Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
File: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft (raw, json)
Hash identifier: byQJcm2Uy72qHo6US7h1wbDeyRnvNKCw6qw5vfSx6bo=
Subject key identifier: F0:2C:FA:5A:03:27:7E:95:E9:3F:81:14:7D:4C:95:40:E5:E7:20:F1
Authority key identifier: BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
Certificate issuer: /CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Certificate serial: 019DA59D5B3A3AC92801E06CA1633EDFE669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
Manifest number: 0FF0
Signing time: Sun 19 Apr 2026 12:00:46 +0000
Manifest this update: Sun 19 Apr 2026 12:00:46 +0000
Manifest next update: Mon 20 Apr 2026 12:00:46 +0000
Files and hashes: 1: 3xkUgPDW1_nU5u-zQWPWFuXblOU.roa (hash: TwymWVxNW7YipwcwZomXLwsBqGn5JSf6tMGWjIIvIuA=)
2: biwapYjW-yR38S3KZARQ10moe30.roa (hash: 1QN2loKj68piSOW4bamGYfAlPoY1h07q4+Z8Ry6dkfo=)
3: isbgVHj3TmGYN0uwFkd2CdHyHMU.roa (hash: QwGaFwSh5hfuRjoHH0+UtDhSsDuuueUvGza6DS4Ifsg=)
4: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl (hash: oas0R6FoMVWAxdeVDJAJIGnd/vRo5A3JBAVP5kx1hCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9d:5b:3a:3a:c9:28:01:e0:6c:a1:63:3e:df:e6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Validity
Not Before: Apr 19 12:00:46 2026 GMT
Not After : Apr 20 12:00:46 2026 GMT
Subject: CN=f02cfa5a03277e95e93f81147d4c9540e5e720f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:7e:20:53:00:45:cb:e8:29:34:01:3f:e1:
b6:41:cc:6c:64:c1:a2:63:9e:c5:23:65:ae:ef:e4:
d9:8d:e9:cd:83:2f:ba:b0:93:e6:54:fc:33:51:3b:
1e:22:e5:f7:65:9c:83:32:60:09:d4:43:65:93:e6:
bd:5b:e4:6d:8f:2a:bb:c1:b9:b9:90:96:12:f0:f5:
0e:23:4c:ce:49:4b:58:00:46:f8:a4:57:08:ba:ea:
09:a6:3a:c5:24:c6:28:8b:f1:8a:6d:35:f9:c9:b9:
00:c7:07:df:fd:bc:0b:df:1f:83:22:0f:ac:29:29:
03:b2:2f:2c:fe:4b:3d:cc:f3:1a:bc:f9:01:63:da:
47:0d:75:3f:95:8a:14:ee:d1:a8:77:76:27:25:88:
0a:30:bc:6f:b6:f1:88:f5:ac:89:25:f6:98:ef:ee:
a5:c4:14:98:11:a4:7e:77:38:b5:f6:be:7c:3f:8d:
83:9b:4e:5c:99:b1:2e:7b:fa:74:3a:71:e4:8b:4e:
13:d1:87:d1:21:e7:76:f1:b0:09:19:0c:22:ac:61:
4b:4c:c8:6b:e3:95:da:64:84:63:41:c6:61:88:d6:
a8:19:32:9b:4c:18:73:f8:71:ef:d2:92:da:b5:ca:
8c:45:04:c4:1e:68:b3:1f:0d:a1:e7:bf:e8:14:83:
59:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2C:FA:5A:03:27:7E:95:E9:3F:81:14:7D:4C:95:40:E5:E7:20:F1
X509v3 Authority Key Identifier:
keyid:BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:24:45:4e:80:21:80:d3:77:98:68:08:d7:47:05:fb:f3:3c:
b7:cc:4c:5a:9b:27:8c:ec:25:d3:f8:bc:49:56:16:9c:b1:f3:
e9:c4:5a:95:a3:cd:de:13:38:8a:17:3f:53:9f:7a:df:94:89:
5b:25:7d:0c:b1:e8:5e:6b:53:ee:db:70:83:dc:6a:c6:80:17:
09:51:7f:9e:a0:eb:ed:da:02:ad:da:bc:61:a8:b5:a0:f3:56:
57:5e:48:c3:33:d9:4b:f7:f4:d8:c4:a2:fd:13:3d:5e:7a:f8:
32:b8:60:8f:b9:93:b2:d0:02:50:3e:59:8e:6c:6f:0a:91:44:
6d:36:c2:8e:51:ce:24:5d:27:96:7a:ff:ab:5b:fe:ab:91:4f:
9f:30:0d:76:83:4b:53:82:92:71:d8:00:7e:35:d9:2e:6f:ce:
ff:34:a8:6b:c7:8a:f9:92:98:47:bb:50:be:83:b2:7f:6c:68:
09:1a:bd:05:9d:3a:9e:b7:a5:c6:b0:88:46:4f:df:b2:90:f0:
bf:9f:97:01:40:ff:c6:ef:d8:b7:7d:9d:10:56:b7:73:52:4e:
d5:4c:02:9c:ba:e2:17:f2:d4:9e:64:04:8f:51:e5:85:01:0b:
ab:ba:2e:41:0b:93:17:13:11:7e:11:90:ca:cc:be:51:c8:4c:
bf:b3:61:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lnVs6OskoAeBsoWM+3+ZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhODg2MWUxN2ViZWQ1Nzk1MGZmMzJjN2IzNzdmYzQzMDQx
M2RiZTQwHhcNMjYwNDE5MTIwMDQ2WhcNMjYwNDIwMTIwMDQ2WjAzMTEwLwYDVQQD
EyhmMDJjZmE1YTAzMjc3ZTk1ZTkzZjgxMTQ3ZDRjOTU0MGU1ZTcyMGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRt+IFMARcvoKTQBP+G2QcxsZMGi
Y57FI2Wu7+TZjenNgy+6sJPmVPwzUTseIuX3ZZyDMmAJ1ENlk+a9W+Rtjyq7wbm5
kJYS8PUOI0zOSUtYAEb4pFcIuuoJpjrFJMYoi/GKbTX5ybkAxwff/bwL3x+DIg+s
KSkDsi8s/ks9zPMavPkBY9pHDXU/lYoU7tGod3YnJYgKMLxvtvGI9ayJJfaY7+6l
xBSYEaR+dzi19r58P42Dm05cmbEue/p0OnHki04T0YfRIed28bAJGQwirGFLTMhr
45XaZIRjQcZhiNaoGTKbTBhz+HHv0pLatcqMRQTEHmizHw2h57/oFINZFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAs+loDJ36V6T+BFH1MlUDl5yDxMB8GA1UdIwQY
MBaAFLqIYeF+vtV5UP8yx7N3/EMEE9vkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW9oaDRYNi0xWGxRX3pMSHMzZjhRd1FUMi1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8xMGQxNTMtYzNjMy00MDExLTk3Y2Yt
MTBmZGNhMzg1ZWE0LzEvdW9oaDRYNi0xWGxRX3pMSHMzZjhRd1FUMi1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8xMGQxNTMtYzNjMy00MDExLTk3Y2YtMTBmZGNhMzg1ZWE0
LzEvdW9oaDRYNi0xWGxRX3pMSHMzZjhRd1FUMi1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyRFToAh
gNN3mGgI10cF+/M8t8xMWpsnjOwl0/i8SVYWnLHz6cRalaPN3hM4ihc/U59635SJ
WyV9DLHoXmtT7ttwg9xqxoAXCVF/nqDr7doCrdq8Yai1oPNWV15IwzPZS/f02MSi
/RM9Xnr4Mrhgj7mTstACUD5ZjmxvCpFEbTbCjlHOJF0nlnr/q1v+q5FPnzANdoNL
U4KScdgAfjXZLm/O/zSoa8eK+ZKYR7tQvoOyf2xoCRq9BZ06nrelxrCIRk/fspDw
v5+XAUD/xu/Yt32dEFa3c1JO1UwCnLriF/LUnmQEj1HlhQELq7ouQQuTFxMRfhGQ
ysy+UchMv7NhmA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:06:26 2026 by rpki-client