Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
File: uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft (raw, json)
Hash identifier: iS07+L/7BkN68PvjXuuG3l8JphAEFg0YNJSxSzIfyBo=
Subject key identifier: DA:31:6A:68:92:7E:99:AF:B4:4F:8F:6C:1C:DB:89:2A:FD:64:EE:74
Authority key identifier: BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD
Certificate issuer: /CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad
Certificate serial: 019DA48AEC0EEF7E915D8E446919FFBCC422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
Manifest number: 0744
Signing time: Sun 19 Apr 2026 07:01:00 +0000
Manifest this update: Sun 19 Apr 2026 07:01:00 +0000
Manifest next update: Mon 20 Apr 2026 07:01:00 +0000
Files and hashes: 1: oBChBHssUzYUcBfM7zouya2w7Xs.roa (hash: 672YmL+cLtseSafY7vPPp2vT+ULtUH/ebbvzsneaNTo=)
2: uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl (hash: vnfzyGhOHhlzhvzzjURNavWNATzw2LAkSmHeF1MzxpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:ec:0e:ef:7e:91:5d:8e:44:69:19:ff:bc:c4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad
Validity
Not Before: Apr 19 07:01:00 2026 GMT
Not After : Apr 20 07:01:00 2026 GMT
Subject: CN=da316a68927e99afb44f8f6c1cdb892afd64ee74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e4:75:6f:b2:ba:76:6d:34:60:54:03:51:33:
cf:f5:59:fb:96:71:56:9f:64:be:e5:90:78:b6:71:
26:5c:92:56:4e:79:49:d0:f9:0c:c8:78:2d:d1:e8:
50:16:e8:60:75:74:7b:93:35:25:3b:da:67:03:a0:
aa:7f:4a:0a:29:fe:cf:ef:81:30:9e:47:f7:30:9d:
8e:a1:c3:85:62:f5:7e:b8:02:57:8b:d4:a2:63:8c:
26:b1:a8:28:27:ce:40:30:ea:74:ee:6a:4a:b2:b9:
43:4d:4c:01:fc:dd:de:b6:6e:ff:c8:4e:9c:50:d0:
16:50:20:16:64:06:cd:85:34:6f:20:df:24:4a:90:
a0:e9:30:45:45:b9:c4:bb:b5:2f:b5:4d:0d:85:34:
81:e6:77:a6:0d:22:1f:68:d5:dd:1a:ba:55:3f:1a:
1f:5a:6f:58:4a:47:45:79:3d:83:25:f5:60:9c:fb:
b9:37:07:89:b7:29:53:bf:26:31:85:94:ae:31:61:
12:f0:2b:d6:f9:95:ae:33:07:fb:37:f6:f1:e9:0d:
bb:bf:3a:1c:07:b1:5d:52:37:1a:7f:11:26:1b:4a:
19:c7:06:b3:2f:41:21:ca:96:c1:e7:aa:4b:b6:30:
fe:2d:cd:35:15:75:7e:fa:08:d2:33:8a:b1:72:79:
5e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:31:6A:68:92:7E:99:AF:B4:4F:8F:6C:1C:DB:89:2A:FD:64:EE:74
X509v3 Authority Key Identifier:
keyid:BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:35:05:03:fd:fd:c5:05:9e:b9:25:e2:49:80:73:54:db:c0:
a5:e7:f3:13:8e:af:e2:ee:f6:a4:94:cc:a7:1e:9a:56:c7:0b:
41:96:20:59:d3:29:ea:31:9a:e9:87:4d:d3:00:7f:4f:61:f3:
f4:49:60:dd:88:cd:25:12:1a:b3:89:33:35:14:5a:df:48:b4:
ae:8e:4f:73:1f:2c:d5:6f:9f:00:c6:76:be:11:5c:d0:5d:d0:
4a:42:8d:0e:68:cc:91:ea:43:b8:ed:00:8b:04:20:d6:96:e4:
7d:0c:62:e4:c7:26:60:af:09:98:58:64:30:a3:47:08:da:18:
d5:f1:a0:40:28:89:af:1d:6b:ec:2c:ed:eb:0a:8a:5e:96:ed:
c9:41:33:09:54:b2:61:cd:7d:ce:f7:df:2d:54:8e:bc:b3:2f:
8e:55:ab:cb:f6:dc:2b:ea:bf:87:f5:64:a6:78:8f:0e:7d:5c:
4c:cc:76:a3:bc:36:fa:45:b1:72:db:3e:b3:ec:a7:c4:4d:94:
de:f3:09:81:87:50:18:69:e4:2e:44:df:e1:a6:d5:ac:72:f5:
18:db:97:97:c7:21:d5:a9:24:98:13:11:16:34:c3:f6:22:91:
28:84:ac:f2:e4:d1:e3:f5:7a:09:19:3b:b6:f3:0f:1d:85:d7:
2f:97:46:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kiuwO736RXY5EaRn/vMQiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhOGRhZDJjNGEwZTExN2E2ODY4YzhkNjdiZTEwMzA4YTY0
OTc0YWQwHhcNMjYwNDE5MDcwMTAwWhcNMjYwNDIwMDcwMTAwWjAzMTEwLwYDVQQD
EyhkYTMxNmE2ODkyN2U5OWFmYjQ0ZjhmNmMxY2RiODkyYWZkNjRlZTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseR1b7K6dm00YFQDUTPP9Vn7lnFW
n2S+5ZB4tnEmXJJWTnlJ0PkMyHgt0ehQFuhgdXR7kzUlO9pnA6Cqf0oKKf7P74Ew
nkf3MJ2OocOFYvV+uAJXi9SiY4wmsagoJ85AMOp07mpKsrlDTUwB/N3etm7/yE6c
UNAWUCAWZAbNhTRvIN8kSpCg6TBFRbnEu7UvtU0NhTSB5nemDSIfaNXdGrpVPxof
Wm9YSkdFeT2DJfVgnPu5NweJtylTvyYxhZSuMWES8CvW+ZWuMwf7N/bx6Q27vzoc
B7FdUjcafxEmG0oZxwazL0EhypbB56pLtjD+Lc01FXV++gjSM4qxcnleZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoxamiSfpmvtE+PbBzbiSr9ZO50MB8GA1UdIwQY
MBaAFLqNrSxKDhF6aGjI1nvhAwimSXStMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW8ydExFb09FWHBvYU1qV2UtRURDS1pKZEswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9mM2M1ZDgtNWVhNS00ODJlLTkzMWYt
MjljMDIzZjk0NzgxLzEvdW8ydExFb09FWHBvYU1qV2UtRURDS1pKZEswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9mM2M1ZDgtNWVhNS00ODJlLTkzMWYtMjljMDIzZjk0Nzgx
LzEvdW8ydExFb09FWHBvYU1qV2UtRURDS1pKZEswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzUFA/39
xQWeuSXiSYBzVNvApefzE46v4u72pJTMpx6aVscLQZYgWdMp6jGa6YdN0wB/T2Hz
9Elg3YjNJRIas4kzNRRa30i0ro5Pcx8s1W+fAMZ2vhFc0F3QSkKNDmjMkepDuO0A
iwQg1pbkfQxi5McmYK8JmFhkMKNHCNoY1fGgQCiJrx1r7Czt6wqKXpbtyUEzCVSy
Yc19zvffLVSOvLMvjlWry/bcK+q/h/VkpniPDn1cTMx2o7w2+kWxcts+s+ynxE2U
3vMJgYdQGGnkLkTf4abVrHL1GNuXl8ch1akkmBMRFjTD9iKRKISs8uTR4/V6CRk7
tvMPHYXXL5dGhA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:03 2026 by rpki-client