Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
File: uRRkdndz8SObZGu2a9z09_sSBs4.mft (raw, json)
Hash identifier: HHuCgivOm1XbF8hX6DQty+naGyPwZdydFNoVQjrNdog=
Subject key identifier: 4B:97:51:65:36:48:BE:D5:38:AE:4A:60:84:48:AA:7F:3E:AD:E1:12
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Certificate issuer: /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial: 019E91A62DD2547A6E017C73FDFEE10D9B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
Manifest number: 1945
Signing time: Thu 04 Jun 2026 08:00:47 +0000
Manifest this update: Thu 04 Jun 2026 08:00:47 +0000
Manifest next update: Fri 05 Jun 2026 08:00:47 +0000
Files and hashes: 1: FxSV3pjhlX5ncwMd1BJ4YPhboEI.roa (hash: V6ldsVa/sdoxhFtU1dGezva/tghG5qZAguTA3/NtrDw=)
2: YG_wDFENOqVU5myZSFJwFFRQIGo.roa (hash: IKdcIVVEkC9wFm1DM+wG6bBK4y8HgYiZDQKQ7434QC4=)
3: lWRN_vpnN3jdO53Qf_s9sKGgAYI.roa (hash: DSGrSvYMDlk724DBlB7/WGTLaoZcHPiH4iyTmdQidKM=)
4: m-OAweDj7IYWvNC6YulzJlZP2oY.roa (hash: SiV8TM2QfFlhSK0UqbnB7bWFP5VUqLMFVQELQm9ocug=)
5: uRRkdndz8SObZGu2a9z09_sSBs4.crl (hash: taomy0lCABes7GEYp56AuYaAAdclh6B46Iy3KH4bffs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:a6:2d:d2:54:7a:6e:01:7c:73:fd:fe:e1:0d:9b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Validity
Not Before: Jun 4 08:00:47 2026 GMT
Not After : Jun 5 08:00:47 2026 GMT
Subject: CN=4b9751653648bed538ae4a608448aa7f3eade112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:01:32:46:b0:22:14:3b:58:cd:4f:1d:c8:
30:91:50:d7:2b:d7:4d:13:a8:0f:2c:fa:4d:b0:33:
41:52:f6:82:64:d6:de:ef:b8:06:86:a3:1d:94:e3:
76:23:c3:a7:1a:be:3d:22:9b:98:7b:bc:7c:35:d0:
78:a3:35:19:ca:71:a2:72:5c:1f:6a:6b:87:a1:58:
49:68:75:6b:42:5e:d1:2b:ce:5d:78:be:7c:5b:ed:
4c:1b:63:b9:2c:4c:fb:24:f3:f3:40:25:ec:c7:76:
79:91:2c:03:11:62:63:ee:97:fe:46:ad:4f:b0:57:
32:27:f3:95:cd:70:23:ae:01:ec:bf:96:28:81:36:
b3:0b:91:b7:90:25:37:75:ca:97:08:c1:16:29:1a:
56:04:fe:3b:ad:06:75:07:d2:e9:4c:b3:11:21:b8:
05:5a:70:95:89:4b:87:c4:df:5b:f7:fc:3d:25:cc:
9a:15:17:fc:80:9f:37:fd:60:44:fb:93:cb:dd:bd:
67:39:60:51:0d:a1:f8:bc:37:6c:f2:9e:d0:63:d7:
2a:75:32:08:55:01:00:e3:ea:0c:9e:fc:0a:0d:88:
12:b8:46:86:40:d9:24:3c:89:88:1a:45:8c:01:2a:
6c:49:c3:4e:d5:1b:64:3c:e2:24:6e:be:ae:c6:cc:
ad:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:97:51:65:36:48:BE:D5:38:AE:4A:60:84:48:AA:7F:3E:AD:E1:12
X509v3 Authority Key Identifier:
keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:2c:0b:43:c5:87:18:fa:5f:8d:e8:8f:08:d0:f7:99:96:7f:
d1:69:d0:85:3f:26:29:db:46:22:1d:55:45:12:85:a8:c7:c7:
08:cc:b5:60:fd:aa:90:39:74:d4:d8:4e:fe:4a:ef:64:34:04:
6e:f8:a9:d0:81:b9:80:44:26:1e:0b:1f:c4:37:ac:01:8e:8d:
11:3b:f3:cc:c2:07:3b:3e:9f:1d:28:44:f1:1d:e5:c5:ad:05:
32:2f:61:9b:f9:ab:ef:bf:7f:d9:e9:f2:c1:9b:c9:95:7d:e3:
1f:6d:37:b3:c8:c0:98:9a:99:fe:d5:46:8f:a3:e1:ba:96:47:
2a:a2:a1:f6:b9:41:73:52:b9:8b:77:07:46:12:37:d5:73:27:
a9:98:a6:4c:13:b4:bd:bd:50:c3:1f:ee:ad:45:67:63:b8:85:
86:db:cc:a4:1c:10:bf:07:63:b6:90:8a:49:d9:6a:82:2c:04:
e9:2c:ce:f5:5c:e8:6f:dd:df:d3:43:58:8a:0c:17:10:54:00:
7d:d6:e3:8c:0f:bc:6d:dc:4d:b8:64:3a:ba:8f:6a:cd:af:4d:
89:bc:b5:8f:17:3e:72:e0:ce:7c:b5:41:a8:b7:b7:03:00:83:
46:30:49:f0:55:22:b5:5e:36:c9:57:6d:5c:44:43:9f:3b:df:
c7:dc:65:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6Rpi3SVHpuAXxz/f7hDZsyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTQ2NDc2Nzc3M2YxMjM5YjY0NmJiNjZiZGNmNGY3ZmIx
MjA2Y2UwHhcNMjYwNjA0MDgwMDQ3WhcNMjYwNjA1MDgwMDQ3WjAzMTEwLwYDVQQD
Eyg0Yjk3NTE2NTM2NDhiZWQ1MzhhZTRhNjA4NDQ4YWE3ZjNlYWRlMTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhoBMkawIhQ7WM1PHcgwkVDXK9dN
E6gPLPpNsDNBUvaCZNbe77gGhqMdlON2I8OnGr49IpuYe7x8NdB4ozUZynGiclwf
amuHoVhJaHVrQl7RK85deL58W+1MG2O5LEz7JPPzQCXsx3Z5kSwDEWJj7pf+Rq1P
sFcyJ/OVzXAjrgHsv5YogTazC5G3kCU3dcqXCMEWKRpWBP47rQZ1B9LpTLMRIbgF
WnCViUuHxN9b9/w9JcyaFRf8gJ83/WBE+5PL3b1nOWBRDaH4vDds8p7QY9cqdTII
VQEA4+oMnvwKDYgSuEaGQNkkPImIGkWMASpsScNO1RtkPOIkbr6uxsytHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuXUWU2SL7VOK5KYIRIqn8+reESMB8GA1UdIwQY
MBaAFLkUZHZ3c/Ejm2Rrtmvc9Pf7EgbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xM2ZjZDEtZDgwNi00ZTU2LTg1MzMt
NDc1ZGJiYjBjMDhjLzEvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xM2ZjZDEtZDgwNi00ZTU2LTg1MzMtNDc1ZGJiYjBjMDhj
LzEvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqSwLQ8WH
GPpfjeiPCND3mZZ/0WnQhT8mKdtGIh1VRRKFqMfHCMy1YP2qkDl01NhO/krvZDQE
bvip0IG5gEQmHgsfxDesAY6NETvzzMIHOz6fHShE8R3lxa0FMi9hm/mr779/2eny
wZvJlX3jH203s8jAmJqZ/tVGj6PhupZHKqKh9rlBc1K5i3cHRhI31XMnqZimTBO0
vb1Qwx/urUVnY7iFhtvMpBwQvwdjtpCKSdlqgiwE6SzO9Vzob93f00NYigwXEFQA
fdbjjA+8bdxNuGQ6uo9qza9Niby1jxc+cuDOfLVBqLe3AwCDRjBJ8FUitV42yVdt
XERDnzvfx9xl8g==
-----END CERTIFICATE-----
Generated at Thu Jun 4 13:20:15 2026 by rpki-client