Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier: 2l27l12lbATb3IxuUNTH7A3qdRR2HaFdtCUKt6Jww74=
Subject key identifier: 08:F4:8E:3F:3F:8A:D0:96:50:3E:B4:F0:3F:02:6A:35:A1:36:94:C3
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 019D98506FD8391B0DE13E802E7FA70EECF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number: 0F10
Signing time: Thu 16 Apr 2026 22:01:41 +0000
Manifest this update: Thu 16 Apr 2026 22:01:41 +0000
Manifest next update: Fri 17 Apr 2026 22:01:41 +0000
Files and hashes: 1: Exhf5yRzqRczvafQwCdzoLdTFoI.roa (hash: AMX3X4u+X7xjtP47ENkIYAXtvU9TYPmq9SdHmShneE0=)
2: HeSZlksbTLA8N88AjDTrmX2uk88.roa (hash: MfWlXQd6/+y+QIEgFdqX3cMg9aLFaxN2h3g3GICOFJI=)
3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: hzw6oLcCmHOaBcp3v5wMCKBO8fyKwMb/k5vq22xqQYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:6f:d8:39:1b:0d:e1:3e:80:2e:7f:a7:0e:ec:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Apr 16 22:01:41 2026 GMT
Not After : Apr 17 22:01:41 2026 GMT
Subject: CN=08f48e3f3f8ad096503eb4f03f026a35a13694c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:85:34:dd:30:62:16:76:b6:14:d0:39:fd:a4:
78:1a:61:15:86:bc:ea:aa:47:8b:bc:ae:5a:ad:90:
b8:d8:56:58:a9:51:5a:76:04:6a:67:d3:50:46:ac:
e0:84:62:07:d7:86:76:0b:67:be:a4:38:73:df:fa:
d7:26:5b:65:e5:4f:01:ad:06:5a:52:e6:a2:fc:97:
d9:32:d8:a3:25:19:cd:d5:67:5d:d2:d1:3d:9d:f7:
39:f9:6d:f6:09:cc:96:88:52:c4:ce:a0:d9:3d:2b:
be:77:63:67:17:ed:57:64:aa:39:cd:60:43:3f:67:
e6:53:20:65:bd:15:f7:6f:87:4d:2a:39:fb:ab:92:
3c:38:13:79:cc:a0:f4:d9:04:cb:2c:59:2d:59:ad:
a8:05:7c:3d:62:76:7c:80:2f:91:ac:05:35:f3:3d:
de:1a:fc:31:64:2d:1b:a7:4a:87:b3:f1:6e:d3:86:
a9:88:7b:fa:dc:70:c1:46:1b:67:26:3b:bf:8b:69:
ca:2e:46:df:e1:dc:09:1c:59:c9:bb:a2:5c:87:ba:
08:70:50:3b:57:86:fe:60:b4:51:8a:8b:2d:40:c1:
88:09:0d:5c:e3:62:a8:ae:8f:56:d9:35:10:7f:07:
85:89:2f:01:4b:46:b2:fe:ca:2b:2f:18:2f:18:f0:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F4:8E:3F:3F:8A:D0:96:50:3E:B4:F0:3F:02:6A:35:A1:36:94:C3
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:00:c0:26:1b:2a:ba:35:a4:02:d5:23:ed:0d:0c:44:30:5a:
96:d6:4a:5c:d2:3f:8d:9a:04:b1:c4:e9:df:05:70:cb:9d:cc:
2d:6a:27:77:4e:6d:34:5f:2b:f1:05:84:f6:79:29:ac:c6:36:
5f:ab:ce:b1:61:78:60:14:66:eb:2f:d4:3f:fe:c9:ff:09:29:
d5:68:6f:82:f9:ce:31:4a:39:93:66:ac:7f:d6:3f:40:ca:26:
07:11:e7:7e:2c:83:9d:65:7f:67:1d:73:ca:4d:92:18:e3:de:
d8:83:4c:99:d4:4d:82:44:37:22:9f:06:44:83:38:58:aa:be:
6d:42:f0:f4:76:e7:87:1f:19:03:be:f4:38:4e:9d:66:f7:46:
0d:79:b1:71:10:11:47:58:c9:a9:4a:7a:49:c3:8f:8b:18:34:
8b:c2:a9:72:58:b5:19:1d:1a:a9:cf:78:8a:46:0f:4d:03:59:
1c:2f:a7:a2:23:25:41:83:5b:ff:cc:3c:9b:7e:1f:b6:9e:2e:
07:91:86:53:9b:3f:60:23:3d:52:3d:02:cb:99:49:a6:15:e2:
37:50:19:99:17:65:d4:55:db:75:3d:0c:54:27:4b:c5:2e:95:
74:0d:86:e5:3a:79:81:05:b9:13:62:16:bf:63:58:a4:fd:03:
55:3b:4d:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUG/YORsN4T6ALn+nDuzzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YWIzNjEzOTQ2ODNlNGYyNDM5N2NmYzhmMjNlYWIyYzY4
MjhkZWEwHhcNMjYwNDE2MjIwMTQxWhcNMjYwNDE3MjIwMTQxWjAzMTEwLwYDVQQD
EygwOGY0OGUzZjNmOGFkMDk2NTAzZWI0ZjAzZjAyNmEzNWExMzY5NGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIU03TBiFna2FNA5/aR4GmEVhrzq
qkeLvK5arZC42FZYqVFadgRqZ9NQRqzghGIH14Z2C2e+pDhz3/rXJltl5U8BrQZa
Uuai/JfZMtijJRnN1Wdd0tE9nfc5+W32CcyWiFLEzqDZPSu+d2NnF+1XZKo5zWBD
P2fmUyBlvRX3b4dNKjn7q5I8OBN5zKD02QTLLFktWa2oBXw9YnZ8gC+RrAU18z3e
GvwxZC0bp0qHs/Fu04apiHv63HDBRhtnJju/i2nKLkbf4dwJHFnJu6Jch7oIcFA7
V4b+YLRRiostQMGICQ1c42Koro9W2TUQfweFiS8BS0ay/sorLxgvGPBPPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAj0jj8/itCWUD608D8CajWhNpTDMB8GA1UdIwQY
MBaAFLmrNhOUaD5PJDl8/I8j6rLGgo3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zNjBlZjktZWMyMC00ZTEzLTk2NDct
ZGRmZWI0MjRhZGY1LzEvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8zNjBlZjktZWMyMC00ZTEzLTk2NDctZGRmZWI0MjRhZGY1
LzEvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANwDAJhsq
ujWkAtUj7Q0MRDBaltZKXNI/jZoEscTp3wVwy53MLWond05tNF8r8QWE9nkprMY2
X6vOsWF4YBRm6y/UP/7J/wkp1WhvgvnOMUo5k2asf9Y/QMomBxHnfiyDnWV/Zx1z
yk2SGOPe2INMmdRNgkQ3Ip8GRIM4WKq+bULw9Hbnhx8ZA770OE6dZvdGDXmxcRAR
R1jJqUp6ScOPixg0i8Kpcli1GR0aqc94ikYPTQNZHC+noiMlQYNb/8w8m34ftp4u
B5GGU5s/YCM9Uj0Cy5lJphXiN1AZmRdl1FXbdT0MVCdLxS6VdA2G5Tp5gQW5E2IW
v2NYpP0DVTtNGw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:36 2026 by rpki-client