Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
File: ui1f0wndbMbPeIYEHl6cLBomzqs.mft (raw, json)
Hash identifier: Vv0qXt0Lk7R73pFtA+JJapPB8pBUv6HA08rtG4F/xDo=
Subject key identifier: 9F:6F:73:CB:53:4C:AD:92:AB:6D:19:EE:B1:50:BC:98:88:AF:25:75
Authority key identifier: BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
Certificate issuer: /CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Certificate serial: 019EC0362144E4CC7DEFC549E70026A29B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
Manifest number: 18EE
Signing time: Sat 13 Jun 2026 09:00:33 +0000
Manifest this update: Sat 13 Jun 2026 09:00:33 +0000
Manifest next update: Sun 14 Jun 2026 09:00:33 +0000
Files and hashes: 1: NuqvGLGVW54T2_CK4Y8l2k93wFg.roa (hash: DT5naWAM2r0ZiUJDhX9HJ7rLzQINkgWuAJdmInUQ/sA=)
2: ui1f0wndbMbPeIYEHl6cLBomzqs.crl (hash: bwi1BR3iNFxXT3upHYd0b22gdR9ysm2MUFI+1moXV+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:21:44:e4:cc:7d:ef:c5:49:e7:00:26:a2:9b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Validity
Not Before: Jun 13 09:00:33 2026 GMT
Not After : Jun 14 09:00:33 2026 GMT
Subject: CN=9f6f73cb534cad92ab6d19eeb150bc9888af2575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:77:ab:42:2b:45:40:6d:f4:37:c2:94:76:
de:1f:67:55:07:6d:d9:ca:6c:d6:6b:4a:08:15:ab:
66:bf:0b:13:a2:ac:b1:91:a8:05:08:3c:22:cf:4a:
f2:15:dc:33:1e:ee:4b:18:c4:e2:62:c5:86:6c:8e:
73:a5:f2:e0:61:75:11:5d:e7:7e:2b:46:7a:1e:13:
20:69:61:d0:5d:7c:ce:c9:b3:46:1d:db:f5:55:79:
52:ca:3e:ab:59:89:0e:6f:8b:3f:25:01:73:36:94:
4d:a6:90:94:b7:a6:c6:02:2a:18:7c:83:e5:59:a9:
a6:8c:22:65:e1:23:89:fd:b8:f1:bd:fc:a4:9c:bd:
11:f1:c6:cf:00:92:62:49:2c:e0:af:15:0e:32:14:
b2:ef:2c:e9:e1:e2:1f:7e:0e:36:cf:46:b7:43:fc:
73:c7:68:20:23:64:6f:ea:cf:df:d0:56:27:45:56:
40:d9:8e:73:12:c4:04:2a:f8:6c:1b:59:c0:71:cf:
a2:da:0c:04:d8:bc:25:29:a0:3e:e7:4e:ad:82:b4:
dd:ca:07:eb:e9:6a:1d:05:06:62:34:93:b0:a2:23:
5e:56:f6:eb:e6:81:12:5b:11:6a:97:b3:07:e3:37:
7e:17:81:ce:72:08:f2:75:c7:91:34:3d:62:7e:27:
28:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6F:73:CB:53:4C:AD:92:AB:6D:19:EE:B1:50:BC:98:88:AF:25:75
X509v3 Authority Key Identifier:
keyid:BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:cc:e1:3e:f5:ae:6a:ae:78:26:f4:bd:b2:62:84:13:5a:77:
6e:08:58:ff:d3:dd:77:be:00:f3:7a:78:87:4d:a2:e0:9e:67:
a3:d1:91:ce:6e:01:87:91:f4:b4:6b:5d:b6:7e:05:8f:a1:68:
0f:9f:01:ca:c7:d3:8d:ef:e7:a1:52:ec:dd:74:ae:41:5e:8f:
b1:93:e8:0a:b9:fc:ed:de:aa:f4:cf:6d:e2:02:be:01:ec:a5:
28:17:ff:6a:a1:92:b8:03:8c:5b:3a:be:09:3d:db:25:fc:9e:
71:ee:e5:d0:fe:8d:26:d3:07:3e:79:38:71:96:f7:bc:a6:9f:
66:70:46:e2:4c:b8:17:15:72:d0:70:41:3d:84:1f:e5:51:87:
df:20:72:e0:60:73:99:7f:4d:2b:43:74:15:00:8a:a1:ad:c8:
a5:b7:9b:db:75:d6:d0:a7:94:9a:5e:60:5e:9c:e6:bb:fb:3a:
7a:e3:4a:d8:dc:8b:31:98:e6:74:db:6b:fb:79:2c:16:a1:13:
a3:95:3a:cf:c2:fd:c7:ac:df:90:8e:65:84:69:ec:01:b8:10:
57:ee:08:24:1b:5a:e2:3c:10:3e:7b:23:1f:97:60:74:6a:56:
19:cd:f5:b2:09:31:80:79:6d:20:6e:9d:3f:44:4b:46:c0:ed:
d7:f2:61:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ANiFE5Mx978VJ5wAmopuIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMmQ1ZmQzMDlkZDZjYzZjZjc4ODYwNDFlNWU5YzJjMWEy
NmNlYWIwHhcNMjYwNjEzMDkwMDMzWhcNMjYwNjE0MDkwMDMzWjAzMTEwLwYDVQQD
Eyg5ZjZmNzNjYjUzNGNhZDkyYWI2ZDE5ZWViMTUwYmM5ODg4YWYyNTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXZ3q0IrRUBt9DfClHbeH2dVB23Z
ymzWa0oIFatmvwsToqyxkagFCDwiz0ryFdwzHu5LGMTiYsWGbI5zpfLgYXURXed+
K0Z6HhMgaWHQXXzOybNGHdv1VXlSyj6rWYkOb4s/JQFzNpRNppCUt6bGAioYfIPl
WammjCJl4SOJ/bjxvfyknL0R8cbPAJJiSSzgrxUOMhSy7yzp4eIffg42z0a3Q/xz
x2ggI2Rv6s/f0FYnRVZA2Y5zEsQEKvhsG1nAcc+i2gwE2LwlKaA+506tgrTdygfr
6WodBQZiNJOwoiNeVvbr5oESWxFql7MH4zd+F4HOcgjydceRND1ificoxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9vc8tTTK2Sq20Z7rFQvJiIryV1MB8GA1UdIwQY
MBaAFLotX9MJ3WzGz3iGBB5enCwaJs6rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWkxZjB3bmRiTWJQZUlZRUhsNmNMQm9tenFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yY2JkZTktODQ4MC00NDBkLWFiY2Yt
NmQ3NTUwNTJiYjI0LzEvdWkxZjB3bmRiTWJQZUlZRUhsNmNMQm9tenFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yY2JkZTktODQ4MC00NDBkLWFiY2YtNmQ3NTUwNTJiYjI0
LzEvdWkxZjB3bmRiTWJQZUlZRUhsNmNMQm9tenFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8zhPvWu
aq54JvS9smKEE1p3bghY/9Pdd74A83p4h02i4J5no9GRzm4Bh5H0tGtdtn4Fj6Fo
D58BysfTje/noVLs3XSuQV6PsZPoCrn87d6q9M9t4gK+AeylKBf/aqGSuAOMWzq+
CT3bJfyece7l0P6NJtMHPnk4cZb3vKafZnBG4ky4FxVy0HBBPYQf5VGH3yBy4GBz
mX9NK0N0FQCKoa3Ipbeb23XW0KeUml5gXpzmu/s6euNK2NyLMZjmdNtr+3ksFqET
o5U6z8L9x6zfkI5lhGnsAbgQV+4IJBta4jwQPnsjH5dgdGpWGc31sgkxgHltIG6d
P0RLRsDt1/Jh0g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:23:14 2026 by rpki-client