Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
File: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft (raw, json)
Hash identifier: 5lYzMtdRkNwzKLdooHov34ezZivAbhoNDG9d0IL6Jeg=
Subject key identifier: 36:EA:19:CE:46:AA:78:A3:65:AB:6C:34:90:A8:1D:96:58:88:37:D8
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial: 019D9D3F8EE6987444FA324A3246DF6B2F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
Manifest number: 0C9B
Signing time: Fri 17 Apr 2026 21:01:21 +0000
Manifest this update: Fri 17 Apr 2026 21:01:21 +0000
Manifest next update: Sat 18 Apr 2026 21:01:21 +0000
Files and hashes: 1: JiTEOh1beM9m1c5OH759yqvEl9I.roa (hash: iaA6RPeL2WvcIuJLk8rfC+Z8u5aZ9GGTIq103Krs76s=)
2: uG2U8A5c_YazFIY440Pr9nX8jNc.roa (hash: OfRROMf9ocaB/l9WW0MPwoR5osaLIox3gDEvLkHcQls=)
3: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl (hash: D2G/f8UK/2+hLZ7Mnyue7JrG39AY4PdRgVNJbaCmN3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:8e:e6:98:74:44:fa:32:4a:32:46:df:6b:2f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Validity
Not Before: Apr 17 21:01:21 2026 GMT
Not After : Apr 18 21:01:21 2026 GMT
Subject: CN=36ea19ce46aa78a365ab6c3490a81d96588837d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:79:89:0e:b9:59:13:2e:5e:c3:fe:a2:6b:
b7:47:b6:e0:da:16:c7:72:a1:27:dd:bf:68:ec:ad:
b8:42:50:b3:2c:cb:85:f4:68:b6:c7:72:ec:33:d5:
27:a8:09:37:cb:07:9b:a5:19:92:6e:48:9a:a8:05:
1f:f6:b5:1f:f2:ca:99:e8:7a:7e:ba:5b:f3:0b:c9:
02:03:04:b4:6b:8a:19:05:26:88:ba:59:79:51:f3:
d4:a7:08:68:8a:59:53:db:0b:bb:8d:c1:8a:d7:4a:
65:69:18:68:22:0e:2a:8f:e3:cf:c3:90:03:fc:f8:
21:4f:2f:24:6b:ae:a8:47:e5:1e:09:17:14:68:b5:
4d:7c:48:af:b3:95:72:f2:1d:9e:3d:2c:fa:51:36:
26:d3:c6:98:1e:27:2f:7c:74:2f:1d:49:d7:47:8a:
58:c3:d7:1d:43:e5:57:09:ca:4f:a4:88:29:2e:d8:
3e:f0:20:b9:07:11:83:af:0a:d3:ce:55:f8:14:87:
f1:0f:41:e7:e4:1a:40:74:7f:7d:88:dd:bc:88:e5:
7d:e4:4a:4d:4a:3a:3a:89:4e:63:e3:25:d3:31:13:
4d:15:78:44:09:39:4d:f5:5b:14:ea:b5:69:c3:08:
ae:e7:04:fb:f8:49:5c:25:51:30:27:9c:8a:38:4c:
c3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EA:19:CE:46:AA:78:A3:65:AB:6C:34:90:A8:1D:96:58:88:37:D8
X509v3 Authority Key Identifier:
keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:29:54:c9:b5:10:d1:d9:8c:dc:a4:7d:34:7c:5e:cf:fa:67:
18:7a:37:90:d8:61:cf:94:9c:44:cb:10:03:88:7d:b8:58:7a:
