Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
File: uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft (raw, json)
Hash identifier: p1QokdqHFZj7Mr9OP5Ktb3LcXu6r8o11Id22Qfvja0U=
Subject key identifier: E9:33:86:2E:43:CA:76:2B:47:F7:4C:2B:23:23:80:9A:B4:42:37:EC
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial: 019D9B50A0E51668DEE4A5AE961015E858CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
Manifest number: 06B4
Signing time: Fri 17 Apr 2026 12:00:45 +0000
Manifest this update: Fri 17 Apr 2026 12:00:45 +0000
Manifest next update: Sat 18 Apr 2026 12:00:45 +0000
Files and hashes: 1: 845se0I5w_ABtHgN1jpZJhRDX2U.roa (hash: XtKaLfEk8dB6Tywis/naWcuQfxkanpJ2MfBAflauD8s=)
2: s28CR1gLazBENQfv0iRlHI-K3WE.roa (hash: Tp9gbqVHSFtjO/KmeIi7tCsMEDD0ASIghsoQ31CGOes=)
3: uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl (hash: KYrVyaFkW7FwqjQ0t50D0FPQTI4swfh05EuKBzFwLQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:a0:e5:16:68:de:e4:a5:ae:96:10:15:e8:58:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Validity
Not Before: Apr 17 12:00:45 2026 GMT
Not After : Apr 18 12:00:45 2026 GMT
Subject: CN=e933862e43ca762b47f74c2b2323809ab44237ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2e:26:c4:8a:85:58:01:16:18:cf:42:0e:bf:
5d:0c:85:11:e5:b5:be:b3:99:c5:3f:cc:dc:d1:8e:
ab:a8:5a:e8:0e:de:c9:d9:a0:ba:14:d1:bb:82:a9:
f5:14:a4:c5:d7:3e:86:de:fe:fa:b2:3e:91:94:5c:
3a:d6:7a:e1:8d:79:f0:61:2b:9b:d2:ce:92:22:0b:
21:8f:12:e1:71:e7:b9:f1:7c:a1:0f:cd:3e:48:9a:
d9:04:d8:aa:d7:8c:b2:43:90:6e:99:88:a3:69:5b:
15:c5:d9:cd:2c:4a:0e:23:2f:fd:e7:4f:bc:84:11:
00:2c:2e:e1:b4:5e:fb:70:6a:93:2c:86:51:ac:89:
13:ae:4b:6f:12:b5:0d:0d:d0:85:03:3e:3a:7d:e4:
20:04:c1:36:f3:08:b0:f6:b1:ab:cd:67:e4:fd:09:
0a:d0:bd:1c:cf:d7:14:84:fa:22:29:37:5e:16:55:
a5:42:6f:f8:f3:a4:d9:4d:35:5c:b0:10:7f:bb:e5:
35:27:c4:bb:ee:fb:eb:56:e2:6e:c0:11:a9:d2:0c:
37:1d:54:5b:64:56:88:8c:49:65:1f:e7:1e:1a:41:
2a:30:da:26:6d:3d:a5:41:df:9a:ae:c1:0c:62:9b:
36:ca:a6:42:75:0d:b3:2f:ba:4e:6c:b8:8c:a4:aa:
8b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:33:86:2E:43:CA:76:2B:47:F7:4C:2B:23:23:80:9A:B4:42:37:EC
X509v3 Authority Key Identifier:
keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bd:5a:32:5a:03:2e:b4:c6:74:97:a5:a3:5e:0a:79:1e:af:
a8:42:20:67:0e:c7:8d:ba:68:71:c7:58:54:9d:f4:81:dc:90:
fb:3e:1f:fb:5e:0e:30:e7:51:e6:05:cc:08:90:60:a2:48:62:
96:24:11:27:66:83:a8:fa:c0:d0:cf:6d:05:0e:ea:9e:2a:53:
de:09:ef:c0:50:f4:c6:c6:60:d1:d2:1e:89:ce:4f:69:2d:35:
2a:57:74:15:84:2f:17:99:20:3a:97:e8:bf:3e:80:6c:a7:35:
88:58:11:85:b7:e8:27:4c:71:7a:c7:ad:10:8e:68:20:9b:38:
0e:f8:ed:1a:e4:ef:1a:87:ff:ea:a7:b8:46:21:6d:04:19:0f:
84:be:fc:4d:cb:6a:81:74:55:49:99:79:1b:f1:24:ba:bb:34:
5a:38:00:4b:1c:57:d4:09:bb:32:f8:5c:d3:56:1f:dc:a6:d8:
f0:7a:48:1d:55:5b:1e:4b:45:bc:7c:ba:ff:ee:2c:b2:94:e5:
e1:5a:f9:ca:40:b1:5f:e4:95:7d:fb:5e:93:91:cc:21:20:87:
71:79:1d:32:1c:56:63:22:42:66:63:3f:24:a4:3b:cf:b5:8e:
f8:b8:99:78:8b:fd:55:87:8c:52:91:7d:f3:3e:ea:d4:60:2d:
df:39:b4:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUKDlFmje5KWulhAV6FjMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5M2Q0OTA4ZDljNDNhODVmODViZTE5MzM0YTI2ZjVkNTEz
NTBiY2IwHhcNMjYwNDE3MTIwMDQ1WhcNMjYwNDE4MTIwMDQ1WjAzMTEwLwYDVQQD
EyhlOTMzODYyZTQzY2E3NjJiNDdmNzRjMmIyMzIzODA5YWI0NDIzN2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS4mxIqFWAEWGM9CDr9dDIUR5bW+
s5nFP8zc0Y6rqFroDt7J2aC6FNG7gqn1FKTF1z6G3v76sj6RlFw61nrhjXnwYSub
0s6SIgshjxLhcee58XyhD80+SJrZBNiq14yyQ5BumYijaVsVxdnNLEoOIy/950+8
hBEALC7htF77cGqTLIZRrIkTrktvErUNDdCFAz46feQgBME28wiw9rGrzWfk/QkK
0L0cz9cUhPoiKTdeFlWlQm/486TZTTVcsBB/u+U1J8S77vvrVuJuwBGp0gw3HVRb
ZFaIjEllH+ceGkEqMNombT2lQd+arsEMYps2yqZCdQ2zL7pObLiMpKqLAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkzhi5DynYrR/dMKyMjgJq0QjfsMB8GA1UdIwQY
MBaAFLk9SQjZxDqF+FvhkzSib11RNQvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAt
NTI4NzQ2MTFjZDIxLzEvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAtNTI4NzQ2MTFjZDIx
LzEvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC71aMloD
LrTGdJelo14KeR6vqEIgZw7HjbpoccdYVJ30gdyQ+z4f+14OMOdR5gXMCJBgokhi
liQRJ2aDqPrA0M9tBQ7qnipT3gnvwFD0xsZg0dIeic5PaS01Kld0FYQvF5kgOpfo
vz6AbKc1iFgRhbfoJ0xxesetEI5oIJs4DvjtGuTvGof/6qe4RiFtBBkPhL78Tctq
gXRVSZl5G/Ekurs0WjgASxxX1Am7Mvhc01Yf3KbY8HpIHVVbHktFvHy6/+4sspTl
4Vr5ykCxX+SVfftek5HMISCHcXkdMhxWYyJCZmM/JKQ7z7WO+LiZeIv9VYeMUpF9
8z7q1GAt3zm0FA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:30:13 2026 by rpki-client