Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
File: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft (raw, json)
Hash identifier: gPxdhWm6KBBEtbjMGyORmEFy2DV4TJQ4I38+FbEcRcI=
Subject key identifier: 90:83:2F:64:26:93:AD:C8:0B:5B:06:3F:BD:B1:27:A6:B5:A6:3C:A3
Authority key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
Certificate issuer: /CN=b68f940f1cc577f370f28428850dc7bf7418f121
Certificate serial: 019D9962A5B7B9FF5B9858453FAF98AB638F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
Manifest number: 104A
Signing time: Fri 17 Apr 2026 03:01:12 +0000
Manifest this update: Fri 17 Apr 2026 03:01:12 +0000
Manifest next update: Sat 18 Apr 2026 03:01:12 +0000
Files and hashes: 1: ILGhz3ePO9oxIjIbV8ykYhaN2H4.roa (hash: VOXzwbv4ZGeGv9kyp7nhD/yFTySLzaFzJgbxt6Ep0+U=)
2: eU85RU0taQL8h-5P8OgU9OyopXY.roa (hash: 9O8C8fNo7lE1aPgGPT+DIp3qar7x4bHGxqk5sLTXTcI=)
3: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl (hash: 4E+woOjeH1IlWVKYeLMqmZECWgXSaiNXWYdQqt/I08w=)
4: w1gMt94WQ5eAPDOTWGJbst0F5fM.roa (hash: qfjHzZsPbhZdXrk21Rq3gvOAzicOO4wsSfCE26q4PYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:a5:b7:b9:ff:5b:98:58:45:3f:af:98:ab:63:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f940f1cc577f370f28428850dc7bf7418f121
Validity
Not Before: Apr 17 03:01:12 2026 GMT
Not After : Apr 18 03:01:12 2026 GMT
Subject: CN=90832f642693adc80b5b063fbdb127a6b5a63ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7e:38:22:3d:dc:7a:b2:7b:8b:64:a2:97:df:
81:ad:bf:81:bf:34:95:cf:21:e4:19:bf:39:5a:25:
34:fa:15:18:d5:42:72:41:14:84:7e:1e:be:e4:4f:
de:6c:cc:73:54:05:1a:c2:65:c4:b6:fa:15:4a:44:
f9:bb:82:30:51:2e:fb:bd:1e:97:78:e4:ba:21:95:
4c:0a:86:00:e3:4b:1a:7e:bc:5e:50:46:ee:7f:c5:
e2:0c:57:b6:b5:de:15:a2:0f:d8:93:c9:99:92:48:
ff:d4:c2:a7:f2:cc:a9:22:ef:6e:88:3d:06:e5:1c:
31:87:06:28:70:8d:3e:92:33:85:23:fc:d5:f3:24:
c3:60:7a:3c:94:ae:27:ce:68:7a:82:ae:db:8d:22:
1d:34:4f:53:5e:b1:b7:db:bb:f6:e1:4a:bf:db:d3:
dd:fb:5d:8a:f8:8f:d6:14:3d:ec:3e:fd:e0:30:d6:
43:56:5f:46:ae:d4:c4:fa:8f:55:6f:15:66:07:d2:
fc:5c:d7:42:35:eb:3a:3d:0e:ee:e7:d7:e6:b7:51:
03:e8:2f:10:e0:d2:db:a0:6f:20:3e:10:ef:a8:90:
69:df:b9:ef:b9:38:07:c1:66:1e:fd:fe:fa:c8:58:
9b:ce:a6:8d:b4:01:b3:63:c3:69:3e:45:a3:a5:29:
00:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:83:2F:64:26:93:AD:C8:0B:5B:06:3F:BD:B1:27:A6:B5:A6:3C:A3
X509v3 Authority Key Identifier:
keyid:B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6c:ba:33:a2:b0:b7:a0:aa:52:2c:26:7a:66:c2:ea:48:3e:
