Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
File: U0Yz8Z9h1lRuur996ft6qYftW_M.mft (raw, json)
Hash identifier: yFayUXzK54/l4UfmpTBMae9uD8x2Wt+gyaeZVh1Xw+4=
Subject key identifier: F7:D0:31:32:19:25:87:15:B6:E2:3E:57:E2:68:07:FA:12:37:58:6F
Authority key identifier: 53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
Certificate issuer: /CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Certificate serial: 019D09309FF768C6B43187AD79DDC87B184B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
Manifest number: 1877
Signing time: Fri 20 Mar 2026 03:01:14 +0000
Manifest this update: Fri 20 Mar 2026 03:01:14 +0000
Manifest next update: Sat 21 Mar 2026 03:01:14 +0000
Files and hashes: 1: TerM9KfzJsRRkdvjMKo5OW1_vg4.roa (hash: 4hf+yhqdXpUZCf15GpEdNxp1wNaJ6uMaWZCGmy9se7g=)
2: U0Yz8Z9h1lRuur996ft6qYftW_M.crl (hash: 0Dic2K/SFiMRVszO8y/OFYEYSPvgXeEiC4z3Ga1GbEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:09:30:9f:f7:68:c6:b4:31:87:ad:79:dd:c8:7b:18:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Validity
Not Before: Mar 20 03:01:14 2026 GMT
Not After : Mar 21 03:01:14 2026 GMT
Subject: CN=f7d0313219258715b6e23e57e26807fa1237586f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0d:0d:e8:a1:d1:a0:ec:ae:ae:56:fa:84:c7:
ff:ad:94:cb:86:09:39:72:22:22:22:23:4b:ba:63:
3c:ff:d8:b0:b3:b8:38:ec:1b:2c:b3:04:22:0e:2f:
75:22:3b:2e:08:11:1f:59:15:5e:df:70:0d:8c:6a:
be:3b:55:a9:ea:1f:12:cc:33:33:e9:90:2a:60:d8:
c3:6c:7d:2f:f4:6b:89:a5:35:b9:76:6c:a3:21:f2:
3d:75:bf:e9:60:70:75:3d:56:86:29:79:5c:4e:2b:
a5:5d:df:76:20:9c:77:ff:8a:c6:2c:54:b1:0a:e9:
78:8d:dc:25:c9:51:a2:41:94:80:8b:72:90:08:93:
d5:34:55:39:86:10:5d:79:e1:d6:7f:97:82:dc:fe:
08:b8:73:b9:2b:d1:f8:4f:7c:8f:f0:30:bc:ac:f1:
14:f6:47:9d:46:bb:b6:8d:f0:76:b3:75:0d:d5:b6:
86:bc:cc:8f:9f:17:06:34:f4:b9:bb:4c:82:90:0d:
17:50:47:68:fe:df:5a:a8:24:a4:cb:c7:19:fe:72:
75:a1:86:f7:f0:86:44:3d:f0:48:8f:71:df:76:b6:
a8:4d:d8:db:84:b6:d9:6c:04:be:95:fb:1b:da:8c:
fd:a4:8b:be:f8:ae:93:a8:08:28:30:f4:4a:e3:bb:
29:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D0:31:32:19:25:87:15:B6:E2:3E:57:E2:68:07:FA:12:37:58:6F
X509v3 Authority Key Identifier:
keyid:53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:20:33:45:35:33:47:31:aa:37:f3:e8:2d:87:fd:68:2b:66:
21:d6:7a:1b:dc:f4:25:ec:4e:fe:60:20:ff:f4:09:97:e7:c3:
58:95:74:1f:22:eb:80:28:cc:96:6b:98:87:31:dc:1a:5a:18:
2d:74:b9:26:e2:eb:38:e1:02:73:23:fa:86:52:f0:41:b0:1d:
7f:8a:e1:46:36:99:d7:61:70:7c:2a:b3:eb:a7:09:e4:a8:3d:
8a:c1:90:17:d8:cd:58:62:c0:5d:9e:78:9e:9b:30:cf:60:4b:
96:79:45:6e:79:d0:a5:24:c6:61:a3:16:cc:4e:88:c0:e0:14:
9d:a9:5c:39:bb:80:bd:31:5a:d1:1c:96:7a:9c:7f:21:a0:e5:
db:4f:a6:44:ad:1f:1c:3b:95:dc:85:00:98:93:b1:fb:ab:94:
0c:d4:6c:ee:53:06:3b:9b:f6:7d:d0:5a:c5:0f:d3:c9:a5:f6:
1f:9d:16:4b:0c:7e:89:5b:48:4a:d7:31:78:f7:69:e4:b0:ff:
0d:19:83:82:c7:47:80:5c:d4:fe:bc:33:d8:f6:3d:19:f8:9d:
d9:ff:53:a0:34:25:d9:17:d6:d1:ec:a8:d2:b6:10:2a:8d:a7:
34:0d:5a:bd:3a:4d:e4:fe:76:a9:56:d8:c6:2c:8a:74:6f:2b:
01:df:56:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0JMJ/3aMa0MYeted3IexhLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNDYzM2YxOWY2MWQ2NTQ2ZWJhYmY3ZGU5ZmI3YWE5ODdl
ZDViZjMwHhcNMjYwMzIwMDMwMTE0WhcNMjYwMzIxMDMwMTE0WjAzMTEwLwYDVQQD
EyhmN2QwMzEzMjE5MjU4NzE1YjZlMjNlNTdlMjY4MDdmYTEyMzc1ODZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA0N6KHRoOyurlb6hMf/rZTLhgk5
ciIiIiNLumM8/9iws7g47BssswQiDi91IjsuCBEfWRVe33ANjGq+O1Wp6h8SzDMz
6ZAqYNjDbH0v9GuJpTW5dmyjIfI9db/pYHB1PVaGKXlcTiulXd92IJx3/4rGLFSx
Cul4jdwlyVGiQZSAi3KQCJPVNFU5hhBdeeHWf5eC3P4IuHO5K9H4T3yP8DC8rPEU
9kedRru2jfB2s3UN1baGvMyPnxcGNPS5u0yCkA0XUEdo/t9aqCSky8cZ/nJ1oYb3
8IZEPfBIj3HfdraoTdjbhLbZbAS+lfsb2oz9pIu++K6TqAgoMPRK47spdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfQMTIZJYcVtuI+V+JoB/oSN1hvMB8GA1UdIwQY
MBaAFFNGM/GfYdZUbrq/fen7eqmH7VvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTBZejhaOWgxbFJ1dXI5OTZmdDZxWWZ0V19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84YmY3OGQtYzNiNS00NjkxLTgxMDgt
ZjBjYWQ5ZmY2NWJlLzEvVTBZejhaOWgxbFJ1dXI5OTZmdDZxWWZ0V19NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC84YmY3OGQtYzNiNS00NjkxLTgxMDgtZjBjYWQ5ZmY2NWJl
LzEvVTBZejhaOWgxbFJ1dXI5OTZmdDZxWWZ0V19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSAzRTUz
RzGqN/PoLYf9aCtmIdZ6G9z0JexO/mAg//QJl+fDWJV0HyLrgCjMlmuYhzHcGloY
LXS5JuLrOOECcyP6hlLwQbAdf4rhRjaZ12FwfCqz66cJ5Kg9isGQF9jNWGLAXZ54
npswz2BLlnlFbnnQpSTGYaMWzE6IwOAUnalcObuAvTFa0RyWepx/IaDl20+mRK0f
HDuV3IUAmJOx+6uUDNRs7lMGO5v2fdBaxQ/TyaX2H50WSwx+iVtIStcxePdp5LD/
DRmDgsdHgFzU/rwz2PY9Gfid2f9ToDQl2RfW0eyo0rYQKo2nNA1avTpN5P52qVbY
xiyKdG8rAd9WYA==
-----END CERTIFICATE-----
Generated at Fri Mar 20 14:06:37 2026 by rpki-client