Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
File: u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft (raw, json)
Hash identifier: WkuAW6okFowGhGo7KybzS0eW4Szi2cjr2WaWMJptpeM=
Subject key identifier: 2F:66:65:6D:E0:AA:43:C9:4A:69:8D:4C:30:BB:6A:70:DE:32:25:CF
Authority key identifier: BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
Certificate issuer: /CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Certificate serial: 019D386644A67A307249BC31AE7060923047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
Manifest number: 066A
Signing time: Sun 29 Mar 2026 07:01:59 +0000
Manifest this update: Sun 29 Mar 2026 07:01:59 +0000
Manifest next update: Mon 30 Mar 2026 07:01:59 +0000
Files and hashes: 1: 8YcVP3VklLR5i4GG8rnBQdHA76g.roa (hash: WsvT6kIFgDTr5dW65eaLGj20QeNg4nV6eveWdjaSMx0=)
2: u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl (hash: ScYPqqN/UsofT6tQSglfXoj4DCaSqR2nfVuTOtUk/7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:44:a6:7a:30:72:49:bc:31:ae:70:60:92:30:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Validity
Not Before: Mar 29 07:01:59 2026 GMT
Not After : Mar 30 07:01:59 2026 GMT
Subject: CN=2f66656de0aa43c94a698d4c30bb6a70de3225cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2e:a5:e7:b4:8d:7c:c1:16:66:58:fc:25:6d:
a1:54:c1:db:ea:eb:81:77:42:b9:d8:22:4b:92:ec:
36:94:7b:5a:e9:74:46:c5:21:e4:85:76:17:6a:d1:
96:74:1f:67:9f:f7:49:5d:16:8f:4c:74:8e:5e:a4:
10:dc:5a:85:aa:ac:4e:d1:e7:bb:28:4e:23:d4:8c:
32:77:f4:b1:af:57:1d:75:bd:39:76:25:ba:ee:41:
9f:a6:22:8f:fb:02:69:01:ec:56:61:8a:07:68:4a:
3c:e8:d1:00:f6:42:43:d3:18:3d:f1:91:4f:f7:43:
62:19:d5:65:25:76:6c:04:0b:f0:6e:e5:b4:b4:aa:
6f:ba:98:ec:af:4a:ae:4e:11:0d:39:74:89:9f:e1:
37:a9:8b:7e:fe:26:9b:75:f8:79:18:51:cd:c4:5c:
f7:67:df:d8:2e:40:b6:07:7b:53:bb:4c:f9:f1:e6:
a5:43:84:11:00:ff:0c:15:ee:f1:58:6e:27:86:89:
7e:1d:cc:5a:8a:31:cf:5f:73:dd:2c:3d:b1:76:e5:
45:90:44:77:20:67:16:9f:76:77:ac:57:25:38:80:
4d:2d:99:9b:dc:3d:8b:55:ed:50:62:41:78:29:06:
40:c6:5f:2c:0a:36:87:4b:fe:f5:a9:af:a8:17:a2:
d7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:66:65:6D:E0:AA:43:C9:4A:69:8D:4C:30:BB:6A:70:DE:32:25:CF
X509v3 Authority Key Identifier:
keyid:BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a4:18:bf:27:c6:ad:71:98:27:4c:1e:99:83:65:de:1a:38:
50:c3:71:33:59:c4:1b:a4:99:31:8e:d6:dc:96:2a:a3:91:11:
df:7f:ec:57:c7:b2:19:20:92:d9:65:00:92:4a:2d:71:45:ff:
c3:81:ae:03:ad:40:74:6c:0f:08:7e:4c:72:ba:c5:d9:57:40:
7e:d5:74:be:c2:a9:64:38:d7:0c:2c:56:96:d8:fc:f2:48:70:
d2:38:27:0c:5e:74:ab:1c:52:02:8e:9f:47:89:48:8b:be:3f:
01:fc:ec:0c:3e:a0:74:87:f5:6f:a6:28:fb:6f:9c:1b:e8:2c:
eb:c9:7c:d4:dc:90:86:89:0a:65:50:88:34:de:d8:38:f3:92:
63:12:41:63:eb:1f:01:1b:71:08:f5:e3:86:44:c6:7b:52:86:
57:05:af:0c:a6:c8:60:97:0b:02:be:27:f5:4b:1c:19:6b:c4:
a5:db:69:a5:74:8a:e3:29:c5:ea:b1:db:29:0a:dd:bb:b6:45:
14:fc:9c:2c:0f:fd:b1:da:9a:73:d8:ee:bb:de:89:c8:2f:29:
82:14:ad:13:1b:33:98:0e:84:e4:63:c1:97:0a:34:a0:ba:92:
6b:87:d0:85:42:c2:82:2f:e1:08:4d:42:a5:a1:40:a1:3c:e8:
dc:80:f6:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZkSmejBySbwxrnBgkjBHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiOTM2OTMzZGMzYWEwM2IzZGFhMDZlNWIzODczZjM1YmRh
YjU1ZDIwHhcNMjYwMzI5MDcwMTU5WhcNMjYwMzMwMDcwMTU5WjAzMTEwLwYDVQQD
EygyZjY2NjU2ZGUwYWE0M2M5NGE2OThkNGMzMGJiNmE3MGRlMzIyNWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C6l57SNfMEWZlj8JW2hVMHb6uuB
d0K52CJLkuw2lHta6XRGxSHkhXYXatGWdB9nn/dJXRaPTHSOXqQQ3FqFqqxO0ee7
KE4j1Iwyd/Sxr1cddb05diW67kGfpiKP+wJpAexWYYoHaEo86NEA9kJD0xg98ZFP
90NiGdVlJXZsBAvwbuW0tKpvupjsr0quThENOXSJn+E3qYt+/iabdfh5GFHNxFz3
Z9/YLkC2B3tTu0z58ealQ4QRAP8MFe7xWG4nhol+HcxaijHPX3PdLD2xduVFkER3
IGcWn3Z3rFclOIBNLZmb3D2LVe1QYkF4KQZAxl8sCjaHS/71qa+oF6LXTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9mZW3gqkPJSmmNTDC7anDeMiXPMB8GA1UdIwQY
MBaAFLuTaTPcOqA7PaoG5bOHPzW9q1XSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTVOcE05dzZvRHM5cWdibHM0Y19OYjJyVmRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wY2E1OWItMzJkMS00NmEyLWJlNDgt
MGMzM2UxMjY0ZDdmLzEvdTVOcE05dzZvRHM5cWdibHM0Y19OYjJyVmRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8wY2E1OWItMzJkMS00NmEyLWJlNDgtMGMzM2UxMjY0ZDdm
LzEvdTVOcE05dzZvRHM5cWdibHM0Y19OYjJyVmRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp6QYvyfG
rXGYJ0wemYNl3ho4UMNxM1nEG6SZMY7W3JYqo5ER33/sV8eyGSCS2WUAkkotcUX/
w4GuA61AdGwPCH5McrrF2VdAftV0vsKpZDjXDCxWltj88khw0jgnDF50qxxSAo6f
R4lIi74/AfzsDD6gdIf1b6Yo+2+cG+gs68l81NyQhokKZVCINN7YOPOSYxJBY+sf
ARtxCPXjhkTGe1KGVwWvDKbIYJcLAr4n9UscGWvEpdtppXSK4ynF6rHbKQrdu7ZF
FPycLA/9sdqac9juu96JyC8pghStExszmA6E5GPBlwo0oLqSa4fQhULCgi/hCE1C
paFAoTzo3ID2Tg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:30 2026 by rpki-client