Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
File: u5tW2NluvLX8-H3i7CtSwZTM-fk.mft (raw, json)
Hash identifier: lSQf6Zy0TZcIqKYX2EqP60VrTGdkJtcvS/OInU8r2Dw=
Subject key identifier: 9E:3C:0F:D4:1B:D3:AE:38:E1:29:42:4B:5C:E9:E3:12:9E:F7:5A:DA
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial: 019DCFAC40B02FAD0A6699419CC4771D91C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
Manifest number: 18F3
Signing time: Mon 27 Apr 2026 16:01:05 +0000
Manifest this update: Mon 27 Apr 2026 16:01:05 +0000
Manifest next update: Tue 28 Apr 2026 16:01:05 +0000
Files and hashes: 1: GvsNXqyPm3O1muA1KhzUZIC7rvw.roa (hash: GH+TiXaBiyInStL5LqF861L8DM/DPBqkW/47ALTzmZE=)
2: OSKY092K7Rd69JqqbL4WMk5Xd4U.roa (hash: NVRC2Db3R3ftV/bNbwEakNLpneFf6ZR1jTLt2dsBXng=)
3: SztDQUTdgK2SUjFi9wkDzBiBMLc.roa (hash: a/GE3Z5i97PSSD8tZRN4CE8oTOTKNEOJuyhCdmF0QKE=)
4: u5tW2NluvLX8-H3i7CtSwZTM-fk.crl (hash: 6j25IwIoaWJnphbl6FitMNWHJPgC0Xbsfdd3dA3MVFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ac:40:b0:2f:ad:0a:66:99:41:9c:c4:77:1d:91:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Validity
Not Before: Apr 27 16:01:05 2026 GMT
Not After : Apr 28 16:01:05 2026 GMT
Subject: CN=9e3c0fd41bd3ae38e129424b5ce9e3129ef75ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:63:a4:59:4a:a4:66:fb:d9:94:e9:9e:82:f1:
ab:3b:e1:0c:fd:16:63:5b:30:47:29:08:34:41:17:
de:7c:e2:0e:a3:0d:97:1e:0c:4f:d7:ea:22:70:8f:
99:3c:ee:60:86:9f:70:79:be:e0:bb:38:35:6c:bc:
de:f8:af:b1:ce:f6:c7:b6:25:ee:ad:a2:92:56:59:
10:28:3e:5f:f7:e0:33:bb:b3:eb:c8:a9:d9:49:6e:
d7:28:54:f8:80:68:e2:14:ef:52:8b:4a:3e:4d:c4:
36:ea:5c:65:55:3b:8b:a8:f1:9b:87:df:82:ac:eb:
92:55:6b:19:87:c4:d1:86:18:e3:ea:eb:11:b5:46:
5e:b3:a7:03:cf:10:bb:96:88:3f:65:46:86:9d:9b:
4d:dc:e4:c0:5e:cf:d8:cf:c1:3c:a0:47:be:ce:c2:
18:da:77:38:b6:9f:46:c3:30:f5:88:08:ac:48:17:
84:a1:f7:16:df:1a:35:4e:74:79:08:51:8b:de:a0:
11:3c:ef:5a:05:ad:29:d2:03:d9:37:53:f0:8f:e2:
b5:78:1b:4e:f2:e1:d4:98:58:a2:79:11:53:af:14:
dd:d5:3d:7c:22:52:92:bc:08:be:f3:43:03:98:9d:
3e:11:ca:0d:95:d0:da:14:5e:fe:7e:2d:39:26:4f:
91:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3C:0F:D4:1B:D3:AE:38:E1:29:42:4B:5C:E9:E3:12:9E:F7:5A:DA
X509v3 Authority Key Identifier:
keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:66:86:30:4d:15:a0:ce:c4:a4:52:cb:1c:87:51:1d:3d:53:
51:4b:85:c6:4d:14:0f:da:b0:ff:ae:e4:df:be:f0:f4:59:41:
74:9e:5e:1d:bd:b6:62:98:e7:27:a5:32:04:97:7e:41:66:51:
02:00:fc:db:7a:bf:dd:47:bc:77:5b:c8:00:5c:3d:a4:0a:25:
23:8a:0d:fc:d9:f6:43:f4:fe:ed:7e:db:24:f4:ec:4d:82:eb:
3e:d6:0a:2c:6c:eb:4a:3f:5f:b2:b5:32:1d:01:72:9f:cf:b4:
46:ec:a3:58:b9:20:c8:1d:84:c7:54:a6:a4:d4:5e:6b:44:a3:
cd:b8:05:f3:65:e0:85:a3:46:f2:47:ec:d2:ac:5c:7e:9b:c8:
51:61:ce:09:ff:89:13:8b:b4:ad:f0:98:3c:34:76:d0:24:56:
90:2a:6c:bf:5b:60:a4:eb:c6:42:05:53:7f:a3:a5:b2:0b:96:
54:94:62:b3:e0:bc:33:1a:b8:f3:3c:13:1a:f2:a6:c5:83:9a:
9c:5c:54:3c:e7:22:d0:8f:8e:e2:29:6e:64:e0:4a:ef:24:cf:
d0:5e:b6:5e:2a:c6:c5:7a:37:d9:bc:e0:ed:81:c7:ec:cf:f2:
38:c2:ac:a9:08:b0:33:da:37:1f:87:29:e9:c7:2d:ef:03:49:
19:2c:6e:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PrECwL60KZplBnMR3HZHIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiOWI1NmQ4ZDk2ZWJjYjVmY2Y4N2RlMmVjMmI1MmMxOTRj
Y2Y5ZjkwHhcNMjYwNDI3MTYwMTA1WhcNMjYwNDI4MTYwMTA1WjAzMTEwLwYDVQQD
Eyg5ZTNjMGZkNDFiZDNhZTM4ZTEyOTQyNGI1Y2U5ZTMxMjllZjc1YWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32OkWUqkZvvZlOmegvGrO+EM/RZj
WzBHKQg0QRfefOIOow2XHgxP1+oicI+ZPO5ghp9web7guzg1bLze+K+xzvbHtiXu
raKSVlkQKD5f9+Azu7PryKnZSW7XKFT4gGjiFO9Si0o+TcQ26lxlVTuLqPGbh9+C
rOuSVWsZh8TRhhjj6usRtUZes6cDzxC7log/ZUaGnZtN3OTAXs/Yz8E8oEe+zsIY
2nc4tp9GwzD1iAisSBeEofcW3xo1TnR5CFGL3qARPO9aBa0p0gPZN1Pwj+K1eBtO
8uHUmFiieRFTrxTd1T18IlKSvAi+80MDmJ0+EcoNldDaFF7+fi05Jk+RXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ48D9Qb06444SlCS1zp4xKe91raMB8GA1UdIwQY
MBaAFLubVtjZbry1/Ph94uwrUsGUzPn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmIt
NGY0ZmU4MDNiMDE1LzEvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmItNGY0ZmU4MDNiMDE1
LzEvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2aGME0V
oM7EpFLLHIdRHT1TUUuFxk0UD9qw/67k377w9FlBdJ5eHb22YpjnJ6UyBJd+QWZR
AgD823q/3Ue8d1vIAFw9pAolI4oN/Nn2Q/T+7X7bJPTsTYLrPtYKLGzrSj9fsrUy
HQFyn8+0RuyjWLkgyB2Ex1SmpNRea0SjzbgF82XghaNG8kfs0qxcfpvIUWHOCf+J
E4u0rfCYPDR20CRWkCpsv1tgpOvGQgVTf6OlsguWVJRis+C8Mxq48zwTGvKmxYOa
nFxUPOci0I+O4iluZOBK7yTP0F62XirGxXo32bzg7YHH7M/yOMKsqQiwM9o3H4cp
6cct7wNJGSxuCw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 21:25:58 2026 by rpki-client