Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json)
Hash identifier: 7DgxS6iqWXUIQKwBrlcAe9KdB6GfgRX8QDT4DK7tZLs=
Subject key identifier: A8:6D:1A:14:14:C3:20:C5:27:B3:E6:2E:DE:CB:39:5E:28:FF:1C:68
Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Certificate serial: 019EB6FBF9B007B144FCF4DD44E4B271E63F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
Manifest number: 109A
Signing time: Thu 11 Jun 2026 14:00:27 +0000
Manifest this update: Thu 11 Jun 2026 14:00:27 +0000
Manifest next update: Fri 12 Jun 2026 14:00:27 +0000
Files and hashes: 1: 1-hqgVSQBF_UvAinXCtYpxtppbVY.roa (hash: MeKegUTuGCWzFw8KT6nzeyZf5iVq1ADUyVCv+0PDLZ0=)
2: RgWpzavVVfS1b_1UHTxSsoDVFDI.roa (hash: eoIqVrp2QP0CPLWKfdOhEUrB73wKmzs7Euo9X382JX8=)
3: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: 1HbQJz3PK39371EQIOzQC4ljGpIIg5R+h5K+a8a6oHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fb:f9:b0:07:b1:44:fc:f4:dd:44:e4:b2:71:e6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Validity
Not Before: Jun 11 14:00:27 2026 GMT
Not After : Jun 12 14:00:27 2026 GMT
Subject: CN=a86d1a1414c320c527b3e62edecb395e28ff1c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:f4:d1:ce:6d:f9:a5:8e:65:67:5b:8e:86:
d9:9a:a4:4a:d7:b3:03:4c:ec:55:9e:d4:c6:d4:30:
3c:08:62:69:4e:05:55:93:8a:4b:6b:75:c5:b5:f0:
19:93:a8:60:e5:75:82:95:c9:72:50:b6:5f:52:71:
9a:b2:fa:26:aa:52:c3:55:e1:84:3f:bd:ec:4f:d5:
2d:5b:97:31:9d:fe:f1:59:fe:3f:73:b3:cb:6f:ee:
63:f5:09:09:44:78:3c:bf:3a:87:f7:88:da:9e:65:
03:da:da:4e:3a:34:2b:61:11:d4:6a:17:c6:1c:fd:
bb:84:cf:2b:4a:79:68:07:c4:e5:09:98:50:d4:b2:
c9:9e:1a:2c:64:b1:35:ed:d4:65:6e:51:3f:af:73:
66:11:4e:b2:be:9e:e2:5b:bc:0e:3b:c5:77:59:03:
b1:85:1e:9e:78:c6:a6:72:12:fc:bc:1e:2f:78:03:
f4:f4:7e:11:76:01:6a:6c:bf:b4:b4:e2:e1:01:39:
ba:78:1c:41:89:49:e8:ab:20:67:24:fc:b9:a9:1a:
4f:e1:32:b0:6e:dc:80:df:da:09:ca:24:e7:93:35:
67:fb:2b:32:12:79:03:32:87:d7:a0:d5:5b:51:f9:
e2:96:90:3d:25:d0:0f:d3:44:f4:f6:5f:3c:41:4f:
da:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6D:1A:14:14:C3:20:C5:27:B3:E6:2E:DE:CB:39:5E:28:FF:1C:68
X509v3 Authority Key Identifier:
keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2a:c5:c7:f2:5a:3d:ed:80:58:72:6f:ba:f6:c9:c1:29:5d:
2d:17:34:49:22:07:db:83:2d:6b:29:a6:00:46:da:82:6f:aa:
90:57:aa:c8:b0:16:5e:cf:cd:44:96:a2:f9:e0:13:48:59:37:
3c:60:17:4e:fa:af:35:a2:5e:b3:9a:9b:8e:e1:8a:02:ff:a9:
53:85:52:04:d3:6e:f5:3b:b3:d1:8d:2e:e0:9b:fa:41:0b:9c:
35:35:3f:0f:e4:c0:b8:a0:e0:a7:b2:cd:03:7b:93:43:89:7e:
22:b9:d2:06:0d:6f:3f:f9:80:05:99:b2:b3:03:cf:c9:b0:8b:
ca:35:db:d0:fe:e2:b7:6b:37:7c:08:5f:ea:25:ae:ea:b8:a6:
e1:f4:c3:af:bc:f4:6e:8d:5f:a8:b0:36:04:72:b5:cf:33:f6:
e9:56:e4:32:a6:3d:60:52:b1:9e:d3:60:20:9b:70:d8:4f:1c:
1f:2e:dc:39:f6:7c:d7:57:ca:79:47:b6:f7:23:26:ce:89:f3:
a6:ef:09:9e:6f:a3:b2:1a:57:8b:e6:3c:e8:cb:33:79:15:83:
92:f3:38:39:2a:0f:1e:47:ae:50:62:10:dc:ea:d5:39:e1:2f:
94:89:59:43:6c:ad:b8:86:64:66:7c:44:9f:5d:8c:89:29:60:
25:ed:d6:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62+/mwB7FE/PTdROSyceY/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhODM4ZjFjYThiZGNkODFjMDRiNmI2NzhlNzliZTYxNGU1
MWIxMTEwHhcNMjYwNjExMTQwMDI3WhcNMjYwNjEyMTQwMDI3WjAzMTEwLwYDVQQD
EyhhODZkMWExNDE0YzMyMGM1MjdiM2U2MmVkZWNiMzk1ZTI4ZmYxYzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTP00c5t+aWOZWdbjobZmqRK17MD
TOxVntTG1DA8CGJpTgVVk4pLa3XFtfAZk6hg5XWClclyULZfUnGasvomqlLDVeGE
P73sT9UtW5cxnf7xWf4/c7PLb+5j9QkJRHg8vzqH94janmUD2tpOOjQrYRHUahfG
HP27hM8rSnloB8TlCZhQ1LLJnhosZLE17dRlblE/r3NmEU6yvp7iW7wOO8V3WQOx
hR6eeMamchL8vB4veAP09H4RdgFqbL+0tOLhATm6eBxBiUnoqyBnJPy5qRpP4TKw
btyA39oJyiTnkzVn+ysyEnkDMofXoNVbUfnilpA9JdAP00T09l88QU/acwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhtGhQUwyDFJ7PmLt7LOV4o/xxoMB8GA1UdIwQY
MBaAFLqDjxyovc2BwEtrZ455vmFOUbERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kYjRlODgtZTU4ZC00MzQ1LTgwYzct
MDkzZWI5YTlhYThiLzEvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9kYjRlODgtZTU4ZC00MzQ1LTgwYzctMDkzZWI5YTlhYThi
LzEvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJirFx/Ja
Pe2AWHJvuvbJwSldLRc0SSIH24MtaymmAEbagm+qkFeqyLAWXs/NRJai+eATSFk3
PGAXTvqvNaJes5qbjuGKAv+pU4VSBNNu9Tuz0Y0u4Jv6QQucNTU/D+TAuKDgp7LN
A3uTQ4l+IrnSBg1vP/mABZmyswPPybCLyjXb0P7it2s3fAhf6iWu6rim4fTDr7z0
bo1fqLA2BHK1zzP26VbkMqY9YFKxntNgIJtw2E8cHy7cOfZ811fKeUe29yMmzonz
pu8Jnm+jshpXi+Y86MszeRWDkvM4OSoPHkeuUGIQ3OrVOeEvlIlZQ2ytuIZkZnxE
n12MiSlgJe3W/w==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:59:06 2026 by rpki-client