Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
File: uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft (raw, json)
Hash identifier: tEW/H+Xo9NE3lIB9BItcr6qjQtuZ8QNatI2zFr7nBGM=
Subject key identifier: 00:07:10:11:7C:AC:40:08:18:AB:F0:28:52:6F:89:F8:BC:A2:3B:DC
Authority key identifier: BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD
Certificate issuer: /CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad
Certificate serial: 019D3865FDCB8F0534957DED997518A8FBFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
Manifest number: 070C
Signing time: Sun 29 Mar 2026 07:01:41 +0000
Manifest this update: Sun 29 Mar 2026 07:01:41 +0000
Manifest next update: Mon 30 Mar 2026 07:01:41 +0000
Files and hashes: 1: oBChBHssUzYUcBfM7zouya2w7Xs.roa (hash: 672YmL+cLtseSafY7vPPp2vT+ULtUH/ebbvzsneaNTo=)
2: uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl (hash: Bqh64ITjAFkom22ZWAxMKWzfWw7F6q4bLNLEKUrJZwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:fd:cb:8f:05:34:95:7d:ed:99:75:18:a8:fb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad
Validity
Not Before: Mar 29 07:01:41 2026 GMT
Not After : Mar 30 07:01:41 2026 GMT
Subject: CN=000710117cac400818abf028526f89f8bca23bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:15:15:88:fa:f0:1d:c8:cd:68:0d:a0:e6:
6c:46:ab:48:36:00:b4:a3:4a:91:da:b3:c5:81:70:
f1:30:e2:c2:b6:2f:3a:d8:b5:a6:b4:e2:a1:2c:2a:
d9:59:f7:5a:c4:6a:61:64:80:bf:f4:f0:2a:bb:74:
1b:37:4c:e6:3e:82:28:e1:0e:e4:e4:36:16:22:4f:
12:12:65:3b:f8:e0:b7:8b:13:4d:84:20:9a:88:1e:
fc:5b:33:7f:7b:0a:7a:ca:84:49:08:d9:64:d9:79:
9e:dd:5b:02:e7:46:57:22:b5:1c:ad:df:8a:c2:ba:
09:fc:bc:d3:61:f0:e9:74:34:0c:21:ac:e9:a2:2a:
77:6c:52:96:65:ef:24:22:3b:ef:6c:e0:99:22:a9:
7d:d5:ae:4c:5f:2b:67:85:55:ff:bb:5d:c4:27:d4:
08:84:42:6f:3b:da:db:00:65:c8:ba:1c:e3:5f:47:
4e:b6:18:1c:e2:42:7a:ff:96:20:cf:4f:c6:a2:80:
6c:7b:7a:7b:48:8c:e3:dc:1a:bb:02:1f:06:ac:18:
a1:b1:c0:70:03:0e:87:2c:cd:d3:78:ad:82:f5:1b:
bf:55:23:56:72:e4:2b:5a:9f:40:00:20:42:27:5e:
73:bf:3b:5a:36:06:af:1a:ed:91:8c:39:86:57:34:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:07:10:11:7C:AC:40:08:18:AB:F0:28:52:6F:89:F8:BC:A2:3B:DC
X509v3 Authority Key Identifier:
keyid:BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b5:d4:22:9a:ad:8e:16:42:07:33:84:36:a8:14:17:b8:95:
f8:fc:fe:38:c9:fc:e9:4c:d6:f4:6d:a7:39:6f:90:3e:25:5e:
