Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
File: u9ky9wZLH96aEiXzMnefwi5nMjk.mft (raw, json)
Hash identifier: unMhIJlJFT90LdfkBFW/J9mGTNBE7XdYStBpow0QhYA=
Subject key identifier: AA:B2:E2:10:9F:76:8E:CA:53:8C:81:77:E8:A5:4E:DC:63:E9:0D:DF
Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239
Certificate serial: 019DAFEAA331D893577813B8B6134DCAAEE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
Manifest number: 18CD
Signing time: Tue 21 Apr 2026 12:01:23 +0000
Manifest this update: Tue 21 Apr 2026 12:01:23 +0000
Manifest next update: Wed 22 Apr 2026 12:01:23 +0000
Files and hashes: 1: RxKetbkFR1olWLlhrcubK8yceAM.roa (hash: g3CTp9HnUT7GJeL+1i3uTdVEKFQJlZ/SWysI1PWWzG4=)
2: sxLxAtHZwjLt62bCzACT8k_EKTs.roa (hash: 1l4e9qeUH7lZXuHCARClU98Z9yuYDrKKJQ+J0TPgdsU=)
3: u9ky9wZLH96aEiXzMnefwi5nMjk.crl (hash: 54cndxJdUzAP/3eX5qq3qMtR9c7TZl3+3umnUC7+i+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:ea:a3:31:d8:93:57:78:13:b8:b6:13:4d:ca:ae:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239
Validity
Not Before: Apr 21 12:01:23 2026 GMT
Not After : Apr 22 12:01:23 2026 GMT
Subject: CN=aab2e2109f768eca538c8177e8a54edc63e90ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:9e:af:5c:37:35:6c:c8:7b:7f:d0:eb:10:
19:db:76:b3:2d:c9:6e:a7:83:12:24:b9:1d:e0:84:
f5:e7:1f:4b:8f:f4:0b:79:74:2d:12:45:8d:19:06:
2c:e5:ef:d2:f7:48:41:2c:32:37:d3:37:57:b3:18:
ba:0e:dc:48:7a:b9:1d:1e:4f:83:fa:f2:b5:8a:e2:
8e:f9:b6:26:1e:05:96:05:7f:65:e6:7e:fa:e3:f3:
1d:9d:de:7e:e2:28:45:6c:7e:cf:1e:92:21:a0:4e:
fc:a2:79:2b:22:f4:f8:ff:b3:91:4e:c7:64:71:71:
01:03:62:31:86:1c:20:fb:13:3f:3b:7a:c0:e0:a8:
d6:e6:ae:e2:fe:5d:ef:84:73:58:2c:a9:7d:a8:8c:
8d:9f:7e:c6:19:af:64:79:fe:e7:08:a7:2e:83:9d:
9e:9b:c1:37:97:4c:4f:10:59:ce:36:c9:89:40:dd:
9c:54:19:4c:5e:e0:06:38:4d:ad:0d:9e:0f:92:c4:
69:0c:ec:18:1d:19:b4:5a:f2:6e:76:a1:91:c4:b4:
85:ee:99:79:8f:43:4f:32:21:d4:59:ae:42:ac:ce:
c4:44:5f:1d:6b:e5:08:8a:e4:5f:8e:03:0f:70:cd:
6e:08:e1:0a:72:ed:25:43:04:ae:ec:84:e8:4b:19:
6e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B2:E2:10:9F:76:8E:CA:53:8C:81:77:E8:A5:4E:DC:63:E9:0D:DF
X509v3 Authority Key Identifier:
keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b2:37:81:8b:41:df:63:a7:d0:e6:4c:3c:a9:84:52:7d:08:
92:53:90:d1:22:7e:d3:58:f6:98:e9:c7:3e:1e:fe:bb:98:72:
18:2a:cd:c5:af:e4:40:cd:16:1b:23:06:55:61:9b:14:9e:33:
5d:68:ab:7b:8b:04:60:76:3f:16:a8:97:7e:7b:d9:a2:f4:d1:
35:6b:ad:73:72:ec:d0:73:a7:aa:0e:d1:3d:9c:a8:6c:26:3a:
af:46:29:fa:2c:f9:19:3a:36:bc:7d:14:39:b8:7c:91:94:8c:
b0:d8:e0:f0:6f:c5:36:1a:6d:ca:6f:b7:88:a2:5d:81:7d:29:
c7:29:49:31:26:7b:94:e0:d1:cf:d5:e6:34:6d:b1:43:64:c6:
61:1b:2b:de:d6:b1:89:2b:f7:d7:3f:27:49:33:32:58:48:44:
93:91:34:a2:3a:66:ca:b1:38:6a:52:04:25:50:b2:ff:d7:6f:
92:54:65:93:5d:d8:ac:a8:26:88:a7:b9:e7:68:04:19:23:b4:
4c:2d:9e:55:77:24:4b:ce:c4:cd:e7:89:ea:2c:4d:4d:5c:a9:
a1:fb:04:95:c7:66:d5:b6:d6:6a:12:19:10:2a:d5:56:f8:da:
0d:cc:76:1b:f7:46:2d:74:c3:85:30:df:6a:51:dc:61:95:a6:
76:fb:c6:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2v6qMx2JNXeBO4thNNyq7pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZDkzMmY3MDY0YjFmZGU5YTEyMjVmMzMyNzc5ZmMyMmU2
NzMyMzkwHhcNMjYwNDIxMTIwMTIzWhcNMjYwNDIyMTIwMTIzWjAzMTEwLwYDVQQD
EyhhYWIyZTIxMDlmNzY4ZWNhNTM4YzgxNzdlOGE1NGVkYzYzZTkwZGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlSer1w3NWzIe3/Q6xAZ23azLclu
p4MSJLkd4IT15x9Lj/QLeXQtEkWNGQYs5e/S90hBLDI30zdXsxi6DtxIerkdHk+D
+vK1iuKO+bYmHgWWBX9l5n764/Mdnd5+4ihFbH7PHpIhoE78onkrIvT4/7ORTsdk
cXEBA2Ixhhwg+xM/O3rA4KjW5q7i/l3vhHNYLKl9qIyNn37GGa9kef7nCKcug52e
m8E3l0xPEFnONsmJQN2cVBlMXuAGOE2tDZ4PksRpDOwYHRm0WvJudqGRxLSF7pl5
j0NPMiHUWa5CrM7ERF8da+UIiuRfjgMPcM1uCOEKcu0lQwSu7IToSxluiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqy4hCfdo7KU4yBd+ilTtxj6Q3fMB8GA1UdIwQY
MBaAFLvZMvcGSx/emhIl8zJ3n8IuZzI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hNThiZGUtYzQ2MS00ODNmLTkxMWIt
ZDE3OTg4MWQwNjE4LzEvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9hNThiZGUtYzQ2MS00ODNmLTkxMWItZDE3OTg4MWQwNjE4
LzEvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbI3gYtB
32On0OZMPKmEUn0IklOQ0SJ+01j2mOnHPh7+u5hyGCrNxa/kQM0WGyMGVWGbFJ4z
XWire4sEYHY/FqiXfnvZovTRNWutc3Ls0HOnqg7RPZyobCY6r0Yp+iz5GTo2vH0U
Obh8kZSMsNjg8G/FNhptym+3iKJdgX0pxylJMSZ7lODRz9XmNG2xQ2TGYRsr3tax
iSv31z8nSTMyWEhEk5E0ojpmyrE4alIEJVCy/9dvklRlk13YrKgmiKe552gEGSO0
TC2eVXckS87EzeeJ6ixNTVypofsElcdm1bbWahIZECrVVvjaDcx2G/dGLXTDhTDf
alHcYZWmdvvG1w==
-----END CERTIFICATE-----
Generated at Tue Apr 21 21:40:43 2026 by rpki-client