Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
File: U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft (raw, json)
Hash identifier: t588oYPLzpZRFcnbZIMvyJa/z5RMHRz+Q5heOOLWyAs=
Subject key identifier: B1:3B:F1:18:1A:E2:2A:72:67:6F:83:A5:A4:FB:8C:18:88:AB:7A:39
Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Certificate serial: 019D3A8B159166F309BAD42A98A39365F2F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 17:01:26 +0000
Manifest this update: Sun 29 Mar 2026 17:01:26 +0000
Manifest next update: Mon 30 Mar 2026 17:01:26 +0000
Files and hashes: 1: 1-NYp-ANDJGWn2zBa6tZxxYGdDfA.roa (hash: ACBt4zT2KY2CKqY2w+FWy0192eghSargg1ySIXwb63Y=)
2: U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl (hash: tsPase+9zTxVS61Fb8t/StaVnL/P0AcFf3sBQeC2xj4=)
3: gGTUtih5jVa-QbWTlOxD1xFHxEM.roa (hash: V1056kAulKAWgU4sgdguF4s6mRxgfRsvQzLGzFRcugQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8b:15:91:66:f3:09:ba:d4:2a:98:a3:93:65:f2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Validity
Not Before: Mar 29 17:01:26 2026 GMT
Not After : Mar 30 17:01:26 2026 GMT
Subject: CN=b13bf1181ae22a72676f83a5a4fb8c1888ab7a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e6:7a:02:83:5b:f2:6f:9e:5e:2e:30:e6:7a:
41:da:eb:9b:ed:b2:8b:36:65:16:d3:6a:f4:d7:bc:
00:a1:28:2f:60:7e:fd:a7:15:e4:90:cb:6c:98:9c:
ab:6a:7d:92:1f:b6:bc:19:d5:e9:c2:87:53:50:c9:
c6:b1:c1:96:f3:f9:9f:46:a7:8e:4e:80:11:4e:d4:
d0:a3:b9:93:2a:1e:76:22:29:d6:06:0b:25:58:27:
8c:81:b1:b2:fa:d9:2b:cc:7a:e8:a8:aa:ed:e9:c4:
d1:38:27:09:15:67:3a:33:f6:1f:7b:20:40:5f:76:
70:b7:cd:d6:41:5a:66:90:b2:fb:3f:6f:50:74:ad:
98:ab:38:c3:c9:35:87:93:ae:a3:0e:bf:cc:83:3a:
0d:a9:27:fa:ca:07:0c:ca:bf:a7:52:4d:84:45:2b:
76:17:f2:84:3a:0e:82:10:09:b7:78:83:f1:f7:3d:
5d:c0:af:47:41:3e:e1:39:dd:6a:c5:2f:33:8b:3b:
6f:dd:04:07:4f:98:6f:a0:89:65:ee:e5:e6:e3:5b:
a3:00:21:ed:a3:55:71:63:ee:90:5c:7e:56:a1:d0:
da:93:01:5e:88:3f:01:81:94:a5:be:a6:6c:2e:f5:
39:7e:8e:8f:b5:33:34:82:e5:26:8d:2f:f7:40:fa:
0f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3B:F1:18:1A:E2:2A:72:67:6F:83:A5:A4:FB:8C:18:88:AB:7A:39
X509v3 Authority Key Identifier:
keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:71:e2:30:db:10:79:c3:a9:f1:54:12:db:7b:a7:0d:2c:9f:
22:f1:2a:dd:d0:69:e2:f9:d0:76:de:46:c4:d1:98:5a:68:51:
40:e7:19:da:70:82:31:64:bf:3c:4d:b4:51:63:40:d2:b0:42:
7f:71:cb:fe:47:16:4e:78:3b:42:a5:21:bc:29:cf:74:33:d1:
90:fc:b3:9b:de:7c:b5:fd:34:63:d5:f7:c6:85:18:01:22:e8:
2c:61:42:f9:e8:24:36:fb:76:48:1b:9d:d8:86:3e:86:0d:31:
03:ac:b3:1d:24:05:ba:20:c1:8f:89:e7:b0:d8:50:aa:63:f1:
44:b0:08:24:f6:62:a3:94:62:a1:48:16:ef:f0:ea:af:54:c9:
9e:a6:9a:f9:31:54:1c:87:2c:5a:7a:b6:59:7d:7c:2b:71:95:
de:57:75:6c:ed:90:47:9a:01:6b:a9:1b:72:64:57:59:9c:cc:
33:92:0f:72:0c:7b:69:95:40:f6:dc:7a:97:15:28:32:99:fd:
8d:95:12:be:d6:b5:86:b9:cf:38:e8:04:6e:88:14:5d:fd:92:
03:6d:8e:8f:82:c3:46:b9:d2:c9:ae:48:65:38:3d:fe:fa:fc:
91:36:2f:8d:ab:68:75:de:92:32:55:54:05:55:38:08:03:f0:
d5:15:4c:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06ixWRZvMJutQqmKOTZfL4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZjM5ZDJmMjBlMmQ5YjRmOTZjYmQxMzM3ZWEzMmRhNTE4
ZDhlYzgwHhcNMjYwMzI5MTcwMTI2WhcNMjYwMzMwMTcwMTI2WjAzMTEwLwYDVQQD
EyhiMTNiZjExODFhZTIyYTcyNjc2ZjgzYTVhNGZiOGMxODg4YWI3YTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OZ6AoNb8m+eXi4w5npB2uub7bKL
NmUW02r017wAoSgvYH79pxXkkMtsmJyran2SH7a8GdXpwodTUMnGscGW8/mfRqeO
ToARTtTQo7mTKh52IinWBgslWCeMgbGy+tkrzHroqKrt6cTROCcJFWc6M/YfeyBA
X3Zwt83WQVpmkLL7P29QdK2YqzjDyTWHk66jDr/MgzoNqSf6ygcMyr+nUk2ERSt2
F/KEOg6CEAm3eIPx9z1dwK9HQT7hOd1qxS8ziztv3QQHT5hvoIll7uXm41ujACHt
o1VxY+6QXH5WodDakwFeiD8BgZSlvqZsLvU5fo6PtTM0guUmjS/3QPoPqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLE78Rga4ipyZ2+DpaT7jBiIq3o5MB8GA1UdIwQY
MBaAFFPznS8g4tm0+Wy9EzfqMtpRjY7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xZDhmY2EtYjQ2Mi00MzEzLWE1MjMt
ZTQxMWI0M2RjNjhhLzEvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xZDhmY2EtYjQ2Mi00MzEzLWE1MjMtZTQxMWI0M2RjNjhh
LzEvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANnHiMNsQ
ecOp8VQS23unDSyfIvEq3dBp4vnQdt5GxNGYWmhRQOcZ2nCCMWS/PE20UWNA0rBC
f3HL/kcWTng7QqUhvCnPdDPRkPyzm958tf00Y9X3xoUYASLoLGFC+egkNvt2SBud
2IY+hg0xA6yzHSQFuiDBj4nnsNhQqmPxRLAIJPZio5RioUgW7/Dqr1TJnqaa+TFU
HIcsWnq2WX18K3GV3ld1bO2QR5oBa6kbcmRXWZzMM5IPcgx7aZVA9tx6lxUoMpn9
jZUSvta1hrnPOOgEbogUXf2SA22Oj4LDRrnSya5IZTg9/vr8kTYvjatodd6SMlVU
BVU4CAPw1RVMYA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:20:48 2026 by rpki-client