Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
File: ufQO9_E-yaFW77DbOWCQvHXanUM.mft (raw, json)
Hash identifier: n2pOWdxbVIlcIITxWSDAqpx7NXoDWX6CfDKOebZsBP0=
Subject key identifier: B0:DC:88:29:97:45:91:03:57:FC:6A:3F:B7:0D:E5:26:23:89:AE:73
Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
Certificate issuer: /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Certificate serial: 019E3FE6059F4A1CA9CB9BCB02997522F1B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
Manifest number: 1918
Signing time: Tue 19 May 2026 11:01:39 +0000
Manifest this update: Tue 19 May 2026 11:01:39 +0000
Manifest next update: Wed 20 May 2026 11:01:39 +0000
Files and hashes: 1: bYWnNBJ88LbQXbWSQLO05IsIsMk.roa (hash: 8zUO33POztpiVvtW7T3x8U4nLE2YNCP2J0oxQWs2DYg=)
2: ufQO9_E-yaFW77DbOWCQvHXanUM.crl (hash: DNIAkkQVrmKligbh9/agBi0P0DcvEfAx2MpRQrAr6cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 20 May 2026 11:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:e6:05:9f:4a:1c:a9:cb:9b:cb:02:99:75:22:f1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Validity
Not Before: May 19 11:01:39 2026 GMT
Not After : May 20 11:01:39 2026 GMT
Subject: CN=b0dc88299745910357fc6a3fb70de5262389ae73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7e:17:d0:fc:12:77:e0:e6:79:64:db:4b:07:
f8:36:fc:7c:dd:47:1c:d5:a8:d3:90:76:32:9b:a4:
97:bb:19:5c:39:39:b7:43:9b:f9:e8:81:fb:0a:df:
99:e5:39:f4:28:a6:f2:f2:3f:21:59:73:d1:9f:26:
b1:69:1c:66:32:5a:5e:1c:fb:1c:f5:f4:ff:ef:31:
01:eb:51:d9:27:ce:aa:fa:06:c0:9c:45:81:85:d3:
87:10:dd:c2:e9:e6:70:92:f7:9c:2e:a6:c1:c3:f2:
cb:82:8d:40:6f:d0:96:c8:b1:6d:80:d7:6b:91:da:
8f:13:ae:03:0b:eb:53:52:49:98:89:29:d3:72:a2:
c1:5b:3b:3c:7a:2b:63:d4:60:c2:6a:3a:9c:2b:39:
39:b6:d7:25:52:d1:d3:18:09:e0:a8:de:8a:15:02:
99:74:2f:b8:1d:cc:a3:6c:c5:6e:1e:6c:b5:ae:0f:
87:99:f4:b7:79:7f:ae:7a:24:cb:34:8f:1e:60:03:
8d:c7:fd:46:f6:d1:6e:e9:ab:91:c3:f8:29:98:d9:
ad:58:37:63:49:71:1f:e0:c1:22:a6:40:3f:9f:5e:
9c:19:d7:a3:54:04:50:db:1f:ea:4c:cc:6a:18:24:
cf:ce:7c:29:b4:76:35:3b:44:a8:ef:e3:4f:1a:fa:
63:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DC:88:29:97:45:91:03:57:FC:6A:3F:B7:0D:E5:26:23:89:AE:73
X509v3 Authority Key Identifier:
keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:43:35:55:1f:13:59:94:5e:d2:a1:4a:fd:56:f9:c5:5e:e8:
25:05:84:58:b1:b8:0e:31:99:db:55:6e:0d:b0:5f:78:f3:88:
