e:4b:d6:82:5d:ab:e3:88:fa:11:
3d:0f:5e:87:97:36:1e:d7:30:43:0c:68:87:f6:30:
30:a0:c0:ee:4a:9d:dd:6c:53:e2:e7:75:25:aa:c6:
9b:a1:57:38:c5:8b:6e:01:05:d7:51:09:be:e4:bb:
40:04:ea:a8:05:99:6c:cd:a1:10:63:f5:5c:fc:a8:
64:7a:4a:6b:ba:41:d0:a5:f2:97:84:28:1c:63:8d:
47:72:a3:db:8c:38:64:0c:29:53:df:26:9d:14:a2:
7a:9f:14:5d:fb:13:7c:aa:2f:cc:bb:d2:ae:90:22:
e2:3a:d8:4d:a9:3e:28:1e:d9:99:a6:0f:c6:98:bb:
a5:96:1e:01:eb:24:24:53:84:e2:2c:82:44:fc:a9:
3a:3f:5e:7e:00:f1:6f:5a:45:9f:71:d4:e9:c4:4a:
a5:d8:7d:b6:e9:c7:0d:0e:23:0e:e1:37:ba:0a:01:
21:e5:01:fb:76:fd:0a:f4:43:7f:b6:82:e7:a1:0b:
f3:5a:c3:cc:26:6c:e4:e8:28:3f:83:4c:79:77:d5:
82:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3C:34:78:BA:11:EF:D5:2C:1A:76:B1:3B:46:21:17:EC:AB:BB:BD
X509v3 Authority Key Identifier:
keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ad:9f:93:52:4b:0f:7a:f2:3a:13:24:5d:83:fb:79:12:4f:
85:aa:78:16:0e:73:3e:fd:ee:17:b5:0c:1c:3b:dc:92:bb:3f:
fa:da:f8:7a:c9:ca:ed:f5:56:83:d7:c4:11:01:0c:00:63:30:
27:ee:7c:52:7b:c7:19:34:85:2c:f8:c9:0c:96:c5:78:ef:88:
d7:ea:1c:7d:74:c7:9a:24:69:97:e1:30:8b:1f:01:34:e8:80:
c5:54:9f:19:f3:cc:7b:38:d3:80:c9:86:9f:6e:67:74:75:05:
01:79:e3:c1:0f:9c:3a:ae:78:4f:b5:6c:ee:4a:4e:90:75:5e:
5b:52:e8:da:d6:1e:ed:ec:0b:3d:e0:57:86:34:ce:ba:b8:2c:
10:14:8d:4d:bf:c3:6c:48:99:1a:72:ab:ba:e5:1d:2e:60:e4:
db:f5:00:3f:c2:48:22:11:3c:59:be:5e:44:7d:44:06:55:ea:
b6:fc:4c:4b:8a:e1:11:31:47:ba:ba:4e:73:b0:a2:17:73:64:
47:31:d2:6a:72:e0:66:fe:53:ef:87:27:77:b7:cf:4e:e4:aa:
68:81:86:ee:3e:06:1d:53:17:e3:cf:21:8e:af:90:be:aa:d4:
00:4c:a5:37:ed:42:25:56:c6:10:99:09:e5:0a:ef:0d:ef:00:
e5:70:9b:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNbAvAA6T3YUKAyJQrXYVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzOTNhYjkzZTg1NzAxYTczZWY0ZDVlMDBlZDZlYjk4OTM5
MzczOTQwHhcNMjYwNzIzMjMwMDQyWhcNMjYwNzI0MjMwMDQyWjAzMTEwLwYDVQQD
Eyg1MzNjMzQ3OGJhMTFlZmQ1MmMxYTc2YjEzYjQ2MjExN2VjYWJiYmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYC08NbRthpmqjdQl/GFfL6o/ElU
2hOlwpTROU1OQq9TZJCyKdDG/MrAegtum4qT855L1oJdq+OI+hE9D16HlzYe1zBD
DGiH9jAwoMDuSp3dbFPi53UlqsaboVc4xYtuAQXXUQm+5LtABOqoBZlszaEQY/Vc
/KhkekprukHQpfKXhCgcY41HcqPbjDhkDClT3yadFKJ6nxRd+xN8qi/Mu9KukCLi
OthNqT4oHtmZpg/GmLullh4B6yQkU4TiLIJE/Kk6P15+APFvWkWfcdTpxEql2H22
6ccNDiMO4Te6CgEh5QH7dv0K9EN/toLnoQvzWsPMJmzk6Cg/g0x5d9WCqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFM8NHi6Ee/VLBp2sTtGIRfsq7u9MB8GA1UdIwQY
MBaAFFOTq5PoVwGnPvTV4A7W65iTk3OUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hZDc2NjItNzNmZi00NTk0LThlMzAt
NTlhN2VmZDM4NGMwLzEvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hZDc2NjItNzNmZi00NTk0LThlMzAtNTlhN2VmZDM4NGMw
LzEvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADa2fk1JL
D3ryOhMkXYP7eRJPhap4Fg5zPv3uF7UMHDvckrs/+tr4esnK7fVWg9fEEQEMAGMw
J+58UnvHGTSFLPjJDJbFeO+I1+ocfXTHmiRpl+Ewix8BNOiAxVSfGfPMezjTgMmG
n25ndHUFAXnjwQ+cOq54T7Vs7kpOkHVeW1Lo2tYe7ewLPeBXhjTOurgsEBSNTb/D
bEiZGnKruuUdLmDk2/UAP8JIIhE8Wb5eRH1EBlXqtvxMS4rhETFHurpOc7CiF3Nk
RzHSanLgZv5T74cnd7fPTuSqaIGG7j4GHVMX488hjq+QvqrUAEylN+1CJVbGEJkJ
5QrvDe8A5XCbEg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:18:08 2026 by rpki-client