8b:44:ef:9a:17:70:2f:31:16:32:ee:61:77:8e:8e:ba:eb:57:
c9:9c:0b:78:d8:76:20:61:e2:68:fe:ed:1a:b6:cb:18:6e:70:
e4:76:eb:9f:20:ab:a5:4d:de:6c:c7:81:99:55:4d:6f:f3:28:
6d:7e:56:4c:97:c8:25:f5:d7:7a:7a:82:46:b8:27:24:f1:c8:
ca:7a:8e:d8:69:f8:ca:44:97:18:63:00:e4:7c:9e:8b:e0:23:
ed:38:ae:92:80:db:e5:4e:79:4e:1f:a7:34:ec:ee:49:11:b9:
96:e1:c1:33:d8:7b:83:cf:cf:f0:c2:2d:0d:73:89:68:75:1c:
db:a3:da:88:a9:85:aa:87:4a:f5:4f:11:80:98:79:39:c2:45:
39:2b:3b:d4:ab:3d:04:75:b7:90:76:ef:35:ce:11:c5:8f:06:
e0:59:08:95:b4:9b:01:c1:c1:ba:6a:00:38:f8:a2:e2:ae:b1:
d6:b3:46:5d:0d:33:45:bd:f8:71:fd:d5:d5:3b:b2:78:b8:27:
2b:2d:89:5c:97:a2:d7:10:0b:c7:29:cf:3f:9a:c8:36:46:f3:
51:e0:56:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zf3LjwU0lX3tmXUYqPv+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhOGRhZDJjNGEwZTExN2E2ODY4YzhkNjdiZTEwMzA4YTY0
OTc0YWQwHhcNMjYwMzI5MDcwMTQxWhcNMjYwMzMwMDcwMTQxWjAzMTEwLwYDVQQD
EygwMDA3MTAxMTdjYWM0MDA4MThhYmYwMjg1MjZmODlmOGJjYTIzYmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGIVFYj68B3IzWgNoOZsRqtINgC0
o0qR2rPFgXDxMOLCti862LWmtOKhLCrZWfdaxGphZIC/9PAqu3QbN0zmPoIo4Q7k
5DYWIk8SEmU7+OC3ixNNhCCaiB78WzN/ewp6yoRJCNlk2Xme3VsC50ZXIrUcrd+K
wroJ/LzTYfDpdDQMIazpoip3bFKWZe8kIjvvbOCZIql91a5MXytnhVX/u13EJ9QI
hEJvO9rbAGXIuhzjX0dOthgc4kJ6/5Ygz0/GooBse3p7SIzj3Bq7Ah8GrBihscBw
Aw6HLM3TeK2C9Ru/VSNWcuQrWp9AACBCJ15zvztaNgavGu2RjDmGVzSJVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAHEBF8rEAIGKvwKFJvifi8ojvcMB8GA1UdIwQY
MBaAFLqNrSxKDhF6aGjI1nvhAwimSXStMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW8ydExFb09FWHBvYU1qV2UtRURDS1pKZEswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9mM2M1ZDgtNWVhNS00ODJlLTkzMWYt
MjljMDIzZjk0NzgxLzEvdW8ydExFb09FWHBvYU1qV2UtRURDS1pKZEswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9mM2M1ZDgtNWVhNS00ODJlLTkzMWYtMjljMDIzZjk0Nzgx
LzEvdW8ydExFb09FWHBvYU1qV2UtRURDS1pKZEswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLXUIpqt
jhZCBzOENqgUF7iV+Pz+OMn86UzW9G2nOW+QPiVei0TvmhdwLzEWMu5hd46OuutX
yZwLeNh2IGHiaP7tGrbLGG5w5HbrnyCrpU3ebMeBmVVNb/MobX5WTJfIJfXXenqC
RrgnJPHIynqO2Gn4ykSXGGMA5Hyei+Aj7TiukoDb5U55Th+nNOzuSRG5luHBM9h7
g8/P8MItDXOJaHUc26PaiKmFqodK9U8RgJh5OcJFOSs71Ks9BHW3kHbvNc4RxY8G
4FkIlbSbAcHBumoAOPii4q6x1rNGXQ0zRb34cf3V1TuyeLgnKy2JXJei1xALxynP
P5rINkbzUeBW8Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:50:02 2026 by rpki-client