Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
File: x-ur14baE4BWVbG1UB_cv0M7x40.mft (raw, json)
Hash identifier: m0+rfKOaRTFkXY0uWs0piwXxb60DTqRl8mhRXz9/G0Y=
Subject key identifier: B1:E0:85:78:6F:7B:CC:9D:3D:49:DA:70:92:DE:DA:AA:8A:F2:7D:AB
Authority key identifier: C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
Certificate issuer: /CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Certificate serial: 019CAA5874CC2E3E7B0B788DEC9AAE78F21E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
Manifest number: 0FCC
Signing time: Sun 01 Mar 2026 17:00:49 +0000
Manifest this update: Sun 01 Mar 2026 17:00:49 +0000
Manifest next update: Mon 02 Mar 2026 17:00:49 +0000
Files and hashes: 1: MUDlj_foqQtHS4g3iVOxdnqwX5U.roa (hash: 8ddMF47yP0pJAVGHQdkSQLRsafhb5eoMN8E4QvTkIwo=)
2: T_ajvR2nQAvlNGNDSwjL2eitBKI.roa (hash: uZlllXoSCgzxncNwBPd5Cx/IZ61QG4puWlaD0A2LBZ8=)
3: x-ur14baE4BWVbG1UB_cv0M7x40.crl (hash: DjbXiY9jG4LIkRkupEhFWEmTZ3rmwx4WQnUfFyoY4n0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:74:cc:2e:3e:7b:0b:78:8d:ec:9a:ae:78:f2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Validity
Not Before: Mar 1 17:00:49 2026 GMT
Not After : Mar 2 17:00:49 2026 GMT
Subject: CN=b1e085786f7bcc9d3d49da7092dedaaa8af27dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ce:82:6d:16:d4:3a:22:0d:ec:75:f2:f0:b5:
3e:1a:a5:a8:db:b7:cf:d5:6e:53:6b:c6:01:30:92:
94:10:b7:39:a7:65:33:17:50:f4:5f:81:96:7f:8d:
f2:ce:f8:5b:84:d2:44:46:e2:43:57:86:00:6e:ac:
ca:93:fb:47:23:19:3d:41:07:a4:09:82:ef:30:ab:
b6:5b:f4:93:57:d2:c1:d3:80:38:d0:59:67:98:1b:
ae:01:44:0c:65:8f:a2:96:c5:e8:fe:a0:7a:bd:b7:
b0:c9:7d:44:a2:ba:bb:ce:6c:62:f9:94:f4:b7:b8:
80:77:d3:0e:10:e6:3f:9f:18:9e:69:9d:9f:ac:ea:
d7:af:ec:3d:53:a4:c2:ee:16:4c:77:b0:0d:97:57:
03:28:1c:23:2d:a8:86:e1:48:67:18:28:b3:a6:0c:
84:66:96:87:e0:ab:c1:3b:e5:ae:63:84:74:7e:bd:
76:71:ac:28:16:f2:aa:e1:8d:a2:e5:1a:66:1f:44:
7f:0d:02:49:40:30:7d:b5:07:2e:68:6f:36:88:21:
40:83:a3:89:f0:87:89:d9:40:52:4f:7e:66:ca:0a:
7c:b1:65:d5:5a:a9:4b:8e:40:d2:80:5c:18:fe:1c:
71:41:af:5f:91:3f:9f:48:e7:72:5a:d0:18:29:1f:
6a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E0:85:78:6F:7B:CC:9D:3D:49:DA:70:92:DE:DA:AA:8A:F2:7D:AB
X509v3 Authority Key Identifier:
keyid:C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:56:7d:85:81:1e:27:e9:bf:f4:3d:9f:9f:59:6b:0c:50:75:
f6:7d:8a:d9:dd:4a:2c:e1:c3:38:0a:b5:44:c0:5d:98:b7:43:
2a:50:d9:da:73:23:3b:c3:ff:d0:20:b2:54:4f:52:8f:4b:de:
3f:57:8f:63:ff:51:48:ab:33:51:a4:4b:8d:c5:5a:18:c8:74:
94:dd:80:ef:87:3d:fb:4d:fe:b2:f9:c9:3f:91:b9:cb:48:45:
00:3a:2f:55:d0:03:37:a4:78:97:26:d7:bb:70:92:c5:ef:2e:
e3:12:15:45:29:33:97:eb:2a:31:3a:0c:f4:f8:3f:86:5e:ac:
46:bc:49:90:f6:d4:4e:a3:3a:1d:75:26:a2:8b:c4:c2:07:4e:
10:50:c6:05:a1:8a:fc:c1:4f:2f:c0:01:46:b4:ac:7d:58:55:
9e:a0:12:fd:f9:26:d7:49:7b:c6:40:bc:7f:cf:cf:23:99:fe:
34:81:e7:7d:a4:94:52:0e:0c:63:7e:89:1d:a0:cb:5d:f5:4c:
f6:c8:36:28:94:12:dd:8b:82:a2:87:95:19:ac:f4:b7:96:dd:
5a:7f:2a:69:ae:f1:3e:34:b6:26:c5:11:e0:f6:fb:93:c2:e0:
27:d8:42:5d:d1:65:84:5b:aa:97:a5:0a:00:8b:c6:67:81:4e:
4c:2b:11:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWHTMLj57C3iN7JquePIeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZWJhYmQ3ODZkYTEzODA1NjU1YjFiNTUwMWZkY2JmNDMz
YmM3OGQwHhcNMjYwMzAxMTcwMDQ5WhcNMjYwMzAyMTcwMDQ5WjAzMTEwLwYDVQQD
EyhiMWUwODU3ODZmN2JjYzlkM2Q0OWRhNzA5MmRlZGFhYThhZjI3ZGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs6CbRbUOiIN7HXy8LU+GqWo27fP
1W5Ta8YBMJKUELc5p2UzF1D0X4GWf43yzvhbhNJERuJDV4YAbqzKk/tHIxk9QQek
CYLvMKu2W/STV9LB04A40FlnmBuuAUQMZY+ilsXo/qB6vbewyX1Eorq7zmxi+ZT0
t7iAd9MOEOY/nxieaZ2frOrXr+w9U6TC7hZMd7ANl1cDKBwjLaiG4UhnGCizpgyE
ZpaH4KvBO+WuY4R0fr12cawoFvKq4Y2i5RpmH0R/DQJJQDB9tQcuaG82iCFAg6OJ
8IeJ2UBST35mygp8sWXVWqlLjkDSgFwY/hxxQa9fkT+fSOdyWtAYKR9qxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHghXhve8ydPUnacJLe2qqK8n2rMB8GA1UdIwQY
MBaAFMfrq9eG2hOAVlWxtVAf3L9DO8eNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveC11cjE0YmFFNEJXVmJHMVVCX2N2ME03eDQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jMDY0YTUtZDdhOS00ZTZmLThmZDgt
MGRjZDAzZGMwODk3LzEveC11cjE0YmFFNEJXVmJHMVVCX2N2ME03eDQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9jMDY0YTUtZDdhOS00ZTZmLThmZDgtMGRjZDAzZGMwODk3
LzEveC11cjE0YmFFNEJXVmJHMVVCX2N2ME03eDQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVZ9hYEe
J+m/9D2fn1lrDFB19n2K2d1KLOHDOAq1RMBdmLdDKlDZ2nMjO8P/0CCyVE9Sj0ve
P1ePY/9RSKszUaRLjcVaGMh0lN2A74c9+03+svnJP5G5y0hFADovVdADN6R4lybX
u3CSxe8u4xIVRSkzl+sqMToM9Pg/hl6sRrxJkPbUTqM6HXUmoovEwgdOEFDGBaGK
/MFPL8ABRrSsfVhVnqAS/fkm10l7xkC8f8/PI5n+NIHnfaSUUg4MY36JHaDLXfVM
9sg2KJQS3YuCooeVGaz0t5bdWn8qaa7xPjS2JsUR4Pb7k8LgJ9hCXdFlhFuql6UK
AIvGZ4FOTCsRGQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:04 2026 by rpki-client