41:66:34:7c:f7:a4:7a:21:29:d9:5a:fe:64:be:ea:9c:d5:d7:
0f:cc:27:99:25:f3:da:5d:a6:3f:92:5d:9d:b9:88:0d:8d:2c:
dc:8a:91:5c:77:36:27:a7:03:f8:2b:f8:cb:81:c0:01:28:64:
14:5a:05:2f:63:f4:d1:97:67:c3:75:6c:07:6b:bd:83:a7:38:
ec:7d:e7:16:3e:ff:59:cb:c3:29:c5:25:93:27:54:7a:73:85:
23:68:ec:48:67:6b:a9:eb:4a:d3:8d:52:c9:8e:6c:e6:74:45:
36:06:27:20:91:3e:12:4f:28:23:a3:7a:27:01:8c:bd:4b:bd:
d2:f4:56:c3:63:31:65:57:0e:6e:e6:67:15:c1:86:fd:0d:02:
bd:d9:44:5e:94:fa:58:ca:6c:0f:05:28:0f:02:36:be:df:a8:
75:71:b7:df:54:7e:0e:5f:a4:77:c7:c5:88:96:c7:08:ed:6a:
28:09:c4:71:ad:2f:33:ae:cd:0c:54:61:e0:09:8b:28:d2:50:
2c:aa:b9:54:5c:21:24:5c:ed:d4:a5:9c:ef:e4:13:ea:45:0b:
f2:00:c1:32:ee:03:5b:52:97:11:9a:7b:be:b0:6c:d4:33:a0:
86:af:24:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYqW3uf9bmFhFP6+Yq2OPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OGY5NDBmMWNjNTc3ZjM3MGYyODQyODg1MGRjN2JmNzQx
OGYxMjEwHhcNMjYwNDE3MDMwMTEyWhcNMjYwNDE4MDMwMTEyWjAzMTEwLwYDVQQD
Eyg5MDgzMmY2NDI2OTNhZGM4MGI1YjA2M2ZiZGIxMjdhNmI1YTYzY2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy344Ij3cerJ7i2Sil9+Brb+BvzSV
zyHkGb85WiU0+hUY1UJyQRSEfh6+5E/ebMxzVAUawmXEtvoVSkT5u4IwUS77vR6X
eOS6IZVMCoYA40safrxeUEbuf8XiDFe2td4Vog/Yk8mZkkj/1MKn8sypIu9uiD0G
5RwxhwYocI0+kjOFI/zV8yTDYHo8lK4nzmh6gq7bjSIdNE9TXrG327v24Uq/29Pd
+12K+I/WFD3sPv3gMNZDVl9GrtTE+o9VbxVmB9L8XNdCNes6PQ7u59fmt1ED6C8Q
4NLboG8gPhDvqJBp37nvuTgHwWYe/f76yFibzqaNtAGzY8NpPkWjpSkA9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCDL2Qmk63IC1sGP72xJ6a1pjyjMB8GA1UdIwQY
MBaAFLaPlA8cxXfzcPKEKIUNx790GPEhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG8tVUR4ekZkX053OG9Rb2hRM0h2M1FZOFNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80YjJjMjMtZjUzNS00YjZkLWE0NDUt
ZTA0ZGFjNjFjZTlkLzEvdG8tVUR4ekZkX053OG9Rb2hRM0h2M1FZOFNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC80YjJjMjMtZjUzNS00YjZkLWE0NDUtZTA0ZGFjNjFjZTlk
LzEvdG8tVUR4ekZkX053OG9Rb2hRM0h2M1FZOFNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWy6M6Kw
t6CqUiwmembC6kg+QWY0fPekeiEp2Vr+ZL7qnNXXD8wnmSXz2l2mP5JdnbmIDY0s
3IqRXHc2J6cD+Cv4y4HAAShkFFoFL2P00Zdnw3VsB2u9g6c47H3nFj7/WcvDKcUl
kydUenOFI2jsSGdrqetK041SyY5s5nRFNgYnIJE+Ek8oI6N6JwGMvUu90vRWw2Mx
ZVcObuZnFcGG/Q0CvdlEXpT6WMpsDwUoDwI2vt+odXG331R+Dl+kd8fFiJbHCO1q
KAnEca0vM67NDFRh4AmLKNJQLKq5VFwhJFzt1KWc7+QT6kUL8gDBMu4DW1KXEZp7
vrBs1DOghq8k5w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:21:13 2026 by rpki-client