Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
File: uXK9SdVRtK2lvWu2lWGKeUUa004.mft (raw, json)
Hash identifier: S3k9MTmyWpwfVi7Y0OH8jhQmj712oEQzMBfhGy/xdbI=
Subject key identifier: CF:C4:A4:64:94:29:AE:96:50:43:96:47:80:46:F1:9E:66:D5:9B:C9
Authority key identifier: B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
Certificate issuer: /CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Certificate serial: 019EC36E0BF13A5E10D8A7968CDF698BC1A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
Manifest number: 0BBD
Signing time: Sun 14 Jun 2026 00:00:29 +0000
Manifest this update: Sun 14 Jun 2026 00:00:29 +0000
Manifest next update: Mon 15 Jun 2026 00:00:29 +0000
Files and hashes: 1: 0FR4rtBsUgkCQ9m5OguHfOm1GHQ.roa (hash: d7VJiBtsIdM7jSysdAdRwoEyVrklS+9IpbWKmL/eW6A=)
2: jOeIMzKbhpgFfG5e3hDQe_UydwM.roa (hash: y03l7aLK3bctMe56clUbqVb6IeHiboemDaPxdQDYS7Y=)
3: uXK9SdVRtK2lvWu2lWGKeUUa004.crl (hash: 13RVFMWjY9jW3IlK++ujzXXRIih2AWqcGA0R1k0G9j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:6e:0b:f1:3a:5e:10:d8:a7:96:8c:df:69:8b:c1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Validity
Not Before: Jun 14 00:00:29 2026 GMT
Not After : Jun 15 00:00:29 2026 GMT
Subject: CN=cfc4a4649429ae96504396478046f19e66d59bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:70:8a:4e:e3:f8:c5:2b:46:4a:f9:49:f1:09:
1e:80:1e:10:6c:48:1e:1a:20:36:c4:0d:46:9a:a6:
ef:73:5c:bc:3a:e5:58:39:d1:e0:39:19:c5:ed:58:
5a:51:0c:cd:a2:0a:8d:a0:40:f3:40:50:0d:f9:f0:
e1:2f:b9:c0:87:3f:ac:c9:d7:6b:cb:ef:a1:53:46:
30:2e:66:0a:33:44:63:cd:10:d0:8b:74:bd:12:29:
44:a9:1a:16:01:66:fa:75:4f:57:3b:dd:84:1b:b0:
10:b1:bb:e8:60:26:ea:65:86:4e:24:e3:09:01:81:
55:90:c8:a8:10:18:c5:e2:5a:0a:83:99:ff:90:2d:
ff:99:af:7d:f5:fd:b9:91:f9:c1:51:e3:d3:b3:6e:
af:ca:89:2f:e0:68:88:f6:84:e8:94:ad:d9:db:e4:
49:ce:2a:48:21:3d:25:74:3f:ea:58:76:e5:db:95:
c2:b3:c8:d4:ad:77:b8:a5:7e:d9:4b:2c:c6:20:c1:
bc:c0:51:7e:73:9e:90:43:f0:f7:d3:83:c0:ef:e5:
a8:f2:d2:f0:b2:da:09:80:d1:8e:0e:33:af:73:2b:
56:de:43:a2:2e:9d:c4:d8:fd:30:0f:06:85:53:2e:
54:f8:9d:0a:5c:70:0c:8f:0e:4c:1c:be:59:9f:63:
f5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C4:A4:64:94:29:AE:96:50:43:96:47:80:46:F1:9E:66:D5:9B:C9
X509v3 Authority Key Identifier:
keyid:B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:4d:b9:3c:3a:97:fc:03:2b:4c:bc:82:71:bd:1e:30:af:de:
42:bc:6a:29:98:ba:0b:83:0d:38:63:cc:d0:51:86:94:9c:09:
e5:a0:54:f8:75:03:ba:44:72:8e:8e:19:8b:7f:65:a1:22:94:
89:e7:df:83:ec:d8:de:cd:49:d2:83:54:3c:85:f8:9e:da:e6:
71:46:5f:e4:38:6d:23:cf:e0:f9:f6:7d:ef:b4:f5:0b:5a:c8:
4f:e5:b4:90:50:18:4d:24:72:ce:cf:04:5a:41:34:d5:f6:b5:
24:fc:ce:6a:fb:46:b0:3e:3d:e0:18:d4:91:9f:c1:72:8f:19:
27:4d:46:9a:5b:43:be:b1:ae:c0:ac:a8:74:eb:ee:de:ad:47:
50:7b:e3:a7:00:b3:2c:33:c3:80:22:fe:9a:a5:7c:92:4a:81:
42:e1:56:49:20:39:71:5e:28:3e:2c:0e:90:a6:fb:8f:a5:f5:
98:a5:c1:7a:9e:99:60:58:c6:8c:5a:22:c1:39:cb:0a:b9:bd:
35:a8:b0:99:7c:88:89:4d:03:0a:8f:d1:ba:4d:50:6d:d4:e2:
68:fe:0c:6c:51:63:1b:a8:8f:42:f4:b0:43:2b:74:04:25:1a:
2b:2c:15:5c:48:d6:12:16:de:67:ea:2d:ff:a1:bc:0f:95:82:
6d:9a:89:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DbgvxOl4Q2KeWjN9pi8GgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NzJiZDQ5ZDU1MWI0YWRhNWJkNmJiNjk1NjE4YTc5NDUx
YWQzNGUwHhcNMjYwNjE0MDAwMDI5WhcNMjYwNjE1MDAwMDI5WjAzMTEwLwYDVQQD
EyhjZmM0YTQ2NDk0MjlhZTk2NTA0Mzk2NDc4MDQ2ZjE5ZTY2ZDU5YmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknCKTuP4xStGSvlJ8QkegB4QbEge
GiA2xA1Gmqbvc1y8OuVYOdHgORnF7VhaUQzNogqNoEDzQFAN+fDhL7nAhz+syddr
y++hU0YwLmYKM0RjzRDQi3S9EilEqRoWAWb6dU9XO92EG7AQsbvoYCbqZYZOJOMJ
AYFVkMioEBjF4loKg5n/kC3/ma999f25kfnBUePTs26vyokv4GiI9oTolK3Z2+RJ
zipIIT0ldD/qWHbl25XCs8jUrXe4pX7ZSyzGIMG8wFF+c56QQ/D304PA7+Wo8tLw
stoJgNGODjOvcytW3kOiLp3E2P0wDwaFUy5U+J0KXHAMjw5MHL5Zn2P1pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/EpGSUKa6WUEOWR4BG8Z5m1ZvJMB8GA1UdIwQY
MBaAFLlyvUnVUbStpb1rtpVhinlFGtNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVhLOVNkVlJ0SzJsdld1MmxXR0tlVVVhMDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mZTA3YjctZjQ2NC00ZTY3LTgyOTkt
Y2E1ZTY4NTQzOGEyLzEvdVhLOVNkVlJ0SzJsdld1MmxXR0tlVVVhMDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mZTA3YjctZjQ2NC00ZTY3LTgyOTktY2E1ZTY4NTQzOGEy
LzEvdVhLOVNkVlJ0SzJsdld1MmxXR0tlVVVhMDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyU25PDqX
/AMrTLyCcb0eMK/eQrxqKZi6C4MNOGPM0FGGlJwJ5aBU+HUDukRyjo4Zi39loSKU
ieffg+zY3s1J0oNUPIX4ntrmcUZf5DhtI8/g+fZ977T1C1rIT+W0kFAYTSRyzs8E
WkE01fa1JPzOavtGsD494BjUkZ/Bco8ZJ01GmltDvrGuwKyodOvu3q1HUHvjpwCz
LDPDgCL+mqV8kkqBQuFWSSA5cV4oPiwOkKb7j6X1mKXBep6ZYFjGjFoiwTnLCrm9
NaiwmXyIiU0DCo/Ruk1QbdTiaP4MbFFjG6iPQvSwQyt0BCUaKywVXEjWEhbeZ+ot
/6G8D5WCbZqJHQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:52:13 2026 by rpki-client