Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
File: uNI7HmwH5iry0ufrbeCJOwkRmrs.mft (raw, json)
Hash identifier: cSlF760KfCWhOWR2LqCbBpndhOhgSTwT1L7pOQrGO6k=
Subject key identifier: B9:F4:A3:DD:37:7B:64:D2:51:60:7F:77:EE:2D:50:16:22:9F:CE:E7
Authority key identifier: B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
Certificate issuer: /CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Certificate serial: 019CA97D7370E4306C489E62321C7AD91580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
Manifest number: 180B
Signing time: Sun 01 Mar 2026 13:01:36 +0000
Manifest this update: Sun 01 Mar 2026 13:01:36 +0000
Manifest next update: Mon 02 Mar 2026 13:01:36 +0000
Files and hashes: 1: 4vljd6eS7xs98V4vbQdU27KIRbo.roa (hash: p9Wr9nNkj4z/XeaCt1WGEIqENx+18d7M1y0DLvifYF0=)
2: uNI7HmwH5iry0ufrbeCJOwkRmrs.crl (hash: 72Se/xs9lwUvhCtedFAVZtX4cW1PhUCgc2xN74eevY0=)
3: uUX1xSwp1T9nuxxoEoS7mJ4ylKQ.asa (hash: ARnmi9JFKrZP1rcaarKtNChdLdy0XQtmO2iQxRYVYjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:73:70:e4:30:6c:48:9e:62:32:1c:7a:d9:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Validity
Not Before: Mar 1 13:01:36 2026 GMT
Not After : Mar 2 13:01:36 2026 GMT
Subject: CN=b9f4a3dd377b64d251607f77ee2d5016229fcee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d9:64:0a:d4:81:39:42:86:fa:f6:1d:3b:f2:
bb:19:c8:7f:9e:66:6a:df:19:a5:01:20:85:54:4f:
90:64:7d:69:c5:4a:ff:d2:c5:8e:dc:33:e7:f8:ee:
fc:88:ff:ee:19:a0:8b:8a:69:55:df:44:c5:99:e2:
d0:a7:4d:23:a7:bd:49:bf:ba:e0:24:32:44:17:f3:
32:20:3a:b5:f9:19:a8:04:e2:1b:ea:df:96:be:ca:
f2:23:85:28:e1:71:fe:f3:42:7d:27:d1:1d:4a:a7:
c0:55:3e:83:45:97:22:02:af:e1:63:dc:6d:86:9f:
7b:57:c9:53:e8:73:f0:07:31:9f:11:c0:56:c6:84:
6b:e5:60:c4:c0:5d:c8:c5:59:30:ed:69:8e:f6:02:
fc:4c:75:ff:e2:cc:66:7c:45:82:8b:74:d6:12:50:
e9:45:16:79:44:50:5c:4d:50:64:81:9f:fb:22:ed:
b2:21:d2:ad:03:4a:05:76:1b:8a:42:83:8f:e4:d1:
80:c2:d1:5f:4c:0f:1d:97:cc:4c:41:9c:22:4b:a4:
bc:c7:83:1e:d3:d6:e6:f5:5b:57:02:76:40:c3:49:
33:47:25:10:2f:a8:ec:fe:28:90:07:ab:36:93:f4:
85:79:d5:3f:28:15:2f:8b:b3:dd:2e:f9:34:92:d5:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F4:A3:DD:37:7B:64:D2:51:60:7F:77:EE:2D:50:16:22:9F:CE:E7
X509v3 Authority Key Identifier:
keyid:B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:30:17:aa:a0:86:69:87:7a:60:92:7f:e9:ba:4c:dc:f5:7a:
