Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
File: u41koNwhmWscmeaMyVFpTik-3v4.mft (raw, json)
Hash identifier: r6P4TPjkOdXSUtjIczJnr41Vck548w18Wf2ikRPGbaE=
Subject key identifier: 9C:2D:FE:9E:03:BB:CB:13:17:EF:8D:E8:76:07:95:3A:7A:16:C3:52
Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
Certificate issuer: /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Certificate serial: 019CAD9044F6190900CDDDE8844957CD5ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
Manifest number: 1851
Signing time: Mon 02 Mar 2026 08:00:39 +0000
Manifest this update: Mon 02 Mar 2026 08:00:39 +0000
Manifest next update: Tue 03 Mar 2026 08:00:39 +0000
Files and hashes: 1: 6wCR-IXi-d6mFq9coQKBvKcWKb8.roa (hash: 3CTCR/QkDS3QC7l1TMcETE6DIffI4EDmk47oroP7Oco=)
2: Wve6Gpo7jKUoWkkK-ID2jmyV7c4.roa (hash: 1lWZa+k/0zeWIBYNmCvAje+cs/RGX75v0KzNg1cs52k=)
3: u41koNwhmWscmeaMyVFpTik-3v4.crl (hash: GCk3VoV87eZ1IgWxqCAWBGc9hrJFGGJdCCGMRoV0E/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:44:f6:19:09:00:cd:dd:e8:84:49:57:cd:5e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Validity
Not Before: Mar 2 08:00:39 2026 GMT
Not After : Mar 3 08:00:39 2026 GMT
Subject: CN=9c2dfe9e03bbcb1317ef8de87607953a7a16c352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:48:e1:24:29:8e:29:3c:eb:06:73:50:d0:84:
ca:2c:e4:77:32:b2:b6:55:e0:54:09:17:ce:21:63:
e4:e6:ed:d1:58:1e:fe:58:1d:36:d1:ff:6e:89:eb:
91:37:cc:3b:33:1b:5f:30:1c:13:ab:de:35:12:ee:
bd:f8:35:cd:d8:4d:60:5c:16:65:8a:7a:d4:75:69:
19:8d:e9:bd:70:23:f8:75:7b:07:60:a4:b4:92:d5:
dd:1d:9a:4c:44:8f:a6:ac:a3:c8:b0:b4:00:db:d0:
aa:2f:79:84:3d:0e:dd:90:dc:16:5f:49:23:0b:84:
53:2f:dd:da:24:e8:6b:37:4f:37:82:f8:87:4a:5b:
ae:42:45:88:d9:f7:fe:0a:73:c8:aa:dd:39:48:2a:
0b:fc:2a:ad:9b:3e:c2:4e:ff:e3:3d:cf:76:d9:e0:
52:ba:79:2c:f8:e9:8e:05:59:0d:e5:54:76:8e:48:
9f:e7:25:20:a5:73:a0:ae:15:ff:e9:74:b1:c9:14:
a4:77:3a:15:58:cd:00:66:36:38:b9:21:dc:45:1b:
a0:1a:00:c2:72:7f:05:89:48:f6:7b:6f:ac:76:89:
3d:ac:26:37:ad:69:75:a1:aa:9c:d5:66:97:e9:8e:
60:df:42:6f:ef:88:1a:da:dc:d3:c0:df:cf:7b:9a:
67:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2D:FE:9E:03:BB:CB:13:17:EF:8D:E8:76:07:95:3A:7A:16:C3:52
X509v3 Authority Key Identifier:
keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:17:66:9e:ed:d0:a1:32:90:af:8d:f0:0c:e1:43:24:aa:fe:
12:68:22:4d:ed:92:d8:48:9d:8a:4e:9c:d6:39:58:9d:fa:73:
3f:99:24:9a:f3:a8:46:fc:e5:eb:d9:0a:31:c1:37:0a:5f:32:
8f:a6:56:5e:6d:99:2f:76:69:ff:c4:ba:51:40:83:82:ba:5f:
cf:9a:58:e0:7f:38:49:20:7c:c9:72:7d:79:99:76:5c:1c:f7:
eb:f6:33:a4:c5:66:f9:aa:2b:c5:6c:ee:b1:1e:39:fa:70:0a:
49:75:4b:89:21:2c:10:f3:3d:73:5d:17:18:7c:fc:27:ab:53:
ff:03:dd:aa:67:22:09:6e:55:61:ee:90:de:bb:8b:02:c7:3a:
50:04:20:b5:30:c1:ef:a1:b9:14:0c:68:54:ad:67:7c:07:03:
da:66:b0:30:a8:44:ff:a9:aa:ec:5b:10:a2:7e:cc:7f:a1:33:
a5:e1:b8:87:27:2f:07:9a:0a:45:41:96:37:75:f8:c1:ac:00:
5e:99:3e:69:9f:54:44:d0:88:f7:c0:96:d3:3a:eb:b2:c1:f9:
6f:7d:1b:3f:40:55:81:90:d3:83:cb:7d:eb:31:68:e0:07:d4:
d9:c6:f3:1b:75:02:82:b4:6c:87:13:6d:30:17:c5:3f:c0:db:
31:09:5d:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkET2GQkAzd3ohElXzV7WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiOGQ2NGEwZGMyMTk5NmIxYzk5ZTY4Y2M5NTE2OTRlMjkz
ZWRlZmUwHhcNMjYwMzAyMDgwMDM5WhcNMjYwMzAzMDgwMDM5WjAzMTEwLwYDVQQD
Eyg5YzJkZmU5ZTAzYmJjYjEzMTdlZjhkZTg3NjA3OTUzYTdhMTZjMzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkjhJCmOKTzrBnNQ0ITKLOR3MrK2
VeBUCRfOIWPk5u3RWB7+WB020f9uieuRN8w7MxtfMBwTq941Eu69+DXN2E1gXBZl
inrUdWkZjem9cCP4dXsHYKS0ktXdHZpMRI+mrKPIsLQA29CqL3mEPQ7dkNwWX0kj
C4RTL93aJOhrN083gviHSluuQkWI2ff+CnPIqt05SCoL/Cqtmz7CTv/jPc922eBS
unks+OmOBVkN5VR2jkif5yUgpXOgrhX/6XSxyRSkdzoVWM0AZjY4uSHcRRugGgDC
cn8FiUj2e2+sdok9rCY3rWl1oaqc1WaX6Y5g30Jv74ga2tzTwN/Pe5pnBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwt/p4Du8sTF++N6HYHlTp6FsNSMB8GA1UdIwQY
MBaAFLuNZKDcIZlrHJnmjMlRaU4pPt7+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yMjAzMTgtNDZmMS00ZWJmLWE3OTUt
ZGQ0YTIxN2Q2MDZiLzEvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yMjAzMTgtNDZmMS00ZWJmLWE3OTUtZGQ0YTIxN2Q2MDZi
LzEvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhdmnu3Q
oTKQr43wDOFDJKr+EmgiTe2S2Eidik6c1jlYnfpzP5kkmvOoRvzl69kKMcE3Cl8y
j6ZWXm2ZL3Zp/8S6UUCDgrpfz5pY4H84SSB8yXJ9eZl2XBz36/YzpMVm+aorxWzu
sR45+nAKSXVLiSEsEPM9c10XGHz8J6tT/wPdqmciCW5VYe6Q3ruLAsc6UAQgtTDB
76G5FAxoVK1nfAcD2mawMKhE/6mq7FsQon7Mf6EzpeG4hycvB5oKRUGWN3X4wawA
Xpk+aZ9URNCI98CW0zrrssH5b30bP0BVgZDTg8t96zFo4AfU2cbzG3UCgrRshxNt
MBfFP8DbMQlduw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:08 2026 by rpki-client