Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
File: u3mEej_o5ceIRAJ8yvC9bp2kYko.mft (raw, json)
Hash identifier: O1cncekd0EppLNlwcQ7c/+HiMv5uUxXhcTwQw6S27sE=
Subject key identifier: 4F:2F:69:55:13:52:08:4B:82:7D:BA:76:A4:25:19:EA:25:B6:0E:26
Authority key identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
Certificate issuer: /CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Certificate serial: 019D37F71976BA31C53B6A4F96232FE9B449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
Manifest number: 0EAB
Signing time: Sun 29 Mar 2026 05:00:33 +0000
Manifest this update: Sun 29 Mar 2026 05:00:33 +0000
Manifest next update: Mon 30 Mar 2026 05:00:33 +0000
Files and hashes: 1: pcCJjdQXi7xfdCba21j2NH3xu1Y.roa (hash: NOqBLfQG0mcgz0tuCwwojXFzz2Q4UDo87fBXDInfSTU=)
2: sCJxKM5JVsRAzO-99cuhJnlis-M.roa (hash: GbbbYVn9hdqho7aCoddaLij3Hl3ONgVgTqQXELautrU=)
3: u3mEej_o5ceIRAJ8yvC9bp2kYko.crl (hash: CDwJdh62wukmL4Pj7C/SKpaodQOXRD3k2MsBCMea+ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:19:76:ba:31:c5:3b:6a:4f:96:23:2f:e9:b4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Validity
Not Before: Mar 29 05:00:33 2026 GMT
Not After : Mar 30 05:00:33 2026 GMT
Subject: CN=4f2f69551352084b827dba76a42519ea25b60e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c4:fe:34:26:14:1d:70:af:0c:ba:69:4a:78:
e0:c2:c0:34:a1:86:bc:25:67:e4:be:fb:de:e7:15:
9d:49:ea:ef:45:b7:f5:6f:9f:d5:cd:eb:f8:91:cf:
86:11:0c:d8:a3:39:d3:d5:58:98:31:b1:1a:90:b1:
1a:af:0b:52:18:22:12:0e:34:6e:aa:40:81:b2:cc:
6a:07:ae:a7:69:45:bd:15:6a:87:00:54:a9:0c:9f:
e4:42:de:1c:f6:86:a2:69:ce:dd:dd:d6:e4:ff:1c:
5b:7b:53:35:78:72:50:ae:0f:23:05:3f:52:35:54:
28:68:55:75:8d:bb:74:32:8f:80:aa:f7:6b:2a:61:
17:b5:74:7f:49:13:7a:6e:59:cf:55:b9:b1:8b:0f:
c7:73:a4:7f:c5:7b:51:86:e0:80:c9:b4:22:d0:69:
10:82:c3:a0:1d:b5:4f:26:94:9f:1b:13:d5:38:f4:
28:0d:2e:66:95:7c:ed:58:32:b1:24:61:d0:00:1f:
ba:bf:21:e3:3c:1d:6b:b0:bd:68:97:96:c4:1a:87:
b1:7c:ca:2e:e2:8a:a7:20:8b:43:87:d5:19:70:a2:
c1:03:73:fe:9a:2a:82:7f:73:6a:9f:35:cf:5e:03:
1f:3e:c8:c1:38:4e:90:fe:e9:fc:31:db:e3:ba:0c:
b8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2F:69:55:13:52:08:4B:82:7D:BA:76:A4:25:19:EA:25:B6:0E:26
X509v3 Authority Key Identifier:
keyid:BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c3:ce:d1:dc:4b:67:a6:c7:80:73:0c:58:4d:a2:21:33:26:
85:a0:8a:60:02:93:98:bb:fe:87:6c:fe:af:ed:ce:20:02:57:
6e:4c:13:05:80:7e:b8:73:16:f6:da:76:2a:76:5e:20:36:a4:
f4:0e:28:57:55:82:de:d7:02:10:aa:d5:1e:a3:66:3c:72:ff:
28:a5:81:0e:dc:dc:fe:35:75:a4:2e:4c:02:2f:be:c7:1b:3b:
85:08:86:53:db:8f:93:f0:ea:0c:e9:1c:3f:f7:e1:79:b6:30:
ef:a5:83:10:9a:0b:30:0b:f4:92:14:32:78:00:90:23:34:1f:
8e:1f:0f:e9:ea:6c:6f:67:e0:8f:f0:c0:9b:2f:1d:ea:be:da:
c6:60:63:77:1a:2a:90:09:18:73:c3:1a:c1:a3:de:08:2f:33:
58:37:93:c3:70:ac:a8:b8:3f:d8:dd:64:35:20:30:f7:34:6d:
c9:c3:59:03:08:ba:99:ea:d9:a9:b3:f8:cf:b4:b5:08:4d:db:
2d:30:ba:67:ae:95:b3:4a:d5:6d:b0:3b:b7:c6:2d:c6:75:28:
ec:ef:a1:e5:90:0f:21:1a:c9:14:95:f2:d6:c2:3e:72:1c:be:
32:1d:dd:f2:0a:1e:8c:7c:1d:32:d4:09:90:a7:b6:6d:fc:4f:
16:e9:32:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039xl2ujHFO2pPliMv6bRJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNzk4NDdhM2ZlOGU1Yzc4ODQ0MDI3Y2NhZjBiZDZlOWRh
NDYyNGEwHhcNMjYwMzI5MDUwMDMzWhcNMjYwMzMwMDUwMDMzWjAzMTEwLwYDVQQD
Eyg0ZjJmNjk1NTEzNTIwODRiODI3ZGJhNzZhNDI1MTllYTI1YjYwZTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMT+NCYUHXCvDLppSnjgwsA0oYa8
JWfkvvve5xWdServRbf1b5/Vzev4kc+GEQzYoznT1ViYMbEakLEarwtSGCISDjRu
qkCBssxqB66naUW9FWqHAFSpDJ/kQt4c9oaiac7d3dbk/xxbe1M1eHJQrg8jBT9S
NVQoaFV1jbt0Mo+AqvdrKmEXtXR/SRN6blnPVbmxiw/Hc6R/xXtRhuCAybQi0GkQ
gsOgHbVPJpSfGxPVOPQoDS5mlXztWDKxJGHQAB+6vyHjPB1rsL1ol5bEGoexfMou
4oqnIItDh9UZcKLBA3P+miqCf3NqnzXPXgMfPsjBOE6Q/un8Mdvjugy4ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8vaVUTUghLgn26dqQlGeoltg4mMB8GA1UdIwQY
MBaAFLt5hHo/6OXHiEQCfMrwvW6dpGJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTNtRWVqX281Y2VJUkFKOHl2QzlicDJrWWtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80NWNjOWYtNjQzMi00MWM3LWI2MmQt
MTBlNDBjNTg2NDk4LzEvdTNtRWVqX281Y2VJUkFKOHl2QzlicDJrWWtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My80NWNjOWYtNjQzMi00MWM3LWI2MmQtMTBlNDBjNTg2NDk4
LzEvdTNtRWVqX281Y2VJUkFKOHl2QzlicDJrWWtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8PO0dxL
Z6bHgHMMWE2iITMmhaCKYAKTmLv+h2z+r+3OIAJXbkwTBYB+uHMW9tp2KnZeIDak
9A4oV1WC3tcCEKrVHqNmPHL/KKWBDtzc/jV1pC5MAi++xxs7hQiGU9uPk/DqDOkc
P/fhebYw76WDEJoLMAv0khQyeACQIzQfjh8P6epsb2fgj/DAmy8d6r7axmBjdxoq
kAkYc8MawaPeCC8zWDeTw3CsqLg/2N1kNSAw9zRtycNZAwi6merZqbP4z7S1CE3b
LTC6Z66Vs0rVbbA7t8YtxnUo7O+h5ZAPIRrJFJXy1sI+chy+Mh3d8goejHwdMtQJ
kKe2bfxPFukyyQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:56 2026 by rpki-client