4c:6a:58:ee:14:ce:72:0a:5d:de:3a:37:ae:dc:f4:af:8f:48:
66:11:99:48:f0:41:50:99:75:19:1c:60:9e:b2:7e:79:fd:03:
43:f5:d6:cc:8e:5c:36:81:d6:ce:88:63:da:32:4f:75:b2:77:
16:7e:18:09:6b:e2:c5:c1:7b:1a:22:e0:f1:47:9e:7b:78:52:
3f:5a:dc:ea:05:7d:5c:21:e8:b0:6d:28:d1:f7:02:86:64:95:
cd:2f:fa:9e:cf:9e:e9:f6:a3:c9:2d:ec:f8:1c:2c:42:13:e9:
30:05:a0:a0:31:20:6b:cf:06:49:ec:55:21:8a:db:0b:d1:a6:
77:d8:80:2f:11:27:90:14:4e:d0:f8:f7:1b:ef:03:75:e9:5b:
86:de:b6:c9:b6:88:09:b4:3c:5c:6f:f3:aa:ff:38:1a:ca:34:
a0:e8:9c:13:fb:a5:99:fa:22:87:d4:8b:90:e3:3a:02:7c:d9:
89:9d:ed:23:c2:d8:b5:e2:6b:66:b4:02:7c:cf:49:0c:b1:2b:
5b:eb:37:69:fb:02:58:ef:58:d8:1f:ec:7b:c1:44:67:14:f8:
8a:44:eb:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4/5gWfShypy5vLApl1IvGxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZjQwZWY3ZjEzZWM5YTE1NmVmYjBkYjM5NjA5MGJjNzVk
YTlkNDMwHhcNMjYwNTE5MTEwMTM5WhcNMjYwNTIwMTEwMTM5WjAzMTEwLwYDVQQD
EyhiMGRjODgyOTk3NDU5MTAzNTdmYzZhM2ZiNzBkZTUyNjIzODlhZTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7X4X0PwSd+DmeWTbSwf4Nvx83Ucc
1ajTkHYym6SXuxlcOTm3Q5v56IH7Ct+Z5Tn0KKby8j8hWXPRnyaxaRxmMlpeHPsc
9fT/7zEB61HZJ86q+gbAnEWBhdOHEN3C6eZwkvecLqbBw/LLgo1Ab9CWyLFtgNdr
kdqPE64DC+tTUkmYiSnTcqLBWzs8eitj1GDCajqcKzk5ttclUtHTGAngqN6KFQKZ
dC+4HcyjbMVuHmy1rg+HmfS3eX+ueiTLNI8eYAONx/1G9tFu6auRw/gpmNmtWDdj
SXEf4MEipkA/n16cGdejVARQ2x/qTMxqGCTPznwptHY1O0So7+NPGvpjQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDciCmXRZEDV/xqP7cN5SYjia5zMB8GA1UdIwQY
MBaAFLn0DvfxPsmhVu+w2zlgkLx12p1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWZRTzlfRS15YUZXNzdEYk9XQ1F2SFhhblVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lNzcyNWQtNGMxNi00ODY3LThjNGQt
ZmM1NTkwY2I4ZjZiLzEvdWZRTzlfRS15YUZXNzdEYk9XQ1F2SFhhblVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9lNzcyNWQtNGMxNi00ODY3LThjNGQtZmM1NTkwY2I4ZjZi
LzEvdWZRTzlfRS15YUZXNzdEYk9XQ1F2SFhhblVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0M1VR8T
WZRe0qFK/Vb5xV7oJQWEWLG4DjGZ21VuDbBfePOITGpY7hTOcgpd3jo3rtz0r49I
ZhGZSPBBUJl1GRxgnrJ+ef0DQ/XWzI5cNoHWzohj2jJPdbJ3Fn4YCWvixcF7GiLg
8Ueee3hSP1rc6gV9XCHosG0o0fcChmSVzS/6ns+e6fajyS3s+BwsQhPpMAWgoDEg
a88GSexVIYrbC9Gmd9iALxEnkBRO0Pj3G+8Ddelbht62ybaICbQ8XG/zqv84Gso0
oOicE/ulmfoih9SLkOM6AnzZiZ3tI8LYteJrZrQCfM9JDLErW+s3afsCWO9Y2B/s
e8FEZxT4ikTrlw==
-----END CERTIFICATE-----
Generated at Tue May 19 15:45:42 2026 by rpki-client