d2:36:70:05:16:6b:ad:6c:85:a0:9c:16:5b:20:0e:ff:aa:e9:
a5:0d:18:ec:48:e1:b7:a1:29:d9:88:1e:88:92:b8:20:f2:22:
3b:10:df:58:64:47:4d:3e:6a:1d:3e:7c:13:6b:04:d0:69:96:
1b:41:31:e4:5d:58:3b:bc:9d:28:97:99:ca:07:e8:d2:2c:5e:
da:7d:86:18:96:71:d8:60:a7:0d:5d:62:96:9d:43:20:bf:fa:
ab:07:16:5e:d1:d3:4f:72:06:da:44:b5:3c:6b:60:c1:7b:7d:
6f:79:99:18:fd:43:90:59:72:9a:e0:72:e8:5c:63:9e:e5:0f:
4a:09:fb:34:05:35:9b:3a:1d:58:33:86:a8:f6:cc:95:6a:d0:
6c:e3:0d:4e:0f:d0:72:7e:63:b5:61:5a:01:77:47:a8:87:5e:
b3:3b:a4:d3:7e:fa:22:5e:90:84:8e:11:47:0f:04:e6:4c:ff:
16:b6:e9:93:4c:02:27:43:bd:17:4e:dd:5e:66:cf:57:85:f8:
49:b0:b5:be:8a:be:e7:4b:29:1b:de:04:20:43:e9:2e:7f:0b:
f3:13:59:02:b8:31:db:f5:5d:09:6b:e7:af:a9:1a:65:76:2c:
a0:56:43:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypfXNw5DBsSJ5iMhx62RWAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZDIzYjFlNmMwN2U2MmFmMmQyZTdlYjZkZTA4OTNiMDkx
MTlhYmIwHhcNMjYwMzAxMTMwMTM2WhcNMjYwMzAyMTMwMTM2WjAzMTEwLwYDVQQD
EyhiOWY0YTNkZDM3N2I2NGQyNTE2MDdmNzdlZTJkNTAxNjIyOWZjZWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdlkCtSBOUKG+vYdO/K7Gch/nmZq
3xmlASCFVE+QZH1pxUr/0sWO3DPn+O78iP/uGaCLimlV30TFmeLQp00jp71Jv7rg
JDJEF/MyIDq1+RmoBOIb6t+WvsryI4Uo4XH+80J9J9EdSqfAVT6DRZciAq/hY9xt
hp97V8lT6HPwBzGfEcBWxoRr5WDEwF3IxVkw7WmO9gL8THX/4sxmfEWCi3TWElDp
RRZ5RFBcTVBkgZ/7Iu2yIdKtA0oFdhuKQoOP5NGAwtFfTA8dl8xMQZwiS6S8x4Me
09bm9VtXAnZAw0kzRyUQL6js/iiQB6s2k/SFedU/KBUvi7PdLvk0ktW2KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLn0o903e2TSUWB/d+4tUBYin87nMB8GA1UdIwQY
MBaAFLjSOx5sB+Yq8tLn623giTsJEZq7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU5JN0htd0g1aXJ5MHVmcmJlQ0pPd2tSbXJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iNzRhYTItMjVlMC00YWQ1LThjYzMt
NjkwNjFlZjJjNDk5LzEvdU5JN0htd0g1aXJ5MHVmcmJlQ0pPd2tSbXJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9iNzRhYTItMjVlMC00YWQ1LThjYzMtNjkwNjFlZjJjNDk5
LzEvdU5JN0htd0g1aXJ5MHVmcmJlQ0pPd2tSbXJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjAXqqCG
aYd6YJJ/6bpM3PV60jZwBRZrrWyFoJwWWyAO/6rppQ0Y7Ejht6Ep2YgeiJK4IPIi
OxDfWGRHTT5qHT58E2sE0GmWG0Ex5F1YO7ydKJeZygfo0ixe2n2GGJZx2GCnDV1i
lp1DIL/6qwcWXtHTT3IG2kS1PGtgwXt9b3mZGP1DkFlymuBy6FxjnuUPSgn7NAU1
mzodWDOGqPbMlWrQbOMNTg/Qcn5jtWFaAXdHqIdeszuk0376Il6QhI4RRw8E5kz/
Frbpk0wCJ0O9F07dXmbPV4X4SbC1voq+50spG94EIEPpLn8L8xNZArgx2/VdCWvn
r6kaZXYsoFZDbA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:48 2026 by rpki-client