
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
File: urRT2Xui9KBFhD5rSpU7PlEG6vI.mft (raw, json)
Hash identifier: podr43vbexIQpdue1vCzGsU/kEa/d4MA25yqYAVuzPU=
Subject key identifier: 82:68:A2:E2:E3:F6:A4:1D:35:E3:5F:BD:2E:98:B8:25:6D:24:62:54
Authority key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
Certificate issuer: /CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Certificate serial: 019DA309FF2AC5E332CF0982A97822336446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
Manifest number: 18D3
Signing time: Sun 19 Apr 2026 00:00:34 +0000
Manifest this update: Sun 19 Apr 2026 00:00:34 +0000
Manifest next update: Mon 20 Apr 2026 00:00:34 +0000
Files and hashes: 1: urRT2Xui9KBFhD5rSpU7PlEG6vI.crl (hash: fRDwtoz9E37A7CUfhzKy8sc8wUYzz86Dw6bJtmLcpPo=)
2: y7cO-uvd-g6IKXPnSmNUZia9w1s.roa (hash: aa7Xz8229L+R/TET5wKLzyMqkiPkHrosbEK4nrHeitk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:09:ff:2a:c5:e3:32:cf:09:82:a9:78:22:33:64:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Validity
Not Before: Apr 19 00:00:34 2026 GMT
Not After : Apr 20 00:00:34 2026 GMT
Subject: CN=8268a2e2e3f6a41d35e35fbd2e98b8256d246254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:72:1e:74:24:da:81:fc:24:82:f4:29:48:a4:
1e:05:1f:e9:df:f9:b1:17:40:0d:2c:90:a9:d1:60:
63:71:3b:53:76:63:66:a5:2e:86:1f:22:6e:74:bd:
cd:5f:a5:2f:d7:44:c5:99:a1:1c:8c:56:ea:b9:0e:
d3:a3:b1:c9:bc:56:3e:c5:30:26:7f:ff:f0:e7:6f:
a0:12:c6:14:98:3e:5b:2c:41:e1:7c:f4:a4:69:ca:
c0:e9:ae:1c:b2:32:c4:39:ee:98:2b:af:65:ab:cb:
97:78:e9:78:72:7a:67:77:07:4b:23:a6:97:58:3f:
87:b2:00:15:eb:6c:cd:d1:24:90:9d:02:ed:ff:9f:
90:d2:06:8d:a6:a6:5f:99:2c:2f:16:fb:c3:1e:50:
4f:15:c2:ae:a4:46:a5:21:f8:4b:af:f0:a8:fe:ec:
5b:09:1e:bf:f3:a6:32:18:67:ac:be:ca:70:da:ea:
ba:19:2f:12:38:82:84:4c:e8:ef:e2:6e:76:9d:87:
b6:10:ea:0f:1c:aa:7c:f3:b0:bf:1d:99:b7:81:62:
0a:1b:9d:89:a5:20:d9:bd:41:34:71:53:b3:ba:19:
4d:4e:ba:40:29:ba:c1:e3:4d:38:b6:0c:0c:7b:94:
5a:a2:1f:2a:d7:c6:f1:83:42:20:4f:9d:50:6c:9a:
20:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:68:A2:E2:E3:F6:A4:1D:35:E3:5F:BD:2E:98:B8:25:6D:24:62:54
X509v3 Authority Key Identifier:
keyid:BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:13:fb:e2:2a:1b:3d:4e:20:ac:d9:e2:3d:30:35:eb:5a:70:
af:78:3a:f9:26:25:d1:d9:e8:24:92:b4:ab:47:4a:17:12:38:
37:b7:ae:b6:be:80:f7:a0:4d:7e:5a:a2:06:16:13:a6:e0:84:
c7:c6:60:d9:c0:de:7f:ef:38:3f:3f:5f:de:a2:81:66:84:c9:
91:a7:15:64:a8:ec:fe:91:02:59:38:65:5a:09:2b:a8:39:74:
1e:4a:13:64:f9:0e:dc:9c:87:8d:e9:2e:52:f8:2b:d8:dd:3e:
34:2b:c7:b7:2f:52:3e:d8:be:67:2e:88:4b:38:f7:18:31:8c:
1c:35:b1:c0:d7:47:0c:b1:29:76:27:37:b6:2d:31:06:eb:d9:
bf:44:4e:2f:ae:28:75:c6:aa:ed:43:be:63:06:75:31:1e:b6:
9d:08:34:17:75:4c:f6:93:ff:1d:7e:90:2d:df:84:81:14:40:
ed:8b:5e:29:62:60:d8:72:99:6f:f7:a5:1d:de:f8:15:f0:ff:
1f:a9:41:cf:f4:af:57:84:bc:d0:d3:d3:07:81:4d:75:81:d1:
f4:98:e1:bc:31:72:19:b2:7a:7b:ba:52:37:38:58:45:c4:10:
94:bb:08:71:c9:69:33:90:5e:03:b8:c3:46:c9:ae:52:7d:1f:
29:95:6e:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jCf8qxeMyzwmCqXgiM2RGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYjQ1M2Q5N2JhMmY0YTA0NTg0M2U2YjRhOTUzYjNlNTEw
NmVhZjIwHhcNMjYwNDE5MDAwMDM0WhcNMjYwNDIwMDAwMDM0WjAzMTEwLwYDVQQD
Eyg4MjY4YTJlMmUzZjZhNDFkMzVlMzVmYmQyZTk4YjgyNTZkMjQ2MjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXIedCTagfwkgvQpSKQeBR/p3/mx
F0ANLJCp0WBjcTtTdmNmpS6GHyJudL3NX6Uv10TFmaEcjFbquQ7To7HJvFY+xTAm
f//w52+gEsYUmD5bLEHhfPSkacrA6a4csjLEOe6YK69lq8uXeOl4cnpndwdLI6aX
WD+HsgAV62zN0SSQnQLt/5+Q0gaNpqZfmSwvFvvDHlBPFcKupEalIfhLr/Co/uxb
CR6/86YyGGesvspw2uq6GS8SOIKETOjv4m52nYe2EOoPHKp887C/HZm3gWIKG52J
pSDZvUE0cVOzuhlNTrpAKbrB4004tgwMe5Raoh8q18bxg0IgT51QbJoghwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJoouLj9qQdNeNfvS6YuCVtJGJUMB8GA1UdIwQY
MBaAFLq0U9l7ovSgRYQ+a0qVOz5RBuryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82NzAzY2EtY2VkNC00MjA3LWFiMDUt
NGE2ZjU1NzcxYmQxLzEvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82NzAzY2EtY2VkNC00MjA3LWFiMDUtNGE2ZjU1NzcxYmQx
LzEvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORP74iob
PU4grNniPTA161pwr3g6+SYl0dnoJJK0q0dKFxI4N7eutr6A96BNflqiBhYTpuCE
x8Zg2cDef+84Pz9f3qKBZoTJkacVZKjs/pECWThlWgkrqDl0HkoTZPkO3JyHjeku
Uvgr2N0+NCvHty9SPti+Zy6ISzj3GDGMHDWxwNdHDLEpdic3ti0xBuvZv0ROL64o
dcaq7UO+YwZ1MR62nQg0F3VM9pP/HX6QLd+EgRRA7YteKWJg2HKZb/elHd74FfD/
H6lBz/SvV4S80NPTB4FNdYHR9JjhvDFyGbJ6e7pSNzhYRcQQlLsIcclpM5BeA7jD
RsmuUn0fKZVuGw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:14:40 2026 by rpki-client