Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
File: u44vWsfL5iEX2keKwMAnrW2EPFY.mft (raw, json)
Hash identifier: YsY0qNDT/91KRi5oHFrLJb2akfoy7lFPYC/0v8NbloM=
Subject key identifier: 69:8C:FC:F5:1D:7A:26:22:74:10:04:87:57:B8:0E:B9:D8:8F:65:B1
Authority key identifier: BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
Certificate issuer: /CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Certificate serial: 019CE8C9D88F95EDB96A4BFD82D3951167AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
Manifest number: 1867
Signing time: Fri 13 Mar 2026 20:01:08 +0000
Manifest this update: Fri 13 Mar 2026 20:01:08 +0000
Manifest next update: Sat 14 Mar 2026 20:01:08 +0000
Files and hashes: 1: EK98MbFFSSPIZHcJY-ZW_UF_ED0.roa (hash: Ug1DIE2wtnkuxo6OV5HarCRpdJ5eCoWMxa7DhgeBQVc=)
2: u44vWsfL5iEX2keKwMAnrW2EPFY.crl (hash: 8m+o/oanCtEcsV/+3NFskC2GJnLkPpnYxwnHaKbdz34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:c9:d8:8f:95:ed:b9:6a:4b:fd:82:d3:95:11:67:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Validity
Not Before: Mar 13 20:01:08 2026 GMT
Not After : Mar 14 20:01:08 2026 GMT
Subject: CN=698cfcf51d7a26227410048757b80eb9d88f65b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d4:2b:b1:bc:92:18:4e:a4:c2:c5:87:7a:27:
8b:26:02:ef:ad:dc:9b:f4:99:e4:56:b8:db:8b:a4:
fd:ef:fc:8a:ef:2f:db:45:40:39:f8:be:f1:4b:28:
96:68:81:67:4c:b1:29:55:e9:fa:49:02:43:0a:92:
1d:69:8e:4a:e5:e7:09:7c:3d:f5:94:30:8f:7b:55:
7d:1c:9b:24:fe:c7:a5:f6:c8:61:2a:80:84:9f:56:
a0:35:e9:45:37:8c:53:43:30:7c:81:01:2a:da:54:
10:4a:08:bb:95:f0:35:d5:52:3d:78:62:ef:95:de:
3f:5c:be:2a:c3:95:eb:5d:73:d1:57:b9:ab:9d:28:
c8:d6:0d:0b:4e:43:d8:71:c4:ea:8d:6c:3d:f7:03:
b0:61:ae:26:5d:86:a3:39:ae:8e:90:62:91:31:61:
3f:1e:13:df:7d:62:b7:c9:cb:a8:14:3f:bc:97:d2:
a9:fd:87:c5:a6:66:a4:61:6a:01:b9:3c:45:ed:d3:
d3:ef:e5:b8:22:54:60:ab:9d:17:11:c4:84:c9:fc:
d6:87:54:e6:ae:dc:3a:24:ff:9d:ee:97:6d:4e:aa:
de:0f:15:a4:30:59:17:05:8a:77:34:a4:66:c2:fa:
88:ba:1c:d2:e7:d6:94:b3:28:8e:bf:e0:29:2f:63:
92:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8C:FC:F5:1D:7A:26:22:74:10:04:87:57:B8:0E:B9:D8:8F:65:B1
X509v3 Authority Key Identifier:
keyid:BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:05:86:2a:d2:c4:49:58:89:d4:f0:a3:a7:a9:58:26:06:99:
39:f4:a6:6a:ff:04:65:14:76:36:ff:5b:8f:01:b8:f5:cd:96:
0a:3f:32:47:79:62:11:4e:f3:29:44:e1:0a:fc:94:aa:a6:85:
43:68:43:e6:fa:64:73:0d:14:ac:37:3c:55:24:99:f6:07:93:
e9:6b:37:a6:7d:57:8b:63:4e:2b:75:b4:8d:34:a9:f3:0c:04:
c6:c9:c7:23:17:11:fa:ea:df:67:85:7a:f7:da:6a:48:cc:33:
bf:81:fe:b4:0a:f7:af:11:8c:9e:c9:6e:88:9b:bc:13:87:de:
e6:24:90:90:01:c1:ce:b2:d2:1c:c2:7e:23:ed:8f:29:db:6a:
dd:75:10:20:5a:4f:ea:1a:f2:3e:37:a8:89:87:ee:28:ad:cf:
1b:de:a4:64:c6:13:7f:30:7f:1a:28:19:4f:ec:78:10:6e:94:
0a:60:e3:b7:45:80:57:03:5e:6a:8c:2f:66:81:a8:07:db:ca:
11:7b:23:0c:17:4d:e1:c4:02:17:ae:72:aa:00:72:94:28:c7:
e9:f0:56:ab:7b:b4:9a:8d:5d:6d:03:32:9c:78:48:e7:0b:d0:
ae:67:3c:bc:d4:ce:5e:cf:df:51:44:a6:82:23:6f:5a:dd:71:
e1:08:e4:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzoydiPle25akv9gtOVEWesMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiOGUyZjVhYzdjYmU2MjExN2RhNDc4YWMwYzAyN2FkNmQ4
NDNjNTYwHhcNMjYwMzEzMjAwMTA4WhcNMjYwMzE0MjAwMTA4WjAzMTEwLwYDVQQD
Eyg2OThjZmNmNTFkN2EyNjIyNzQxMDA0ODc1N2I4MGViOWQ4OGY2NWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdQrsbySGE6kwsWHeieLJgLvrdyb
9JnkVrjbi6T97/yK7y/bRUA5+L7xSyiWaIFnTLEpVen6SQJDCpIdaY5K5ecJfD31
lDCPe1V9HJsk/sel9shhKoCEn1agNelFN4xTQzB8gQEq2lQQSgi7lfA11VI9eGLv
ld4/XL4qw5XrXXPRV7mrnSjI1g0LTkPYccTqjWw99wOwYa4mXYajOa6OkGKRMWE/
HhPffWK3ycuoFD+8l9Kp/YfFpmakYWoBuTxF7dPT7+W4IlRgq50XEcSEyfzWh1Tm
rtw6JP+d7pdtTqreDxWkMFkXBYp3NKRmwvqIuhzS59aUsyiOv+ApL2OScwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmM/PUdeiYidBAEh1e4DrnYj2WxMB8GA1UdIwQY
MBaAFLuOL1rHy+YhF9pHisDAJ61thDxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kMjA4YTAtZTQzNi00ODk2LWJlZjIt
M2I5ZGIwNWQyMzg0LzEvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kMjA4YTAtZTQzNi00ODk2LWJlZjItM2I5ZGIwNWQyMzg0
LzEvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgWGKtLE
SViJ1PCjp6lYJgaZOfSmav8EZRR2Nv9bjwG49c2WCj8yR3liEU7zKUThCvyUqqaF
Q2hD5vpkcw0UrDc8VSSZ9geT6Ws3pn1Xi2NOK3W0jTSp8wwExsnHIxcR+urfZ4V6
99pqSMwzv4H+tAr3rxGMnsluiJu8E4fe5iSQkAHBzrLSHMJ+I+2PKdtq3XUQIFpP
6hryPjeoiYfuKK3PG96kZMYTfzB/GigZT+x4EG6UCmDjt0WAVwNeaowvZoGoB9vK
EXsjDBdN4cQCF65yqgBylCjH6fBWq3u0mo1dbQMynHhI5wvQrmc8vNTOXs/fUUSm
giNvWt1x4QjkCQ==
-----END CERTIFICATE-----
Generated at Sat Mar 14 05:16:28 2026 by rpki-client