Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
File: ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft (raw, json)
Hash identifier: eTUF3q4wlD4rWSiY0HIbzDAz0TV6QBdsYy4Og60ESjg=
Subject key identifier: 07:BE:B2:58:A0:B6:A5:0A:26:97:61:FD:C2:36:DC:69:B3:33:FE:FE
Authority key identifier: BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
Certificate issuer: /CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Certificate serial: 019E2881BCFDCB2212E356A41C122D972754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
Manifest number: 0F89
Signing time: Thu 14 May 2026 22:00:51 +0000
Manifest this update: Thu 14 May 2026 22:00:51 +0000
Manifest next update: Fri 15 May 2026 22:00:51 +0000
Files and hashes: 1: kCLH7SXCIPIUGs3qdbeDdnL8Wpo.roa (hash: 5aG03E0waW0vZXu+Aw8pqhSKzIZ48IES/FsMx7tVVjA=)
2: ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl (hash: 6A1JLkeiY4m4dIgEAKKvAqqBdXUycO7ab7EvqiqzJCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:81:bc:fd:cb:22:12:e3:56:a4:1c:12:2d:97:27:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Validity
Not Before: May 14 22:00:51 2026 GMT
Not After : May 15 22:00:51 2026 GMT
Subject: CN=07beb258a0b6a50a269761fdc236dc69b333fefe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:15:dd:5d:a5:97:3c:e5:83:98:53:d9:af:
42:0f:74:9e:65:5f:99:9d:49:ab:36:53:1b:6e:31:
02:03:c4:bd:4a:b9:37:98:78:c8:46:a2:fd:3d:24:
17:ab:00:94:fd:a0:49:5e:cc:2f:34:26:b5:d5:92:
ac:50:9a:37:dc:e4:d9:11:c5:1a:c6:e1:50:49:d3:
39:b9:4a:4a:50:37:fa:63:00:37:6e:3a:0b:cb:3f:
47:ed:6b:48:b5:6e:b2:41:1a:b8:ad:0d:75:c8:c0:
d3:8d:e0:ea:55:9d:5f:0e:d3:d3:35:10:5b:84:78:
a6:53:b4:c8:29:96:7e:5b:cb:88:f4:c0:b8:6c:df:
cc:5b:3d:f5:af:a4:01:6d:d5:ad:46:e0:d0:b1:74:
b8:0f:e5:28:3d:36:15:d7:ba:03:51:6c:28:64:16:
eb:bb:1d:81:c2:7a:e5:ab:11:76:cf:0d:48:3d:08:
5b:5a:52:bc:88:4a:49:a1:78:7f:fc:1d:fc:ae:2e:
e2:92:45:e8:78:e8:fc:da:04:ab:f5:07:6b:20:04:
83:cc:79:be:e4:e0:20:f7:38:d4:8e:13:f1:af:05:
c1:4e:7d:14:1a:9f:dc:51:09:53:97:f8:08:36:9c:
b9:b8:9b:14:ee:90:c3:fe:06:b5:7a:7c:fe:48:84:
b5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BE:B2:58:A0:B6:A5:0A:26:97:61:FD:C2:36:DC:69:B3:33:FE:FE
X509v3 Authority Key Identifier:
keyid:BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:75:f8:73:0b:a1:63:7a:61:bd:84:38:f4:36:49:f7:26:0c:
b1:d3:cc:9d:34:43:9b:14:1d:41:35:aa:58:31:9a:b3:81:7a:
da:b9:5f:21:be:38:1c:69:b5:78:30:bf:de:74:0a:aa:10:db:
1e:81:05:dd:93:a5:a6:a0:60:7c:7b:26:40:4a:e6:a0:4b:e6:
f5:57:5e:b0:b0:3b:0d:2c:3f:f1:bb:0c:2e:4c:0d:41:36:38:
61:7d:86:22:48:a9:ba:c2:37:cb:18:94:57:5c:23:2c:f4:e4:
63:25:f3:5a:a8:8b:cf:e6:d8:5d:71:36:14:63:ad:f8:67:5c:
61:2c:b4:6f:15:36:0a:21:32:8e:ba:eb:eb:e8:84:1f:ad:d3:
61:e5:7d:8a:8e:32:11:e4:8a:c5:b1:a3:a3:b0:73:eb:33:88:
f3:2b:7a:09:c0:0c:cd:2d:c6:25:fa:26:d6:07:ce:02:b3:9a:
af:8f:1e:a1:de:97:27:02:16:93:d1:a3:96:e0:cd:94:54:d6:
b2:d5:bf:eb:ca:db:8e:0c:f1:48:a1:49:1a:8c:13:6c:dc:2a:
fd:16:df:6b:78:74:d7:77:4f:bf:87:6e:e8:3d:48:74:c3:60:
85:9b:f1:c5:25:08:70:e0:8f:16:62:0b:17:6c:88:94:7b:f4:
86:cf:b1:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ogbz9yyIS41akHBItlydUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMmYxYTExZGUxOTBjODFjMGI3NzUyY2Y1MmI1Njk0MjVk
YzU0Y2IwHhcNMjYwNTE0MjIwMDUxWhcNMjYwNTE1MjIwMDUxWjAzMTEwLwYDVQQD
EygwN2JlYjI1OGEwYjZhNTBhMjY5NzYxZmRjMjM2ZGM2OWIzMzNmZWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr08V3V2llzzlg5hT2a9CD3SeZV+Z
nUmrNlMbbjECA8S9Srk3mHjIRqL9PSQXqwCU/aBJXswvNCa11ZKsUJo33OTZEcUa
xuFQSdM5uUpKUDf6YwA3bjoLyz9H7WtItW6yQRq4rQ11yMDTjeDqVZ1fDtPTNRBb
hHimU7TIKZZ+W8uI9MC4bN/MWz31r6QBbdWtRuDQsXS4D+UoPTYV17oDUWwoZBbr
ux2BwnrlqxF2zw1IPQhbWlK8iEpJoXh//B38ri7ikkXoeOj82gSr9QdrIASDzHm+
5OAg9zjUjhPxrwXBTn0UGp/cUQlTl/gINpy5uJsU7pDD/ga1enz+SIS1owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAe+sligtqUKJpdh/cI23GmzM/7+MB8GA1UdIwQY
MBaAFLovGhHeGQyBwLd1LPUrVpQl3FTLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWk4YUVkNFpESUhBdDNVczlTdFdsQ1hjVk1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mOTY1MzItZDdmZi00NTM4LWJjY2Qt
MmQzOGU3Nzc5MzQ4LzEvdWk4YUVkNFpESUhBdDNVczlTdFdsQ1hjVk1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9mOTY1MzItZDdmZi00NTM4LWJjY2QtMmQzOGU3Nzc5MzQ4
LzEvdWk4YUVkNFpESUhBdDNVczlTdFdsQ1hjVk1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHX4cwuh
Y3phvYQ49DZJ9yYMsdPMnTRDmxQdQTWqWDGas4F62rlfIb44HGm1eDC/3nQKqhDb
HoEF3ZOlpqBgfHsmQErmoEvm9VdesLA7DSw/8bsMLkwNQTY4YX2GIkipusI3yxiU
V1wjLPTkYyXzWqiLz+bYXXE2FGOt+GdcYSy0bxU2CiEyjrrr6+iEH63TYeV9io4y
EeSKxbGjo7Bz6zOI8yt6CcAMzS3GJfom1gfOArOar48eod6XJwIWk9GjluDNlFTW
stW/68rbjgzxSKFJGowTbNwq/Rbfa3h013dPv4du6D1IdMNghZvxxSUIcOCPFmIL
F2yIlHv0hs+xMA==
-----END CERTIFICATE-----
Generated at Fri May 15 06:56:04 2026 by rpki-client