Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/3b2bb3-fdb6-46af-b3d2-be11c14db6e0/1/uxBfoysrF18Y3VkI3ScZFbv0444.mft
File: uxBfoysrF18Y3VkI3ScZFbv0444.mft (raw, json)
Hash identifier: sFMwf8ZwIJjvwPxkywptgU5Udv64mTvpKbGxLRO2okI=
Subject key identifier: 9C:19:04:B8:62:1E:BB:53:71:6D:E9:8F:4A:9D:8A:6B:25:ED:F2:93
Authority key identifier: BB:10:5F:A3:2B:2B:17:5F:18:DD:59:08:DD:27:19:15:BB:F4:E3:8E
Certificate issuer: /CN=bb105fa32b2b175f18dd5908dd271915bbf4e38e
Certificate serial: 019D386558E8679EE9916FDCAB27C7BC8593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxBfoysrF18Y3VkI3ScZFbv0444.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/3b2bb3-fdb6-46af-b3d2-be11c14db6e0/1/uxBfoysrF18Y3VkI3ScZFbv0444.mft
Manifest number: 029B
Signing time: Sun 29 Mar 2026 07:00:59 +0000
Manifest this update: Sun 29 Mar 2026 07:00:59 +0000
Manifest next update: Mon 30 Mar 2026 07:00:59 +0000
Files and hashes: 1: cP1GSkrPpumyz1fbQhtF__y9oKM.roa (hash: MBJZqys4MB938y3xdVGjcJOvSN3lSPQWfJqtj51k6+E=)
2: uxBfoysrF18Y3VkI3ScZFbv0444.crl (hash: KH3yBlBX/M7oVn7XgdRD2sWmaUyOf8Dosww5Fby+Olc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/3b2bb3-fdb6-46af-b3d2-be11c14db6e0/1/uxBfoysrF18Y3VkI3ScZFbv0444.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/3b2bb3-fdb6-46af-b3d2-be11c14db6e0/1/uxBfoysrF18Y3VkI3ScZFbv0444.mft
rsync://rpki.ripe.net/repository/DEFAULT/uxBfoysrF18Y3VkI3ScZFbv0444.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:58:e8:67:9e:e9:91:6f:dc:ab:27:c7:bc:85:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb105fa32b2b175f18dd5908dd271915bbf4e38e
Validity
Not Before: Mar 29 07:00:59 2026 GMT
Not After : Mar 30 07:00:59 2026 GMT
Subject: CN=9c1904b8621ebb53716de98f4a9d8a6b25edf293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6e:51:b8:99:3c:03:0e:8b:13:5e:0b:6c:10:
43:83:79:6c:48:5c:5d:8b:6f:f7:76:bc:61:10:b5:
35:b6:2c:7b:29:a4:a2:69:d7:03:e1:28:65:80:31:
0b:80:58:f0:74:8f:36:bb:77:66:e6:bf:39:a7:63:
8c:d8:7c:c8:d9:59:82:3a:27:bb:f3:05:7b:07:0b:
95:5f:7a:ce:20:9f:f5:b9:3e:8e:5a:55:cb:6c:d5:
18:18:75:a6:d6:09:a6:a3:07:85:0b:8c:59:4f:90:
5b:ef:05:69:66:7f:e5:84:96:1e:d7:ee:aa:ab:e7:
4c:fa:65:38:6d:e4:e8:08:0c:3d:e5:20:ff:ce:ce:
53:2e:58:87:9f:52:8b:31:e1:87:21:2b:39:29:6d:
94:db:cb:08:b2:a3:1f:4b:51:d6:b3:7b:e0:93:77:
f3:aa:20:a6:ed:ed:41:02:42:59:c1:9c:7a:81:29:
d9:74:ac:4d:e6:66:8b:59:87:46:11:93:f7:fd:bc:
55:42:07:1c:c6:f7:b2:1c:25:4e:79:6f:76:88:33:
cc:e9:11:53:ef:94:35:75:ff:45:9f:88:ac:a0:7c:
b1:a3:e1:9d:3c:a7:ff:7a:f2:3f:fa:45:87:b2:31:
c9:59:13:db:dd:3e:a0:ee:4b:c2:52:3b:39:6e:21:
15:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:19:04:B8:62:1E:BB:53:71:6D:E9:8F:4A:9D:8A:6B:25:ED:F2:93
X509v3 Authority Key Identifier:
keyid:BB:10:5F:A3:2B:2B:17:5F:18:DD:59:08:DD:27:19:15:BB:F4:E3:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxBfoysrF18Y3VkI3ScZFbv0444.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3b2bb3-fdb6-46af-b3d2-be11c14db6e0/1/uxBfoysrF18Y3VkI3ScZFbv0444.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3b2bb3-fdb6-46af-b3d2-be11c14db6e0/1/uxBfoysrF18Y3VkI3ScZFbv0444.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:be:3b:70:9b:18:13:34:17:c7:e9:bd:f1:2a:67:f9:ca:e0:
6b:f1:bf:44:b0:09:f1:94:4c:16:3e:03:1c:19:8c:16:4c:61:
96:01:c7:b2:01:09:4c:c6:05:93:75:05:94:8b:6d:be:70:23:
97:2f:3d:f2:58:0a:98:76:4a:91:96:74:fd:a4:d9:36:1c:0c:
7a:f1:8c:1e:06:68:82:c2:f8:0f:e8:b5:b5:d1:27:f1:55:b0:
1f:e4:fc:54:d9:31:02:1b:fb:a7:4b:24:e7:20:14:85:8d:46:
59:b0:30:31:f6:26:ea:d6:66:10:99:05:83:cb:5e:24:36:ae:
8b:0d:9a:c5:24:ed:7c:77:8c:64:0b:55:9e:98:bd:1d:26:d1:
7f:ac:bf:5d:49:45:e4:e0:b7:dd:8b:57:fb:3c:e6:28:82:b1:
b1:ea:1c:96:80:b8:51:3f:1d:81:09:69:f6:b5:b1:59:ba:88:
80:ed:6e:36:78:39:7d:d6:31:59:77:c5:54:9e:81:54:b1:9d:
0c:1f:20:f2:35:a6:0c:d9:a3:8d:b3:97:d7:0b:aa:2c:7e:be:
2c:a3:5f:75:22:14:31:04:b9:7b:1c:5b:85:2d:4e:d0:c8:78:
98:89:6c:a2:9c:79:8c:43:c8:13:71:b6:cc:23:a8:51:8c:73:
4a:b3:86:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZVjoZ57pkW/cqyfHvIWTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMTA1ZmEzMmIyYjE3NWYxOGRkNTkwOGRkMjcxOTE1YmJm
NGUzOGUwHhcNMjYwMzI5MDcwMDU5WhcNMjYwMzMwMDcwMDU5WjAzMTEwLwYDVQQD
Eyg5YzE5MDRiODYyMWViYjUzNzE2ZGU5OGY0YTlkOGE2YjI1ZWRmMjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW5RuJk8Aw6LE14LbBBDg3lsSFxd
i2/3drxhELU1tix7KaSiadcD4ShlgDELgFjwdI82u3dm5r85p2OM2HzI2VmCOie7
8wV7BwuVX3rOIJ/1uT6OWlXLbNUYGHWm1gmmoweFC4xZT5Bb7wVpZn/lhJYe1+6q
q+dM+mU4beToCAw95SD/zs5TLliHn1KLMeGHISs5KW2U28sIsqMfS1HWs3vgk3fz
qiCm7e1BAkJZwZx6gSnZdKxN5maLWYdGEZP3/bxVQgccxveyHCVOeW92iDPM6RFT
75Q1df9Fn4isoHyxo+GdPKf/evI/+kWHsjHJWRPb3T6g7kvCUjs5biEVjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwZBLhiHrtTcW3pj0qdimsl7fKTMB8GA1UdIwQY
MBaAFLsQX6MrKxdfGN1ZCN0nGRW79OOOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXhCZm95c3JGMThZM1ZrSTNTY1pGYnYwNDQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8zYjJiYjMtZmRiNi00NmFmLWIzZDIt
YmUxMWMxNGRiNmUwLzEvdXhCZm95c3JGMThZM1ZrSTNTY1pGYnYwNDQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8zYjJiYjMtZmRiNi00NmFmLWIzZDItYmUxMWMxNGRiNmUw
LzEvdXhCZm95c3JGMThZM1ZrSTNTY1pGYnYwNDQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUr47cJsY
EzQXx+m98Spn+crga/G/RLAJ8ZRMFj4DHBmMFkxhlgHHsgEJTMYFk3UFlIttvnAj
ly898lgKmHZKkZZ0/aTZNhwMevGMHgZogsL4D+i1tdEn8VWwH+T8VNkxAhv7p0sk
5yAUhY1GWbAwMfYm6tZmEJkFg8teJDauiw2axSTtfHeMZAtVnpi9HSbRf6y/XUlF
5OC33YtX+zzmKIKxseocloC4UT8dgQlp9rWxWbqIgO1uNng5fdYxWXfFVJ6BVLGd
DB8g8jWmDNmjjbOX1wuqLH6+LKNfdSIUMQS5exxbhS1O0Mh4mIlsopx5jEPIE3G2
zCOoUYxzSrOGoQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:41 2026 by rpki-client