Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft
File: uP5lGLdAqxQFS-d0iZKLuffa8O4.mft (raw, json)
Hash identifier: j27UlwsSHkA0DWPu6Ile8G2nHtb4QZ+7cJzCVVj3U88=
Subject key identifier: F7:F0:83:74:96:31:CE:D6:7D:9C:83:39:2F:76:05:8A:5B:F0:D8:D2
Authority key identifier: B8:FE:65:18:B7:40:AB:14:05:4B:E7:74:89:92:8B:B9:F7:DA:F0:EE
Certificate issuer: /CN=b8fe6518b740ab14054be77489928bb9f7daf0ee
Certificate serial: 019D389C41FC02A48EA827458EBC81A381C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uP5lGLdAqxQFS-d0iZKLuffa8O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft
Manifest number: BF
Signing time: Sun 29 Mar 2026 08:00:57 +0000
Manifest this update: Sun 29 Mar 2026 08:00:57 +0000
Manifest next update: Mon 30 Mar 2026 08:00:57 +0000
Files and hashes: 1: dHcfbZH7Z1zN39zAGSaPQDZCQeY.roa (hash: cqmuHZPjL4XCoT6u5gjSCm4ZP/CSi/q+3ENIMNnmOs4=)
2: uP5lGLdAqxQFS-d0iZKLuffa8O4.crl (hash: FNXUcRBmnOxK2lv8eLig2E6rxYlveUfBCm1DnA9QmJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uP5lGLdAqxQFS-d0iZKLuffa8O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:41:fc:02:a4:8e:a8:27:45:8e:bc:81:a3:81:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8fe6518b740ab14054be77489928bb9f7daf0ee
Validity
Not Before: Mar 29 08:00:57 2026 GMT
Not After : Mar 30 08:00:57 2026 GMT
Subject: CN=f7f083749631ced67d9c83392f76058a5bf0d8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:29:e2:5e:54:9d:3e:22:75:17:cb:90:81:
58:df:d1:ff:a1:2a:92:dd:5d:6e:27:b3:d7:90:fa:
40:ae:a5:39:81:d7:96:82:9c:94:71:39:4e:5f:a1:
96:87:22:d9:b5:cd:bc:b6:82:e6:99:f5:10:e0:e9:
37:71:1f:3e:f4:7d:b0:6f:af:ca:1f:b9:4a:a0:e6:
05:6c:f6:bf:33:24:69:2a:3e:b7:d6:bf:60:96:84:
88:60:27:c6:1d:fc:1c:5a:36:24:bc:7f:bc:dd:c7:
23:7a:41:d1:1a:e8:1b:db:14:e2:1d:06:77:06:8c:
59:09:12:88:3a:50:dd:48:35:24:ae:a3:e9:5b:6c:
06:f7:19:4a:a1:60:9e:59:fe:99:9b:61:cc:2b:2d:
f3:6b:e2:f9:19:6d:e5:c4:9b:4f:75:83:90:85:77:
eb:d4:b1:95:3d:a8:17:ab:51:8d:79:ab:10:88:af:
77:12:d4:f9:db:cd:09:d6:b1:f5:9f:7f:ac:ad:fa:
7d:78:f6:22:82:3b:86:5d:0e:d8:34:a5:b3:ab:06:
6d:19:7d:ab:ee:1a:c7:c6:f9:ae:3b:4b:3a:fd:19:
f2:19:dd:db:fc:61:ff:fc:44:c3:5b:d7:b7:1d:a1:
38:50:71:2d:a1:48:a3:fc:42:4f:3b:40:e1:86:a5:
6d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F0:83:74:96:31:CE:D6:7D:9C:83:39:2F:76:05:8A:5B:F0:D8:D2
X509v3 Authority Key Identifier:
keyid:B8:FE:65:18:B7:40:AB:14:05:4B:E7:74:89:92:8B:B9:F7:DA:F0:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uP5lGLdAqxQFS-d0iZKLuffa8O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:6a:75:d6:5e:62:4c:b2:ae:7f:50:97:3e:4a:d5:c8:cb:79:
