Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json)
Hash identifier: tf5/xTGHGG8KSg8W7zOzwIRaV9EnhqAPYfYwu21f5JU=
Subject key identifier: 54:06:E9:32:3D:71:40:F9:4F:63:D1:F5:2C:B0:F5:06:CB:13:E3:5E
Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Certificate serial: 019D9B19B3766D238AF67670661E5441B59A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
Manifest number: 1007
Signing time: Fri 17 Apr 2026 11:00:45 +0000
Manifest this update: Fri 17 Apr 2026 11:00:45 +0000
Manifest next update: Sat 18 Apr 2026 11:00:45 +0000
Files and hashes: 1: 1-hqgVSQBF_UvAinXCtYpxtppbVY.roa (hash: MeKegUTuGCWzFw8KT6nzeyZf5iVq1ADUyVCv+0PDLZ0=)
2: RgWpzavVVfS1b_1UHTxSsoDVFDI.roa (hash: eoIqVrp2QP0CPLWKfdOhEUrB73wKmzs7Euo9X382JX8=)
3: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: lRjB/R2Vron9J6juroaJDzLlxswHhU5PQIyKkJAiLi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:b3:76:6d:23:8a:f6:76:70:66:1e:54:41:b5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Validity
Not Before: Apr 17 11:00:45 2026 GMT
Not After : Apr 18 11:00:45 2026 GMT
Subject: CN=5406e9323d7140f94f63d1f52cb0f506cb13e35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:6a:e5:0b:39:c5:ed:7f:d8:42:75:63:22:
79:7a:9f:26:7f:ff:6e:96:fd:0f:10:1a:25:b6:ae:
13:23:3a:56:b5:85:ac:ca:9a:17:f8:56:e0:24:de:
b9:6d:50:c0:d7:0c:e8:16:b6:31:46:7a:37:e2:96:
1a:d4:f9:4f:e7:a0:d8:2d:a7:42:74:f0:cd:96:a2:
df:68:a3:5c:f1:b9:5d:02:3d:7d:8a:62:07:2b:39:
f1:d3:a6:ea:49:a2:3c:31:0e:ab:3d:be:05:dd:ba:
7f:6d:04:56:44:03:6c:25:e8:a6:f7:62:a7:a3:ff:
bd:d4:05:62:b4:93:7f:bf:dd:91:ae:df:53:d4:ce:
7b:a7:d2:62:e7:02:29:4b:fe:2c:bc:7a:f0:42:d4:
a0:16:c0:ba:a4:1e:bf:fe:02:3e:0c:fb:15:a0:f9:
c8:75:6e:45:fd:3c:52:69:8c:94:18:41:fb:dd:ff:
07:58:67:ac:3c:05:de:19:95:d7:2b:23:a7:6b:81:
ab:e2:97:2f:a0:ce:75:9c:bc:15:97:57:11:e9:b5:
63:15:cb:ea:00:1e:e3:c2:e5:f5:9f:92:9d:ec:d9:
31:9a:65:84:5b:44:3d:c0:38:ce:da:11:f6:d8:95:
1c:95:c4:b5:cc:21:2b:ae:3b:bd:38:ef:f3:15:5c:
0f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:06:E9:32:3D:71:40:F9:4F:63:D1:F5:2C:B0:F5:06:CB:13:E3:5E
X509v3 Authority Key Identifier:
keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:79:cd:d2:23:69:f2:ba:22:b6:17:bf:b7:41:69:c4:cc:94:
42:e2:c2:cc:13:f4:9f:db:4c:a6:59:4e:ef:7b:94:30:b3:c5:
ce:df:3b:2f:57:44:b6:35:98:c9:57:a1:f9:71:11:42:3a:94:
34:eb:24:10:40:8b:0d:df:b3:f1:bc:46:48:7e:72:a9:68:05:
cf:b3:fa:df:12:98:f5:6d:a5:83:35:94:bd:eb:fd:15:a6:a5:
56:1a:3a:69:10:fc:dc:d1:49:14:2c:cf:e8:77:e0:85:6a:16:
47:e4:74:83:aa:6e:ca:c0:85:ce:10:5b:6b:c2:2a:3f:92:1c:
6c:50:c3:4b:c5:78:b3:7d:bf:fe:5a:32:6e:78:00:ec:3a:ab:
cf:cc:3d:bd:0d:d5:56:d2:33:3a:c7:80:a2:44:0b:bc:18:dc:
17:7d:9f:cb:24:17:af:17:3d:0f:75:d1:e9:40:f0:57:1f:98:
62:c8:97:6f:a4:80:e0:fa:73:1f:c2:26:62:7c:ba:ba:c3:aa:
35:ee:c4:3e:e6:0b:d8:f9:36:fc:5b:2a:bf:fd:49:03:1f:f1:
b4:00:8a:44:39:45:d8:b2:94:1e:7a:70:46:ce:63:3f:75:26:
06:2c:74:b1:6f:dc:b8:a5:89:ca:a0:08:60:cd:19:24:1b:13:
89:b0:f4:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGbN2bSOK9nZwZh5UQbWaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhODM4ZjFjYThiZGNkODFjMDRiNmI2NzhlNzliZTYxNGU1
MWIxMTEwHhcNMjYwNDE3MTEwMDQ1WhcNMjYwNDE4MTEwMDQ1WjAzMTEwLwYDVQQD
Eyg1NDA2ZTkzMjNkNzE0MGY5NGY2M2QxZjUyY2IwZjUwNmNiMTNlMzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbdq5Qs5xe1/2EJ1YyJ5ep8mf/9u
lv0PEBoltq4TIzpWtYWsypoX+FbgJN65bVDA1wzoFrYxRno34pYa1PlP56DYLadC
dPDNlqLfaKNc8bldAj19imIHKznx06bqSaI8MQ6rPb4F3bp/bQRWRANsJeim92Kn
o/+91AVitJN/v92Rrt9T1M57p9Ji5wIpS/4svHrwQtSgFsC6pB6//gI+DPsVoPnI
dW5F/TxSaYyUGEH73f8HWGesPAXeGZXXKyOna4Gr4pcvoM51nLwVl1cR6bVjFcvq
AB7jwuX1n5Kd7NkxmmWEW0Q9wDjO2hH22JUclcS1zCErrju9OO/zFVwPUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQG6TI9cUD5T2PR9Syw9QbLE+NeMB8GA1UdIwQY
MBaAFLqDjxyovc2BwEtrZ455vmFOUbERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kYjRlODgtZTU4ZC00MzQ1LTgwYzct
MDkzZWI5YTlhYThiLzEvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9kYjRlODgtZTU4ZC00MzQ1LTgwYzctMDkzZWI5YTlhYThi
LzEvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnnN0iNp
8roithe/t0FpxMyUQuLCzBP0n9tMpllO73uUMLPFzt87L1dEtjWYyVeh+XERQjqU
NOskEECLDd+z8bxGSH5yqWgFz7P63xKY9W2lgzWUvev9FaalVho6aRD83NFJFCzP
6HfghWoWR+R0g6puysCFzhBba8IqP5IcbFDDS8V4s32//loybngA7Dqrz8w9vQ3V
VtIzOseAokQLvBjcF32fyyQXrxc9D3XR6UDwVx+YYsiXb6SA4PpzH8ImYny6usOq
Ne7EPuYL2Pk2/Fsqv/1JAx/xtACKRDlF2LKUHnpwRs5jP3UmBix0sW/cuKWJyqAI
YM0ZJBsTibD0LA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:15:00 2026 by rpki-client