Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
File: ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json)
Hash identifier: B62gmW4JY1i9AVOmTiod5ECyO4k3htMt/VLQpIIKeio=
Subject key identifier: 95:08:0D:28:83:9E:F7:20:CB:DD:80:5E:5C:F8:0C:E2:4A:7F:DD:9D
Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
Certificate issuer: /CN=b9f4779575cb9bf058243287e98234deca911fc9
Certificate serial: 019D359ADE26B4BE29619ADD5D09DF077987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
Manifest number: 1607
Signing time: Sat 28 Mar 2026 18:00:34 +0000
Manifest this update: Sat 28 Mar 2026 18:00:34 +0000
Manifest next update: Sun 29 Mar 2026 18:00:34 +0000
Files and hashes: 1: hnzPcfA-WTbRE5DU83lcya93NtI.roa (hash: eJY1ydfJH0OH+/eaUrXt46LOHtMoo4DttqnkB8iWeQI=)
2: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: hZgN7xpTKelcFML2R0fBi1pQkdZIw/qfiIeO0c1L3n4=)
3: w8eGCjiWGTOI4FkMUZbb3XQCOIc.roa (hash: Euc8vUvtSSRVkYtTGIk9H6z9LA8UdTND/KFcVeS4Zo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:9a:de:26:b4:be:29:61:9a:dd:5d:09:df:07:79:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9
Validity
Not Before: Mar 28 18:00:34 2026 GMT
Not After : Mar 29 18:00:34 2026 GMT
Subject: CN=95080d28839ef720cbdd805e5cf80ce24a7fdd9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:29:13:49:dc:ae:57:72:26:6c:90:51:45:
f8:07:ef:e2:c4:93:6a:38:6c:6a:f5:d3:a6:0f:ad:
c2:5e:0f:47:2a:fe:aa:71:e3:29:7c:32:86:11:33:
1b:8b:90:d4:be:eb:64:c6:4a:05:c6:55:7d:84:70:
b0:16:a4:9b:3a:1c:3d:22:98:61:87:88:67:e4:53:
fc:6d:57:23:13:e6:fb:c7:9d:49:39:16:64:c1:8b:
11:79:93:9b:37:d8:2c:cb:39:63:36:1f:42:68:b2:
30:56:e3:c5:71:67:2d:8e:66:3a:6b:f7:dd:85:5f:
ed:4e:3e:8f:21:d9:9d:a2:56:87:0f:c9:29:7c:b1:
51:6f:89:ac:e5:13:56:d5:86:a1:ce:c9:f5:5e:65:
d5:54:0a:76:0f:a2:b8:80:ea:8b:94:8b:6e:57:32:
db:dd:90:b9:f0:90:3c:79:e1:b4:10:57:05:2a:7b:
e7:98:40:88:91:25:12:48:fa:9a:98:e6:4e:a9:fe:
43:9d:2a:6c:ad:a4:37:f8:b2:c0:b0:8d:8c:24:db:
70:cc:dc:b1:eb:39:fb:c7:1e:7f:ea:27:be:b9:cb:
98:f8:c0:5b:61:fd:51:e0:33:75:f8:b9:c4:49:6f:
97:a4:57:1f:83:8b:85:51:f9:c5:ee:78:0a:e9:70:
d4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:08:0D:28:83:9E:F7:20:CB:DD:80:5E:5C:F8:0C:E2:4A:7F:DD:9D
X509v3 Authority Key Identifier:
keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:71:c0:78:c3:f1:f2:d7:3f:c7:ba:77:88:29:6c:d4:b9:17:
16:b7:68:d7:62:f2:85:53:13:c6:87:07:0d:46:2a:bd:b8:a8:
9b:08:51:4d:c8:7d:67:6e:02:34:b7:56:64:75:53:bb:9f:c7:
9e:8e:ff:58:49:38:02:b2:9b:8a:32:65:ce:0d:02:cd:7f:f1:
7d:bc:5a:94:88:f5:1f:6c:7f:e5:20:42:a2:64:22:8d:62:7a:
9e:fe:4b:a4:03:c9:b1:f2:28:ff:ae:d2:cb:55:62:1e:43:d2:
77:aa:ff:89:f1:62:bf:f9:2c:42:e2:4b:a3:37:bb:ba:d8:3a:
3a:59:c0:3c:00:1a:b8:eb:9d:57:05:c0:b8:cf:41:7b:78:57:
ca:3c:63:21:83:ad:22:05:96:f3:01:80:a7:a8:8b:7d:df:54:
22:6a:8b:51:1c:bd:cf:6d:9e:60:75:e1:24:92:d4:2b:1e:27:
fb:a8:d6:51:d4:44:a2:aa:8d:91:dc:71:26:00:b2:45:f0:fc:
15:c6:b7:c9:89:21:be:66:cc:96:70:0d:b3:25:5d:3e:84:94:
8c:b4:10:6d:d0:c7:0e:6f:77:e5:bc:95:5c:b0:cd:89:75:cc:
ca:4c:b0:4f:98:c2:40:fd:1f:7a:07:65:19:c0:8a:87:88:9b:
27:59:5e:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ01mt4mtL4pYZrdXQnfB3mHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZjQ3Nzk1NzVjYjliZjA1ODI0MzI4N2U5ODIzNGRlY2E5
MTFmYzkwHhcNMjYwMzI4MTgwMDM0WhcNMjYwMzI5MTgwMDM0WjAzMTEwLwYDVQQD
Eyg5NTA4MGQyODgzOWVmNzIwY2JkZDgwNWU1Y2Y4MGNlMjRhN2ZkZDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy8pE0ncrldyJmyQUUX4B+/ixJNq
OGxq9dOmD63CXg9HKv6qceMpfDKGETMbi5DUvutkxkoFxlV9hHCwFqSbOhw9Iphh
h4hn5FP8bVcjE+b7x51JORZkwYsReZObN9gsyzljNh9CaLIwVuPFcWctjmY6a/fd
hV/tTj6PIdmdolaHD8kpfLFRb4ms5RNW1Yahzsn1XmXVVAp2D6K4gOqLlItuVzLb
3ZC58JA8eeG0EFcFKnvnmECIkSUSSPqamOZOqf5DnSpsraQ3+LLAsI2MJNtwzNyx
6zn7xx5/6ie+ucuY+MBbYf1R4DN1+LnESW+XpFcfg4uFUfnF7ngK6XDUGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUIDSiDnvcgy92AXlz4DOJKf92dMB8GA1UdIwQY
MBaAFLn0d5V1y5vwWCQyh+mCNN7KkR/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWZSM2xYWExtX0JZSkRLSDZZSTAzc3FSSDhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mNmQyZGQtMDNhNy00ZjFmLWI4OTAt
Y2Q5ZmYwNTUyZjkyLzEvdWZSM2xYWExtX0JZSkRLSDZZSTAzc3FSSDhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mNmQyZGQtMDNhNy00ZjFmLWI4OTAtY2Q5ZmYwNTUyZjky
LzEvdWZSM2xYWExtX0JZSkRLSDZZSTAzc3FSSDhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHHAeMPx
8tc/x7p3iCls1LkXFrdo12LyhVMTxocHDUYqvbiomwhRTch9Z24CNLdWZHVTu5/H
no7/WEk4ArKbijJlzg0CzX/xfbxalIj1H2x/5SBComQijWJ6nv5LpAPJsfIo/67S
y1ViHkPSd6r/ifFiv/ksQuJLoze7utg6OlnAPAAauOudVwXAuM9Be3hXyjxjIYOt
IgWW8wGAp6iLfd9UImqLURy9z22eYHXhJJLUKx4n+6jWUdREoqqNkdxxJgCyRfD8
Fca3yYkhvmbMlnANsyVdPoSUjLQQbdDHDm935byVXLDNiXXMykywT5jCQP0fegdl
GcCKh4ibJ1lezA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 20:09:42 2026 by rpki-client