Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
File: urRT2Xui9KBFhD5rSpU7PlEG6vI.mft (raw, json)
Hash identifier: kJvthbgG6b/6r01HyClAwnA7JfU67v2obUDAHLKBqII=
Subject key identifier: 7A:28:1D:C8:F0:12:86:45:04:84:FC:56:18:48:F0:B9:E4:31:5B:EF
Authority key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
Certificate issuer: /CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Certificate serial: 019CABD959757F724C0B1DC5841DCC37C431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
Manifest number: 1853
Signing time: Mon 02 Mar 2026 00:01:13 +0000
Manifest this update: Mon 02 Mar 2026 00:01:13 +0000
Manifest next update: Tue 03 Mar 2026 00:01:13 +0000
Files and hashes: 1: urRT2Xui9KBFhD5rSpU7PlEG6vI.crl (hash: CVJXd4gVHlcVw9TeK+CUHvCFIRI6hClpoQ/DFCE5vvg=)
2: y7cO-uvd-g6IKXPnSmNUZia9w1s.roa (hash: aa7Xz8229L+R/TET5wKLzyMqkiPkHrosbEK4nrHeitk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:59:75:7f:72:4c:0b:1d:c5:84:1d:cc:37:c4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Validity
Not Before: Mar 2 00:01:13 2026 GMT
Not After : Mar 3 00:01:13 2026 GMT
Subject: CN=7a281dc8f01286450484fc561848f0b9e4315bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a9:38:4d:cf:a1:0d:e0:e6:cd:af:a7:b6:ce:
4f:d8:ee:43:e5:b9:25:48:2e:68:27:2f:12:d9:dc:
00:e5:c1:30:0a:0d:6d:8c:a1:57:8c:fa:d4:5e:c2:
a7:dd:70:f2:31:32:a5:be:a3:d2:51:8e:cd:93:fb:
0b:17:bc:82:c1:be:61:ea:38:c7:d9:34:7d:05:72:
83:18:4e:35:41:f0:90:4b:57:f2:75:8d:99:fd:7a:
54:62:5b:a4:23:33:07:c1:0a:b7:52:97:62:93:ca:
0e:a6:f1:41:ea:d8:68:98:cb:89:31:f9:fe:1f:e8:
fa:bc:7c:42:5f:77:bf:99:6c:34:61:f8:78:21:fa:
cd:15:23:e3:ab:6e:5b:7b:4d:96:a7:c7:9c:ca:58:
6c:07:6c:36:2c:33:4f:05:4a:7a:9f:f5:5f:7c:d0:
88:04:2c:3c:b9:25:86:e5:ba:28:ac:b5:01:5d:ea:
f1:d5:3f:91:29:b8:f9:39:53:60:7a:ba:11:b7:69:
40:f7:ba:e1:96:8e:e1:ec:dd:d7:c2:90:30:26:43:
ff:69:d9:66:63:d2:ac:3d:92:d1:ef:e0:1e:16:94:
19:6a:ca:9f:c9:5e:c0:7b:7a:7d:52:a3:2e:76:3b:
a3:98:25:42:a8:ec:10:1f:15:59:9b:9d:0b:46:47:
8a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:28:1D:C8:F0:12:86:45:04:84:FC:56:18:48:F0:B9:E4:31:5B:EF
X509v3 Authority Key Identifier:
keyid:BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:43:86:72:15:58:c1:63:9d:0a:51:e7:fe:27:cd:74:9a:35:
7a:df:82:9b:de:5d:e8:82:4a:07:12:28:61:57:09:f5:29:ba:
7a:69:fe:e6:f5:61:7d:43:fc:99:bf:5c:6f:d0:8c:fa:f3:5d:
0e:f2:9a:3e:9b:02:8a:72:9e:19:72:f9:4c:5e:28:95:fb:08:
24:fd:85:26:10:31:d5:2c:3e:d4:76:0e:df:f6:79:2c:da:8d:
38:0e:8f:a9:1b:14:47:86:cf:10:37:90:27:bf:16:cd:22:e6:
6b:c6:1d:06:97:ec:58:e1:7e:c6:84:91:9c:35:13:c7:62:27:
ec:df:ed:c6:48:6b:c1:d8:ac:32:b4:45:27:04:94:73:eb:40:
2c:24:0a:77:86:07:c7:76:c2:aa:6b:7b:2d:96:7a:dd:c9:ce:
dc:13:04:fd:70:fc:ea:5b:9b:58:b8:01:ec:f0:2b:7b:aa:3b:
e9:e7:12:6c:c1:de:44:92:0d:24:c0:5a:b5:54:a7:70:29:41:
2e:8d:d0:f4:c8:72:ed:f4:ae:ad:11:e8:dd:88:d7:0a:d5:f4:
dc:bf:2a:08:71:4a:7b:f1:a2:d3:cb:b5:53:98:2d:29:cf:63:
68:44:3d:a5:f8:63:75:e1:87:9e:fc:31:0b:e6:0a:5b:c0:84:
54:5d:6c:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2Vl1f3JMCx3FhB3MN8QxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYjQ1M2Q5N2JhMmY0YTA0NTg0M2U2YjRhOTUzYjNlNTEw
NmVhZjIwHhcNMjYwMzAyMDAwMTEzWhcNMjYwMzAzMDAwMTEzWjAzMTEwLwYDVQQD
Eyg3YTI4MWRjOGYwMTI4NjQ1MDQ4NGZjNTYxODQ4ZjBiOWU0MzE1YmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86k4Tc+hDeDmza+nts5P2O5D5bkl
SC5oJy8S2dwA5cEwCg1tjKFXjPrUXsKn3XDyMTKlvqPSUY7Nk/sLF7yCwb5h6jjH
2TR9BXKDGE41QfCQS1fydY2Z/XpUYlukIzMHwQq3Updik8oOpvFB6thomMuJMfn+
H+j6vHxCX3e/mWw0Yfh4IfrNFSPjq25be02Wp8ecylhsB2w2LDNPBUp6n/VffNCI
BCw8uSWG5boorLUBXerx1T+RKbj5OVNgeroRt2lA97rhlo7h7N3XwpAwJkP/adlm
Y9KsPZLR7+AeFpQZasqfyV7Ae3p9UqMudjujmCVCqOwQHxVZm50LRkeKgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHooHcjwEoZFBIT8VhhI8LnkMVvvMB8GA1UdIwQY
MBaAFLq0U9l7ovSgRYQ+a0qVOz5RBuryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82NzAzY2EtY2VkNC00MjA3LWFiMDUt
NGE2ZjU1NzcxYmQxLzEvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82NzAzY2EtY2VkNC00MjA3LWFiMDUtNGE2ZjU1NzcxYmQx
LzEvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckOGchVY
wWOdClHn/ifNdJo1et+Cm95d6IJKBxIoYVcJ9Sm6emn+5vVhfUP8mb9cb9CM+vNd
DvKaPpsCinKeGXL5TF4olfsIJP2FJhAx1Sw+1HYO3/Z5LNqNOA6PqRsUR4bPEDeQ
J78WzSLma8YdBpfsWOF+xoSRnDUTx2In7N/txkhrwdisMrRFJwSUc+tALCQKd4YH
x3bCqmt7LZZ63cnO3BME/XD86lubWLgB7PAre6o76ecSbMHeRJINJMBatVSncClB
Lo3Q9Mhy7fSurRHo3YjXCtX03L8qCHFKe/Gi08u1U5gtKc9jaEQ9pfhjdeGHnvwx
C+YKW8CEVF1sxw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:19 2026 by rpki-client