Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
File: uRRkdndz8SObZGu2a9z09_sSBs4.mft (raw, json)
Hash identifier: mA8TTXoQTJc0posDC76Xzwp/pCL/paK8Vf/sUmZZRI0=
Subject key identifier: 55:83:CF:09:13:4D:92:B3:06:22:A0:FE:48:D8:4E:9F:FD:68:A9:90
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Certificate issuer: /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial: 019D39E5F968FC432EE6C73584823E3859C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 14:01:05 +0000
Manifest this update: Sun 29 Mar 2026 14:01:05 +0000
Manifest next update: Mon 30 Mar 2026 14:01:05 +0000
Files and hashes: 1: FxSV3pjhlX5ncwMd1BJ4YPhboEI.roa (hash: V6ldsVa/sdoxhFtU1dGezva/tghG5qZAguTA3/NtrDw=)
2: YG_wDFENOqVU5myZSFJwFFRQIGo.roa (hash: IKdcIVVEkC9wFm1DM+wG6bBK4y8HgYiZDQKQ7434QC4=)
3: lWRN_vpnN3jdO53Qf_s9sKGgAYI.roa (hash: DSGrSvYMDlk724DBlB7/WGTLaoZcHPiH4iyTmdQidKM=)
4: m-OAweDj7IYWvNC6YulzJlZP2oY.roa (hash: SiV8TM2QfFlhSK0UqbnB7bWFP5VUqLMFVQELQm9ocug=)
5: uRRkdndz8SObZGu2a9z09_sSBs4.crl (hash: bLZsOZmWW21+jt/bj+gYDPhJcmqL4eIa9JE4hdqq9Jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:f9:68:fc:43:2e:e6:c7:35:84:82:3e:38:59:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Validity
Not Before: Mar 29 14:01:05 2026 GMT
Not After : Mar 30 14:01:05 2026 GMT
Subject: CN=5583cf09134d92b30622a0fe48d84e9ffd68a990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3c:bc:ea:69:ac:30:76:59:57:5b:dd:20:61:
43:3d:fc:d1:ea:bc:4c:3b:62:f2:43:eb:c9:8d:17:
7a:d4:4c:6b:7c:74:fc:92:d9:a3:1f:f2:e3:7e:94:
6d:77:c2:f7:c1:98:63:2a:1a:50:69:ce:d9:cf:88:
53:b9:e3:dd:eb:5c:ba:37:47:b1:b0:0c:00:78:e3:
2e:f8:49:bb:db:59:3c:aa:6f:d9:5f:3a:6f:46:50:
3f:0b:cc:12:42:96:0b:35:f6:2f:5d:e2:95:17:4e:
a1:79:7e:67:3b:c3:98:a8:f1:da:8a:8a:5d:17:94:
86:1c:69:22:15:eb:61:09:f6:07:9b:19:2a:df:26:
5e:f9:7f:57:fa:a8:0e:17:37:b5:8f:45:93:e9:ab:
1a:4d:db:e0:bf:ff:94:c4:90:19:dc:4d:72:f0:54:
d3:bf:7c:42:2a:31:93:f4:ea:30:03:3e:5f:3a:e9:
3f:ed:a4:74:0d:63:7a:29:46:43:d6:e3:a7:d0:2b:
42:c7:c0:99:d0:da:73:ff:6b:66:da:75:30:01:30:
12:cc:96:be:06:09:56:d6:07:ca:5f:03:1e:d5:31:
01:16:5b:11:5d:26:35:18:df:aa:9f:95:ae:38:a8:
b0:9c:e2:c7:f2:b2:dd:89:07:4e:fd:83:14:65:08:
5e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:83:CF:09:13:4D:92:B3:06:22:A0:FE:48:D8:4E:9F:FD:68:A9:90
X509v3 Authority Key Identifier:
keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:74:9f:d9:50:cf:48:ac:66:ec:a2:3e:20:47:8f:d1:a8:0e:
58:4c:5d:03:64:ea:d8:cd:5f:d0:b2:4e:99:85:06:3f:16:11:
fb:9b:7f:5c:f4:e6:b3:33:f0:62:b6:7f:c0:9b:ce:c0:59:b9:
be:50:3d:a8:22:c3:c0:f9:f3:92:be:02:d1:33:0f:fa:21:28:
6a:4c:e3:03:bd:94:15:ef:24:66:23:f7:48:e6:3f:64:78:1c:
50:60:9a:89:fc:ff:9a:62:1b:56:c0:da:28:05:e6:9c:b4:c5:
bc:e1:35:3e:a7:50:bd:dc:38:b9:16:eb:21:65:a0:0b:c5:68:
0a:42:8d:20:24:7b:9c:f3:00:a4:b3:19:fc:c1:68:48:49:a2:
25:53:0e:43:2a:36:cb:99:ee:52:34:b4:b9:4e:79:85:01:cd:
78:fc:91:7f:5d:9e:7e:9b:91:82:8b:8f:99:a9:82:fa:3e:90:
a9:2a:67:ef:1b:e8:3f:a4:e5:c4:70:f4:cc:3b:31:bb:9f:93:
3c:8c:34:95:15:ba:c8:77:92:1e:bc:ac:34:af:a8:9a:c1:b0:
e3:89:c6:44:d6:9e:62:92:ca:3b:d4:32:3a:76:48:a7:e6:44:
e6:08:8d:78:f3:02:30:5a:93:de:70:96:ac:c4:e4:47:23:c7:
e5:08:c2:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055flo/EMu5sc1hII+OFnBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTQ2NDc2Nzc3M2YxMjM5YjY0NmJiNjZiZGNmNGY3ZmIx
MjA2Y2UwHhcNMjYwMzI5MTQwMTA1WhcNMjYwMzMwMTQwMTA1WjAzMTEwLwYDVQQD
Eyg1NTgzY2YwOTEzNGQ5MmIzMDYyMmEwZmU0OGQ4NGU5ZmZkNjhhOTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Dy86mmsMHZZV1vdIGFDPfzR6rxM
O2LyQ+vJjRd61ExrfHT8ktmjH/LjfpRtd8L3wZhjKhpQac7Zz4hTuePd61y6N0ex
sAwAeOMu+Em721k8qm/ZXzpvRlA/C8wSQpYLNfYvXeKVF06heX5nO8OYqPHaiopd
F5SGHGkiFethCfYHmxkq3yZe+X9X+qgOFze1j0WT6asaTdvgv/+UxJAZ3E1y8FTT
v3xCKjGT9OowAz5fOuk/7aR0DWN6KUZD1uOn0CtCx8CZ0Npz/2tm2nUwATASzJa+
BglW1gfKXwMe1TEBFlsRXSY1GN+qn5WuOKiwnOLH8rLdiQdO/YMUZQhebwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWDzwkTTZKzBiKg/kjYTp/9aKmQMB8GA1UdIwQY
MBaAFLkUZHZ3c/Ejm2Rrtmvc9Pf7EgbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xM2ZjZDEtZDgwNi00ZTU2LTg1MzMt
NDc1ZGJiYjBjMDhjLzEvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xM2ZjZDEtZDgwNi00ZTU2LTg1MzMtNDc1ZGJiYjBjMDhj
LzEvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnSf2VDP
SKxm7KI+IEeP0agOWExdA2Tq2M1f0LJOmYUGPxYR+5t/XPTmszPwYrZ/wJvOwFm5
vlA9qCLDwPnzkr4C0TMP+iEoakzjA72UFe8kZiP3SOY/ZHgcUGCaifz/mmIbVsDa
KAXmnLTFvOE1PqdQvdw4uRbrIWWgC8VoCkKNICR7nPMApLMZ/MFoSEmiJVMOQyo2
y5nuUjS0uU55hQHNePyRf12efpuRgouPmamC+j6QqSpn7xvoP6TlxHD0zDsxu5+T
PIw0lRW6yHeSHrysNK+omsGw44nGRNaeYpLKO9QyOnZIp+ZE5giNePMCMFqT3nCW
rMTkRyPH5QjCoA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:19 2026 by rpki-client