c9:62:a9:7b:a4:6a:f0:34:64:77:4c:7a:e1:5d:b3:9a:32:3f:
a1:30:34:f1:e1:bc:81:b7:b4:49:21:58:3d:43:57:7e:66:41:
dd:3c:79:35:0f:10:63:c7:3a:92:d8:b5:0e:27:7a:01:1f:82:
27:af:cf:e7:3c:ac:0f:4a:5a:98:ca:f5:b1:6d:c5:5b:14:b5:
bb:5e:85:b8:b1:b9:b3:13:81:f0:a1:cb:3f:42:69:c4:a3:fd:
a1:b0:c0:b2:fd:d6:ce:82:a6:5e:45:d7:6d:45:31:c6:23:2d:
ff:2d:b7:1d:aa:b5:cd:fd:47:f5:80:19:6e:c6:62:04:6b:34:
df:08:4e:64:0a:f2:3d:9d:de:44:a1:6f:0b:f9:97:c0:18:e3:
cd:16:ac:5b:99:aa:8d:5f:60:8f:8f:91:c2:8b:f3:26:52:9c:
77:07:37:e2:8d:5c:eb:e0:e3:97:f1:b0:af:de:94:89:70:a9:
08:57:af:0d:ea:ea:b9:09:e6:c5:f4:47:5b:16:05:47:88:70:
a5:f0:70:1b:b5:82:bc:c6:ff:86:38:d4:de:7b:43:a4:45:21:
50:05:81:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dP47mmHRE+jJKMkbfay9tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YWYxOWY0YTYwZGFmMTVlZmI3ZWM0MWZjNTlmNWRhNjU1
OTcyZTYwHhcNMjYwNDE3MjEwMTIxWhcNMjYwNDE4MjEwMTIxWjAzMTEwLwYDVQQD
EygzNmVhMTljZTQ2YWE3OGEzNjVhYjZjMzQ5MGE4MWQ5NjU4ODgzN2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt555iQ65WRMuXsP+omu3R7bg2hbH
cqEn3b9o7K24QlCzLMuF9Gi2x3LsM9UnqAk3ywebpRmSbkiaqAUf9rUf8sqZ6Hp+
ulvzC8kCAwS0a4oZBSaIull5UfPUpwhoillT2wu7jcGK10plaRhoIg4qj+PPw5AD
/PghTy8ka66oR+UeCRcUaLVNfEivs5Vy8h2ePSz6UTYm08aYHicvfHQvHUnXR4pY
w9cdQ+VXCcpPpIgpLtg+8CC5BxGDrwrTzlX4FIfxD0Hn5BpAdH99iN28iOV95EpN
Sjo6iU5j4yXTMRNNFXhECTlN9VsU6rVpwwiu5wT7+ElcJVEwJ5yKOEzDiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbqGc5GqnijZatsNJCoHZZYiDfYMB8GA1UdIwQY
MBaAFLmvGfSmDa8V77fsQfxZ9dplWXLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWE4WjlLWU5yeFh2dC14Ql9GbjEybVZaY3VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xNGY0NmMtMGEzNi00Y2MzLWIwOTEt
NzQyNWIxM2Q1Y2Y4LzEvdWE4WjlLWU5yeFh2dC14Ql9GbjEybVZaY3VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8xNGY0NmMtMGEzNi00Y2MzLWIwOTEtNzQyNWIxM2Q1Y2Y4
LzEvdWE4WjlLWU5yeFh2dC14Ql9GbjEybVZaY3VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFClUybUQ
0dmM3KR9NHxez/pnGHo3kNhhz5ScRMsQA4h9uFh6yWKpe6Rq8DRkd0x64V2zmjI/
oTA08eG8gbe0SSFYPUNXfmZB3Tx5NQ8QY8c6kti1Did6AR+CJ6/P5zysD0pamMr1
sW3FWxS1u16FuLG5sxOB8KHLP0JpxKP9obDAsv3WzoKmXkXXbUUxxiMt/y23Haq1
zf1H9YAZbsZiBGs03whOZAryPZ3eRKFvC/mXwBjjzRasW5mqjV9gj4+RwovzJlKc
dwc34o1c6+Djl/Gwr96UiXCpCFevDerquQnmxfRHWxYFR4hwpfBwG7WCvMb/hjjU
3ntDpEUhUAWBtA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:15 2026 by rpki-client