Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
File: uTYoo2ME473CH4U7s_rUPkhhpcU.mft (raw, json)
Hash identifier: OjDmFv70I4yHB1tkFlmbnCeNhM02eOXz6xA8JTvSyuc=
Subject key identifier: F1:B9:B0:69:AF:DF:0C:8C:97:68:47:60:52:44:6A:F7:96:6C:66:79
Authority key identifier: B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
Certificate issuer: /CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Certificate serial: 019CABD9AC41F6FF91028A4B0D027FF14801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
Manifest number: 0BBB
Signing time: Mon 02 Mar 2026 00:01:35 +0000
Manifest this update: Mon 02 Mar 2026 00:01:35 +0000
Manifest next update: Tue 03 Mar 2026 00:01:35 +0000
Files and hashes: 1: 1-WJ7X3VtFf2F_SKJ8JN5dL6LQPQ.roa (hash: 8KtKxWLd7ILPUk5kKO1qDBFHYT3DcmruhjUNtg5TxvY=)
2: uTYoo2ME473CH4U7s_rUPkhhpcU.crl (hash: n/RE/Cwnp5h+ZN7/ZzCZkc4qP8LcL6NKtDs6ogxV7o0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:ac:41:f6:ff:91:02:8a:4b:0d:02:7f:f1:48:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Validity
Not Before: Mar 2 00:01:35 2026 GMT
Not After : Mar 3 00:01:35 2026 GMT
Subject: CN=f1b9b069afdf0c8c9768476052446af7966c6679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:2d:41:99:8b:d0:d4:74:55:4a:46:e6:6b:
b0:4e:77:04:fe:08:b7:3f:61:9d:eb:fa:9a:a4:50:
ed:3c:6c:a1:05:f4:05:b3:45:81:b5:99:7e:49:f2:
31:49:0e:d9:98:1b:5b:f4:dd:36:9b:1e:c0:02:5d:
b2:5d:6e:73:07:d2:c7:29:9b:56:1e:d8:f2:ff:ee:
bc:29:a6:fb:a7:3e:ac:7c:56:7a:46:fe:36:1c:2a:
81:23:b9:8b:5d:8d:7c:93:7c:fe:52:a6:9c:69:18:
b6:a0:b5:52:6f:e7:06:92:c7:83:2f:3e:b3:95:94:
56:a4:bc:a2:c1:a3:f0:ab:35:64:59:32:f7:9b:32:
1c:a2:b9:74:c8:9b:a1:0c:49:f5:55:94:31:98:68:
8e:d2:58:0c:30:7e:d1:d5:ac:cc:32:1b:d2:42:c5:
4d:37:65:88:ec:fa:bc:7b:d2:2a:a7:b3:8e:60:46:
fb:e2:7e:8d:6d:f0:46:5e:66:dc:82:64:f3:22:11:
16:7e:42:59:88:2f:d5:94:e6:19:b8:c2:b2:e1:1b:
9f:c0:ff:e4:a8:02:18:ca:db:0d:7a:9c:fd:4b:38:
26:80:20:4b:55:33:11:d1:a9:9b:7d:79:7b:d1:39:
b2:68:be:a3:e2:cc:b3:c6:ef:ce:e2:df:33:55:5b:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B9:B0:69:AF:DF:0C:8C:97:68:47:60:52:44:6A:F7:96:6C:66:79
X509v3 Authority Key Identifier:
keyid:B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5d:4f:dc:01:9c:3d:75:5d:55:d3:a7:6e:06:42:64:b8:6d:
6a:19:16:0e:5d:bf:e3:14:74:8f:49:e7:e6:ea:f7:7c:87:84:
c2:02:a3:73:38:c0:86:70:7f:a7:43:85:74:0b:ad:88:12:5f:
67:b0:ed:d9:83:b4:ff:69:61:d2:32:64:9d:d2:c7:b0:e0:42:
af:01:69:25:04:ab:a2:30:d3:10:8d:c9:4f:cb:57:f8:3c:54:
b4:73:6a:d7:17:a2:19:e8:55:7f:83:1a:9f:ea:16:ea:22:67:
84:39:88:46:64:67:d1:33:6d:ac:e1:e0:45:51:dc:84:7b:94:
81:ff:cc:bd:47:f0:8c:03:d3:df:9a:03:1d:1e:de:1e:fc:80:
f5:89:46:51:3e:6b:f5:0c:99:b0:b5:82:6e:19:7e:d3:33:7f:
61:9c:01:48:e1:58:ab:09:4a:3d:67:81:b3:50:e1:8f:fe:14:
64:24:17:54:b4:14:04:04:ed:2c:5d:28:28:0e:24:5d:61:88:
19:28:90:24:7c:d2:fe:58:69:45:33:0a:89:6a:30:9e:b5:79:
4d:4b:45:d4:09:79:64:e7:d0:0e:85:2b:84:69:c7:b6:71:c5:
5d:9f:f4:72:8a:ce:c4:f0:14:f0:90:54:d8:66:cb:d2:b7:d9:
e9:11:fd:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2axB9v+RAopLDQJ/8UgBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MzYyOGEzNjMwNGUzYmRjMjFmODUzYmIzZmFkNDNlNDg2
MWE1YzUwHhcNMjYwMzAyMDAwMTM1WhcNMjYwMzAzMDAwMTM1WjAzMTEwLwYDVQQD
EyhmMWI5YjA2OWFmZGYwYzhjOTc2ODQ3NjA1MjQ0NmFmNzk2NmM2Njc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZktQZmL0NR0VUpG5muwTncE/gi3
P2Gd6/qapFDtPGyhBfQFs0WBtZl+SfIxSQ7ZmBtb9N02mx7AAl2yXW5zB9LHKZtW
Htjy/+68Kab7pz6sfFZ6Rv42HCqBI7mLXY18k3z+UqacaRi2oLVSb+cGkseDLz6z
lZRWpLyiwaPwqzVkWTL3mzIcorl0yJuhDEn1VZQxmGiO0lgMMH7R1azMMhvSQsVN
N2WI7Pq8e9Iqp7OOYEb74n6NbfBGXmbcgmTzIhEWfkJZiC/VlOYZuMKy4RufwP/k
qAIYytsNepz9SzgmgCBLVTMR0ambfXl70TmyaL6j4syzxu/O4t8zVVuBgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPG5sGmv3wyMl2hHYFJEaveWbGZ5MB8GA1UdIwQY
MBaAFLk2KKNjBOO9wh+FO7P61D5IYaXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVRZb28yTUU0NzNDSDRVN3NfclVQa2hocGNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hOWJiY2UtZDNjNy00MjIxLTlmNmIt
ODdkM2VjN2YwNDEwLzEvdVRZb28yTUU0NzNDSDRVN3NfclVQa2hocGNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9hOWJiY2UtZDNjNy00MjIxLTlmNmItODdkM2VjN2YwNDEw
LzEvdVRZb28yTUU0NzNDSDRVN3NfclVQa2hocGNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd11P3AGc
PXVdVdOnbgZCZLhtahkWDl2/4xR0j0nn5ur3fIeEwgKjczjAhnB/p0OFdAutiBJf
Z7Dt2YO0/2lh0jJkndLHsOBCrwFpJQSrojDTEI3JT8tX+DxUtHNq1xeiGehVf4Ma
n+oW6iJnhDmIRmRn0TNtrOHgRVHchHuUgf/MvUfwjAPT35oDHR7eHvyA9YlGUT5r
9QyZsLWCbhl+0zN/YZwBSOFYqwlKPWeBs1Dhj/4UZCQXVLQUBATtLF0oKA4kXWGI
GSiQJHzS/lhpRTMKiWownrV5TUtF1Al5ZOfQDoUrhGnHtnHFXZ/0corOxPAU8JBU
2GbL0rfZ6RH9Wg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:21 2026 by rpki-client