Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft
File: vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft (raw, json)
Hash identifier: SqNhRqX+d1rQ6by4aMNEDCd8EK4E4MLiUxILCvgo4Mc=
Subject key identifier: 98:7A:62:41:9E:2F:A6:1B:C8:E1:34:93:F3:A0:82:E5:D6:5C:27:B0
Authority key identifier: BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52
Certificate issuer: /CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752
Certificate serial: 019D38D2EF06A8C3ECDE5526E23C0B42E3A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:00:40 +0000
Manifest this update: Sun 29 Mar 2026 09:00:40 +0000
Manifest next update: Mon 30 Mar 2026 09:00:40 +0000
Files and hashes: 1: 0M06EybESD0rwYWfwqrVRbpIyv4.roa (hash: vcttDWnGAt8CJjLo47y5yaYR7r334apl/y9yFk3ErkE=)
2: H8cTTnpAuLtew2tnTJcflZAFh6Y.roa (hash: 9lXDgfMHfweW9UIlba3eDwec/q7hxiQODfc3WbgSX8Y=)
3: SprpMmzkPsxt00vdDJYhOqLnJzE.roa (hash: Li4MY9HGqjTJUHnXsec/HTc2IoBGMD6duRWMuKpeAgc=)
4: uDoJkgFguikcxRpI0Sh5smoTvbo.roa (hash: fSPjqDFCQlE12J56viSWxC0b9IeSny9NSS4QGpXzPsc=)
5: vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl (hash: YXYgS3PXbWuXhXCsCUCTNldsvzfsl1UbNmbgN1F8sGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ef:06:a8:c3:ec:de:55:26:e2:3c:0b:42:e3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752
Validity
Not Before: Mar 29 09:00:40 2026 GMT
Not After : Mar 30 09:00:40 2026 GMT
Subject: CN=987a62419e2fa61bc8e13493f3a082e5d65c27b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:7f:ab:7c:4d:cc:5e:be:36:7e:23:a3:09:
86:98:64:86:80:c9:7e:bb:6a:e7:de:8f:83:c4:87:
8a:4d:29:a8:1e:4d:f0:26:71:25:fb:35:1e:42:26:
9c:9f:35:da:96:3e:a1:0f:af:72:fa:db:10:5b:6d:
e8:0c:83:d4:b7:ea:3c:46:20:38:ba:58:32:29:b4:
48:3f:b9:7e:8b:57:b6:15:ee:5c:e2:f8:44:0f:ce:
c0:5b:fb:33:98:7a:32:a3:b9:f2:d4:40:8d:0f:f4:
9f:f0:c1:89:ec:3f:ef:67:e5:38:90:59:40:74:f6:
77:11:2d:62:d6:59:ae:5e:c2:d6:fb:a2:a7:7c:86:
a8:a7:32:32:0e:65:32:d5:a0:b6:fe:58:4d:5e:e0:
40:fe:62:68:49:99:a6:9a:af:09:60:64:67:06:25:
89:2f:7b:0c:3e:8e:b0:fb:91:e9:20:3f:0d:16:93:
91:1b:41:3f:7f:4a:13:7c:f7:0d:e2:dc:0e:bb:41:
22:0c:04:f1:3c:55:63:26:11:f9:86:1a:02:91:c1:
d2:43:0f:d7:f6:53:ac:ab:8c:67:61:85:e6:cf:08:
53:49:2b:9b:40:98:6b:8a:2c:7c:73:8a:02:19:9b:
4f:e5:d0:90:9e:db:d0:02:16:2d:d7:b9:4f:1c:0c:
f4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7A:62:41:9E:2F:A6:1B:C8:E1:34:93:F3:A0:82:E5:D6:5C:27:B0
X509v3 Authority Key Identifier:
keyid:BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:45:c6:60:be:ff:ea:0e:fc:a0:1e:5c:2c:e3:f2:05:bf:d1:
c4:d7:2a:23:06:73:80:4d:d6:e8:c9:86:35:6f:d8:df:b4:d2:
fb:79:30:c7:9a:9c:b6:bf:1f:f0:6f:ad:f5:5d:c5:32:ec:3d:
a4:f0:4a:01:44:18:6d:b2:4f:7e:8c:84:34:41:2f:45:54:76:
e4:6b:9c:ad:19:1b:0b:8c:2f:15:47:6f:eb:f7:d2:8a:1d:3e:
67:36:5e:32:3a:e7:84:9a:60:23:95:71:4a:a2:69:f6:59:f2:
57:48:20:21:b6:66:8c:09:ed:09:e3:a6:eb:63:3b:00:01:a3:
08:ff:52:cd:41:4c:3d:1f:fa:c7:70:44:3d:d4:14:27:7f:81:
a8:d0:57:95:f7:04:61:93:33:98:fb:53:63:18:df:32:52:5e:
74:0b:09:9c:25:7a:3c:5b:ff:0e:fa:41:59:62:63:8b:ab:75:
35:83:bc:24:4c:40:52:49:f0:6d:44:b7:fe:3b:06:14:18:15:
e7:be:40:5f:64:95:4a:50:f0:de:9d:ee:f5:7c:0e:c6:94:25:
c0:15:9b:c9:31:07:16:bc:3b:f1:0f:9a:16:fd:9d:41:b4:73:
c6:f8:4c:2d:30:a4:3d:c3:09:21:cf:ae:bb:af:fd:94:e7:1e:
78:93:45:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040u8GqMPs3lUm4jwLQuOgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNGU2ZWRkMjZlZjFiMTZkODQ4ZTk4MTMwZTZmYzQ0NTBi
MzI3NTIwHhcNMjYwMzI5MDkwMDQwWhcNMjYwMzMwMDkwMDQwWjAzMTEwLwYDVQQD
Eyg5ODdhNjI0MTllMmZhNjFiYzhlMTM0OTNmM2EwODJlNWQ2NWMyN2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjt/q3xNzF6+Nn4jowmGmGSGgMl+
u2rn3o+DxIeKTSmoHk3wJnEl+zUeQiacnzXalj6hD69y+tsQW23oDIPUt+o8RiA4
ulgyKbRIP7l+i1e2Fe5c4vhED87AW/szmHoyo7ny1ECND/Sf8MGJ7D/vZ+U4kFlA
dPZ3ES1i1lmuXsLW+6KnfIaopzIyDmUy1aC2/lhNXuBA/mJoSZmmmq8JYGRnBiWJ
L3sMPo6w+5HpID8NFpORG0E/f0oTfPcN4twOu0EiDATxPFVjJhH5hhoCkcHSQw/X
9lOsq4xnYYXmzwhTSSubQJhriix8c4oCGZtP5dCQntvQAhYt17lPHAz0BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJh6YkGeL6YbyOE0k/OgguXWXCewMB8GA1UdIwQY
MBaAFL1Obt0m7xsW2EjpgTDm/ERQsydSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlU1dTNTYnZHeGJZU09tQk1PYjhSRkN6SjFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9hY2UzNzMtYjgxYi00MDBjLTg0NWMt
OTYyOGY1MjY2NTQyLzEvdlU1dTNTYnZHeGJZU09tQk1PYjhSRkN6SjFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9hY2UzNzMtYjgxYi00MDBjLTg0NWMtOTYyOGY1MjY2NTQy
LzEvdlU1dTNTYnZHeGJZU09tQk1PYjhSRkN6SjFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArkXGYL7/
6g78oB5cLOPyBb/RxNcqIwZzgE3W6MmGNW/Y37TS+3kwx5qctr8f8G+t9V3FMuw9
pPBKAUQYbbJPfoyENEEvRVR25GucrRkbC4wvFUdv6/fSih0+ZzZeMjrnhJpgI5Vx
SqJp9lnyV0ggIbZmjAntCeOm62M7AAGjCP9SzUFMPR/6x3BEPdQUJ3+BqNBXlfcE
YZMzmPtTYxjfMlJedAsJnCV6PFv/DvpBWWJji6t1NYO8JExAUknwbUS3/jsGFBgV
575AX2SVSlDw3p3u9XwOxpQlwBWbyTEHFrw78Q+aFv2dQbRzxvhMLTCkPcMJIc+u
u6/9lOceeJNFMg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:08 2026 by rpki-client