Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
File: u5tW2NluvLX8-H3i7CtSwZTM-fk.mft (raw, json)
Hash identifier: CJW7OU0mZY49Hm7jGycXAb8jLAy3LCWRlPsnjhbcOgs=
Subject key identifier: 46:4A:12:B8:B2:C1:4F:33:A3:CF:C2:BD:FE:98:94:89:C6:9C:77:71
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial: 019CADFE35A49621AC2EDF2930B0E3A11F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
Manifest number: 185D
Signing time: Mon 02 Mar 2026 10:00:44 +0000
Manifest this update: Mon 02 Mar 2026 10:00:44 +0000
Manifest next update: Tue 03 Mar 2026 10:00:44 +0000
Files and hashes: 1: GvsNXqyPm3O1muA1KhzUZIC7rvw.roa (hash: GH+TiXaBiyInStL5LqF861L8DM/DPBqkW/47ALTzmZE=)
2: OSKY092K7Rd69JqqbL4WMk5Xd4U.roa (hash: NVRC2Db3R3ftV/bNbwEakNLpneFf6ZR1jTLt2dsBXng=)
3: SztDQUTdgK2SUjFi9wkDzBiBMLc.roa (hash: a/GE3Z5i97PSSD8tZRN4CE8oTOTKNEOJuyhCdmF0QKE=)
4: u5tW2NluvLX8-H3i7CtSwZTM-fk.crl (hash: cDNPmQ+DUdotMF7bLEYry/C4QA0NCIlf7SR5k1SYGas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:35:a4:96:21:ac:2e:df:29:30:b0:e3:a1:1f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Validity
Not Before: Mar 2 10:00:44 2026 GMT
Not After : Mar 3 10:00:44 2026 GMT
Subject: CN=464a12b8b2c14f33a3cfc2bdfe989489c69c7771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:2a:88:1e:92:fa:0c:95:38:00:1f:9d:b1:
3b:3c:8f:61:e9:dc:d8:93:f5:94:22:42:94:3c:70:
c6:b1:f7:22:40:4b:03:f3:f2:a1:b7:8f:b4:c2:fb:
f8:a6:86:69:5b:33:e8:e9:e7:3a:91:29:59:ba:a8:
77:6c:b4:9b:32:26:bf:f9:9f:ab:40:aa:6c:f4:22:
6d:16:a7:86:09:8e:5a:7f:65:ef:63:03:4a:93:5d:
93:71:76:04:30:83:c5:59:0f:ae:fd:5a:54:01:00:
af:f6:bc:ac:4c:c2:24:43:82:7d:4a:7b:31:d9:e6:
12:c7:cd:b2:79:bd:2d:b5:a0:d9:2a:4e:0c:3d:5f:
48:7d:3a:30:e7:1f:1e:49:6a:4b:30:7c:f9:d9:f5:
8b:3d:69:30:c8:a5:ee:14:57:1e:63:4a:35:29:f4:
62:de:1f:c7:23:b5:9e:d2:80:dc:bd:e7:02:bc:79:
55:36:84:6a:3b:eb:07:7c:ec:14:6e:fc:82:d0:85:
61:4f:fc:8b:a9:5a:8b:53:0b:1d:bd:be:f8:f5:df:
17:5c:75:70:47:07:42:2a:40:6c:c9:92:02:8a:03:
ac:30:d5:48:b0:3b:a9:2d:3a:44:40:93:0e:97:ab:
c3:5e:b0:cf:4d:7d:28:c9:ce:e5:70:e1:a2:19:8f:
53:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4A:12:B8:B2:C1:4F:33:A3:CF:C2:BD:FE:98:94:89:C6:9C:77:71
X509v3 Authority Key Identifier:
keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:76:7b:a4:eb:dd:04:c0:9c:d1:1b:04:da:ac:83:95:f6:53:
f9:66:c7:c4:fc:06:d5:d3:e9:04:79:5c:a4:97:89:d1:af:36:
5c:37:9c:eb:f5:a5:f3:a3:84:b8:3b:26:73:a8:93:f3:c0:85:
5f:a4:96:8d:5f:f9:4b:ef:64:24:8b:2c:ab:4e:4d:ba:80:89:
e5:7f:26:29:80:e5:ab:14:6a:c7:39:61:d7:08:39:e3:e9:7d:
61:8b:ab:bc:42:d9:dc:b3:64:c0:90:43:b0:28:16:8f:0a:36:
1f:8c:b5:b0:12:74:93:21:62:4a:37:d1:9d:0b:7f:89:2b:9f:
fe:ab:04:d4:f7:41:0c:c9:4f:c3:68:27:f2:77:8f:ea:7f:98:
c2:88:50:55:6f:22:7d:a3:97:c6:9a:8a:90:48:2f:54:b5:e2:
86:af:3a:a3:9c:d4:ef:0f:2d:5b:87:8a:96:ef:97:8b:92:c9:
20:6b:4b:8b:7f:8a:99:0c:92:3a:d7:0b:57:2e:23:f1:28:88:
13:30:12:ea:23:c1:be:9e:47:96:58:a9:03:da:fa:8e:c1:d6:
da:f9:1b:11:a7:f5:c4:2d:6e:94:01:03:ec:68:36:37:66:ca:
92:9e:e4:78:df:8d:a8:9b:0d:65:2e:5e:af:36:cb:61:bd:e8:
9d:64:e3:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/jWkliGsLt8pMLDjoR92MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiOWI1NmQ4ZDk2ZWJjYjVmY2Y4N2RlMmVjMmI1MmMxOTRj
Y2Y5ZjkwHhcNMjYwMzAyMTAwMDQ0WhcNMjYwMzAzMTAwMDQ0WjAzMTEwLwYDVQQD
Eyg0NjRhMTJiOGIyYzE0ZjMzYTNjZmMyYmRmZTk4OTQ4OWM2OWM3NzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWAqiB6S+gyVOAAfnbE7PI9h6dzY
k/WUIkKUPHDGsfciQEsD8/Kht4+0wvv4poZpWzPo6ec6kSlZuqh3bLSbMia/+Z+r
QKps9CJtFqeGCY5af2XvYwNKk12TcXYEMIPFWQ+u/VpUAQCv9rysTMIkQ4J9Snsx
2eYSx82yeb0ttaDZKk4MPV9IfTow5x8eSWpLMHz52fWLPWkwyKXuFFceY0o1KfRi
3h/HI7We0oDcvecCvHlVNoRqO+sHfOwUbvyC0IVhT/yLqVqLUwsdvb749d8XXHVw
RwdCKkBsyZICigOsMNVIsDupLTpEQJMOl6vDXrDPTX0oyc7lcOGiGY9TtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZKEriywU8zo8/Cvf6YlInGnHdxMB8GA1UdIwQY
MBaAFLubVtjZbry1/Ph94uwrUsGUzPn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmIt
NGY0ZmU4MDNiMDE1LzEvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmItNGY0ZmU4MDNiMDE1
LzEvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHZ7pOvd
BMCc0RsE2qyDlfZT+WbHxPwG1dPpBHlcpJeJ0a82XDec6/Wl86OEuDsmc6iT88CF
X6SWjV/5S+9kJIssq05NuoCJ5X8mKYDlqxRqxzlh1wg54+l9YYurvELZ3LNkwJBD
sCgWjwo2H4y1sBJ0kyFiSjfRnQt/iSuf/qsE1PdBDMlPw2gn8neP6n+YwohQVW8i
faOXxpqKkEgvVLXihq86o5zU7w8tW4eKlu+Xi5LJIGtLi3+KmQySOtcLVy4j8SiI
EzAS6iPBvp5HllipA9r6jsHW2vkbEaf1xC1ulAED7Gg2N2bKkp7keN+NqJsNZS5e
rzbLYb3onWTjKQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:05 2026 by rpki-client