Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
File: urRT2Xui9KBFhD5rSpU7PlEG6vI.mft (raw, json)
Hash identifier: zbQKao9Q/HLAWrwPD/gdtEtUOtDtakwZIOp4baKCpdE=
Subject key identifier: 87:C8:EB:74:5E:4C:88:8B:0B:CC:2A:28:DD:90:7B:E1:CA:27:B5:C7
Authority key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
Certificate issuer: /CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Certificate serial: 019D38D350976B043D9BD446F2CD59F502ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
Manifest number: 189C
Signing time: Sun 29 Mar 2026 09:01:05 +0000
Manifest this update: Sun 29 Mar 2026 09:01:05 +0000
Manifest next update: Mon 30 Mar 2026 09:01:05 +0000
Files and hashes: 1: urRT2Xui9KBFhD5rSpU7PlEG6vI.crl (hash: OPRtPSkIDFZJXDCUGSvhgVo7gIQxMrkccg8oLEOCY5Y=)
2: y7cO-uvd-g6IKXPnSmNUZia9w1s.roa (hash: aa7Xz8229L+R/TET5wKLzyMqkiPkHrosbEK4nrHeitk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:50:97:6b:04:3d:9b:d4:46:f2:cd:59:f5:02:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Validity
Not Before: Mar 29 09:01:05 2026 GMT
Not After : Mar 30 09:01:05 2026 GMT
Subject: CN=87c8eb745e4c888b0bcc2a28dd907be1ca27b5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:13:d0:6c:ab:7d:02:a1:8a:b3:62:3d:93:43:
03:62:19:ca:51:8e:4e:87:41:1f:f4:64:c1:60:37:
62:45:cf:68:ba:9b:b4:66:0a:b0:6e:dd:52:d7:c4:
1c:d3:f8:d0:2c:f2:63:39:61:2e:fe:e3:09:df:6b:
6a:e2:bb:be:e4:5d:3d:ab:b6:3d:92:90:6f:f3:ba:
07:50:c5:cb:12:91:83:5a:f9:e9:7d:fc:33:ef:51:
3a:51:27:bd:3b:7e:57:f2:cc:82:40:dd:68:7f:d7:
0c:44:2b:9f:8e:4c:ea:20:10:0c:fa:76:f0:29:fb:
b1:f0:78:1c:bb:46:cd:84:5f:88:2b:84:7a:d6:c5:
ea:e6:86:e4:77:4e:6f:dd:e2:69:94:ac:df:2d:ea:
2f:1f:ae:1d:6b:f6:1c:b1:e7:25:7b:0f:0a:d3:62:
73:c6:5b:7c:52:66:d1:c9:38:33:2e:3e:95:a9:53:
24:62:29:d6:09:bc:b7:11:f0:88:e2:9f:5a:f4:51:
04:9e:31:7f:c1:fb:86:c2:9e:94:0a:99:95:7c:74:
79:64:c5:b8:7a:a4:31:2b:aa:46:26:f9:d8:28:8b:
00:1b:0c:f2:2e:11:63:41:03:29:96:35:46:ed:e5:
8a:ad:53:57:fd:fe:4a:54:83:d6:f7:e8:fc:06:af:
07:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C8:EB:74:5E:4C:88:8B:0B:CC:2A:28:DD:90:7B:E1:CA:27:B5:C7
X509v3 Authority Key Identifier:
keyid:BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3b:92:e7:c5:97:02:96:38:1a:67:87:d0:7d:ec:11:6a:cb:
06:8c:91:dd:47:95:46:3e:7f:42:5d:49:bf:15:13:77:25:8c:
db:6d:da:61:88:3a:4f:65:f1:c1:ee:e3:fb:a5:bc:7f:18:e8:
e1:f9:25:c0:78:92:4b:18:81:21:46:2c:20:1e:1d:49:4f:1c:
6a:b2:a2:f7:21:86:b9:1a:be:da:94:50:b2:f5:cc:e6:d3:69:
dc:e2:27:3d:ab:c5:aa:25:29:cf:81:2a:42:ab:74:44:87:27:
53:c0:53:84:1e:93:de:e1:a7:cd:b6:2c:fa:ee:38:3f:f2:cc:
7d:1a:ca:75:4f:b6:07:a7:7c:e1:48:7f:1f:d0:0e:8f:18:9d:
f0:e1:08:bc:70:f5:bc:0d:04:4e:98:e9:3c:f5:75:a0:bd:60:
27:2f:55:c3:c4:0a:5d:be:a9:6d:26:ea:9e:c2:1f:13:61:b2:
69:17:66:f9:7f:41:ee:ea:5c:2f:2e:8c:d6:9e:7e:e2:45:28:
ac:c0:45:d2:94:c9:48:f1:bc:69:dd:f2:c3:0a:19:e9:66:fd:
84:ab:3d:6e:68:49:97:a1:7e:9a:3c:6e:8c:89:df:43:b9:59:
e0:20:5b:e3:14:36:37:0c:04:2f:b4:8d:2f:b5:26:db:bc:df:
62:04:52:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0401CXawQ9m9RG8s1Z9QLtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYjQ1M2Q5N2JhMmY0YTA0NTg0M2U2YjRhOTUzYjNlNTEw
NmVhZjIwHhcNMjYwMzI5MDkwMTA1WhcNMjYwMzMwMDkwMTA1WjAzMTEwLwYDVQQD
Eyg4N2M4ZWI3NDVlNGM4ODhiMGJjYzJhMjhkZDkwN2JlMWNhMjdiNWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xPQbKt9AqGKs2I9k0MDYhnKUY5O
h0Ef9GTBYDdiRc9oupu0Zgqwbt1S18Qc0/jQLPJjOWEu/uMJ32tq4ru+5F09q7Y9
kpBv87oHUMXLEpGDWvnpffwz71E6USe9O35X8syCQN1of9cMRCufjkzqIBAM+nbw
Kfux8Hgcu0bNhF+IK4R61sXq5obkd05v3eJplKzfLeovH64da/Ycseclew8K02Jz
xlt8UmbRyTgzLj6VqVMkYinWCby3EfCI4p9a9FEEnjF/wfuGwp6UCpmVfHR5ZMW4
eqQxK6pGJvnYKIsAGwzyLhFjQQMpljVG7eWKrVNX/f5KVIPW9+j8Bq8HXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfI63ReTIiLC8wqKN2Qe+HKJ7XHMB8GA1UdIwQY
MBaAFLq0U9l7ovSgRYQ+a0qVOz5RBuryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82NzAzY2EtY2VkNC00MjA3LWFiMDUt
NGE2ZjU1NzcxYmQxLzEvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82NzAzY2EtY2VkNC00MjA3LWFiMDUtNGE2ZjU1NzcxYmQx
LzEvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjuS58WX
ApY4GmeH0H3sEWrLBoyR3UeVRj5/Ql1JvxUTdyWM223aYYg6T2Xxwe7j+6W8fxjo
4fklwHiSSxiBIUYsIB4dSU8carKi9yGGuRq+2pRQsvXM5tNp3OInPavFqiUpz4Eq
Qqt0RIcnU8BThB6T3uGnzbYs+u44P/LMfRrKdU+2B6d84Uh/H9AOjxid8OEIvHD1
vA0ETpjpPPV1oL1gJy9Vw8QKXb6pbSbqnsIfE2GyaRdm+X9B7upcLy6M1p5+4kUo
rMBF0pTJSPG8ad3ywwoZ6Wb9hKs9bmhJl6F+mjxujInfQ7lZ4CBb4xQ2NwwEL7SN
L7Um27zfYgRSjA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:43 2026 by rpki-client