32:77:f0:31:30:8d:29:4f:be:cb:01:a5:b0:c7:d9:f3:0f:ed:
e0:e0:40:48:5d:80:93:ed:16:29:35:84:c0:21:3b:22:98:dc:
ef:50:81:8f:cb:d9:7f:94:a0:8b:c4:31:da:01:d1:79:e9:a8:
cd:9b:3f:7d:06:8b:86:b6:cc:9a:7e:26:0e:6e:5c:35:9e:85:
55:0d:1e:df:e8:47:9a:06:f9:cd:4a:69:e4:45:9f:9a:f4:7c:
23:e8:37:23:ff:22:fb:bd:27:60:1c:0c:de:82:1b:5a:e8:65:
1b:ee:40:4e:ed:11:92:ad:5a:17:bf:61:93:04:6d:b9:6f:be:
89:f8:ca:7c:b8:a7:2d:74:d7:5e:3d:1d:4e:c0:2c:0e:97:e0:
4f:77:a3:08:6d:a8:0d:c3:a0:4b:b0:13:62:23:14:5d:d5:16:
ed:3b:13:71:1b:62:56:c8:49:0b:1a:5a:3c:2f:8c:0a:14:be:
d3:dc:89:30:4d:34:b5:94:67:85:60:e5:e6:3b:d2:94:9c:7c:
24:59:da:e1:d3:bc:e7:39:80:f4:25:b8:7e:0c:fc:8b:9d:ba:
17:4f:ed:72:42:ec:6f:f2:ca:d0:95:00:90:0e:e4:d9:ce:ea:
3a:79:f4:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nEH8AqSOqCdFjryBo4HCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZmU2NTE4Yjc0MGFiMTQwNTRiZTc3NDg5OTI4YmI5Zjdk
YWYwZWUwHhcNMjYwMzI5MDgwMDU3WhcNMjYwMzMwMDgwMDU3WjAzMTEwLwYDVQQD
EyhmN2YwODM3NDk2MzFjZWQ2N2Q5YzgzMzkyZjc2MDU4YTViZjBkOGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0Up4l5UnT4idRfLkIFY39H/oSqS
3V1uJ7PXkPpArqU5gdeWgpyUcTlOX6GWhyLZtc28toLmmfUQ4Ok3cR8+9H2wb6/K
H7lKoOYFbPa/MyRpKj631r9gloSIYCfGHfwcWjYkvH+83ccjekHRGugb2xTiHQZ3
BoxZCRKIOlDdSDUkrqPpW2wG9xlKoWCeWf6Zm2HMKy3za+L5GW3lxJtPdYOQhXfr
1LGVPagXq1GNeasQiK93EtT5280J1rH1n3+srfp9ePYigjuGXQ7YNKWzqwZtGX2r
7hrHxvmuO0s6/RnyGd3b/GH//ETDW9e3HaE4UHEtoUij/EJPO0DhhqVtHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfwg3SWMc7WfZyDOS92BYpb8NjSMB8GA1UdIwQY
MBaAFLj+ZRi3QKsUBUvndImSi7n32vDuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVA1bEdMZEFxeFFGUy1kMGlaS0x1ZmZhOE80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84OTY5ZTctY2E0Zi00ZTMxLWFmYjIt
NDczODNkYzhjZDBlLzEvdVA1bEdMZEFxeFFGUy1kMGlaS0x1ZmZhOE80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi84OTY5ZTctY2E0Zi00ZTMxLWFmYjItNDczODNkYzhjZDBl
LzEvdVA1bEdMZEFxeFFGUy1kMGlaS0x1ZmZhOE80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGp11l5i
TLKuf1CXPkrVyMt5MnfwMTCNKU++ywGlsMfZ8w/t4OBASF2Ak+0WKTWEwCE7Ipjc
71CBj8vZf5Sgi8Qx2gHReemozZs/fQaLhrbMmn4mDm5cNZ6FVQ0e3+hHmgb5zUpp
5EWfmvR8I+g3I/8i+70nYBwM3oIbWuhlG+5ATu0Rkq1aF79hkwRtuW++ifjKfLin
LXTXXj0dTsAsDpfgT3ejCG2oDcOgS7ATYiMUXdUW7TsTcRtiVshJCxpaPC+MChS+
09yJME00tZRnhWDl5jvSlJx8JFna4dO85zmA9CW4fgz8i526F0/tckLsb/LK0JUA
kA7k2c7qOnn0QQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:43:49 2026 by rpki-client