Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
File: u9zIw3chdOR7rIuTLlvse0ex2Ss.mft (raw, json)
Hash identifier: 33tdOC8wWIq18Eq25HHz94XJVnnu2Ixva1MPr8oF01g=
Subject key identifier: 14:ED:07:75:5F:A4:2C:24:45:99:B9:51:6F:CE:5A:6F:DA:70:F7:25
Authority key identifier: BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
Certificate issuer: /CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Certificate serial: 019D37F76225D39B693BDB54E8BDC767851D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:00:52 +0000
Manifest this update: Sun 29 Mar 2026 05:00:52 +0000
Manifest next update: Mon 30 Mar 2026 05:00:52 +0000
Files and hashes: 1: NyhSyCMRoKdRBo6gGVT4BydPhUU.roa (hash: hrd0GvTI0bFLstLvooU+LJ8QrF+EDu6C0hrzcyyARCs=)
2: u9zIw3chdOR7rIuTLlvse0ex2Ss.crl (hash: Wi7lwFDiPoLlI7+J9YbLJTKQavnbcJj1vpIWrH9a4M8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:62:25:d3:9b:69:3b:db:54:e8:bd:c7:67:85:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Validity
Not Before: Mar 29 05:00:52 2026 GMT
Not After : Mar 30 05:00:52 2026 GMT
Subject: CN=14ed07755fa42c244599b9516fce5a6fda70f725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b0:7c:25:2d:60:64:56:72:f6:51:fc:0b:bf:
ad:7b:4e:43:88:f9:04:62:96:eb:76:82:38:c9:1e:
7a:4d:0f:02:ca:56:29:b8:23:d5:ad:77:dd:7c:a7:
6f:1d:72:66:33:d1:50:06:c2:c6:b8:62:ce:1d:b6:
5f:5c:fc:23:dd:c8:06:93:dd:ca:a1:44:d3:65:85:
4d:70:32:73:28:96:80:70:c2:80:a7:8a:23:1b:69:
fc:f9:0a:3a:95:20:c6:6b:21:43:d6:4a:1c:ee:a2:
73:a7:b0:db:45:30:a9:1f:4b:f9:54:98:f6:f5:0e:
20:06:50:29:c6:54:e4:8b:7f:34:95:e6:b4:e2:23:
c2:fa:53:79:b5:91:04:31:3c:75:95:da:30:08:66:
72:ed:90:f7:c0:7d:c8:9c:9c:0c:28:3e:54:c2:58:
86:76:5b:05:1d:cd:a5:b3:be:c8:b3:d6:73:0f:33:
d8:e1:13:a8:16:69:65:b3:9d:17:5d:54:9e:27:a2:
fe:97:b5:dd:9d:a4:6a:ea:8c:9e:b4:d1:a4:b3:c6:
99:26:e9:75:72:ee:03:30:74:60:53:32:d1:54:a3:
5b:d5:d5:25:9b:fd:1f:d4:7f:34:f7:ef:cd:af:f8:
39:30:46:9f:b2:a3:ed:f6:c4:de:64:05:c4:3d:10:
47:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:ED:07:75:5F:A4:2C:24:45:99:B9:51:6F:CE:5A:6F:DA:70:F7:25
X509v3 Authority Key Identifier:
keyid:BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:84:55:ca:07:f8:b3:64:1a:72:c9:f6:de:34:87:60:97:45:
d1:78:66:22:7e:28:af:66:36:3f:e4:b7:8f:a4:ee:39:e1:17:
e2:ce:78:fc:61:11:d6:80:b9:0d:7b:84:81:95:5b:75:d7:f8:
75:b0:b6:d5:6d:5d:72:6a:8e:21:2d:7a:7c:06:77:ab:46:17:
4f:1f:b1:0a:b5:46:01:85:15:f7:6e:a1:33:44:7f:aa:9f:37:
9a:63:68:ef:91:1b:b1:22:2f:39:16:f7:db:ba:83:42:3d:5f:
e5:09:6f:d7:3e:ee:25:1f:17:c3:61:65:79:16:18:c2:e6:67:
e1:06:9b:c4:9d:ee:fb:77:34:f6:9d:e2:b6:50:ab:27:46:94:
da:95:76:b2:d8:6e:b7:2e:e1:eb:e8:e6:6d:a9:39:e9:14:ed:
8b:21:3f:6e:ef:f7:bd:18:5a:1b:a7:f7:42:ed:16:97:8c:a1:
c6:e1:7b:de:02:40:1b:19:84:82:f8:61:1a:a2:9c:d7:03:93:
0a:ae:fe:e4:a5:a9:b3:14:97:48:af:f3:f7:b7:09:83:b0:60:
31:9c:cb:c6:c3:1a:a3:da:ac:71:00:dd:4a:27:96:f8:d2:e1:
d9:55:5c:95:b7:f3:40:92:32:d3:86:ee:3b:a2:96:02:67:b4:
16:3a:d2:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0392Il05tpO9tU6L3HZ4UdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZGNjOGMzNzcyMTc0ZTQ3YmFjOGI5MzJlNWJlYzdiNDdi
MWQ5MmIwHhcNMjYwMzI5MDUwMDUyWhcNMjYwMzMwMDUwMDUyWjAzMTEwLwYDVQQD
EygxNGVkMDc3NTVmYTQyYzI0NDU5OWI5NTE2ZmNlNWE2ZmRhNzBmNzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LB8JS1gZFZy9lH8C7+te05DiPkE
YpbrdoI4yR56TQ8CylYpuCPVrXfdfKdvHXJmM9FQBsLGuGLOHbZfXPwj3cgGk93K
oUTTZYVNcDJzKJaAcMKAp4ojG2n8+Qo6lSDGayFD1koc7qJzp7DbRTCpH0v5VJj2
9Q4gBlApxlTki380lea04iPC+lN5tZEEMTx1ldowCGZy7ZD3wH3InJwMKD5UwliG
dlsFHc2ls77Is9ZzDzPY4ROoFmlls50XXVSeJ6L+l7XdnaRq6oyetNGks8aZJul1
cu4DMHRgUzLRVKNb1dUlm/0f1H809+/Nr/g5MEafsqPt9sTeZAXEPRBHyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTtB3VfpCwkRZm5UW/OWm/acPclMB8GA1UdIwQY
MBaAFLvcyMN3IXTke6yLky5b7HtHsdkrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTl6SXczY2hkT1I3ckl1VExsdnNlMGV4MlNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iNjJjMzMtY2M5Yy00YmFmLWEwZWUt
ZWQxNDJlNDY0MzM1LzEvdTl6SXczY2hkT1I3ckl1VExsdnNlMGV4MlNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iNjJjMzMtY2M5Yy00YmFmLWEwZWUtZWQxNDJlNDY0MzM1
LzEvdTl6SXczY2hkT1I3ckl1VExsdnNlMGV4MlNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIRVygf4
s2Qacsn23jSHYJdF0XhmIn4or2Y2P+S3j6TuOeEX4s54/GER1oC5DXuEgZVbddf4
dbC21W1dcmqOIS16fAZ3q0YXTx+xCrVGAYUV926hM0R/qp83mmNo75EbsSIvORb3
27qDQj1f5Qlv1z7uJR8Xw2FleRYYwuZn4QabxJ3u+3c09p3itlCrJ0aU2pV2sthu
ty7h6+jmbak56RTtiyE/bu/3vRhaG6f3Qu0Wl4yhxuF73gJAGxmEgvhhGqKc1wOT
Cq7+5KWpsxSXSK/z97cJg7BgMZzLxsMao9qscQDdSieW+NLh2VVclbfzQJIy04bu
O6KWAme0FjrSAA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:52:27 2026 by rpki-client