Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
File: uMDd44urYli1oClOwTT2ysFdNm4.mft (raw, json)
Hash identifier: e9l3loBokKTZou/LRFWRW3kIWiW297/8IDYIicd8Guo=
Subject key identifier: B7:F9:1C:54:C2:E5:5A:BC:52:B2:D5:DB:94:7F:DD:94:22:7C:24:FF
Authority key identifier: B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
Certificate issuer: /CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Certificate serial: 019D3909D452C618457395CE4FD81991016C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
Manifest number: 0822
Signing time: Sun 29 Mar 2026 10:00:38 +0000
Manifest this update: Sun 29 Mar 2026 10:00:38 +0000
Manifest next update: Mon 30 Mar 2026 10:00:38 +0000
Files and hashes: 1: fi4yA0xzPM7GYQgxbxmYjezn86E.roa (hash: G/nw7pbKmX3E/jluA4P6MIqyVk+aVk5yMtozD6WiDB4=)
2: uMDd44urYli1oClOwTT2ysFdNm4.crl (hash: Qj8KIL/fo4twBE822x9hXn/NWXtO+Najd6yozHaio0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d4:52:c6:18:45:73:95:ce:4f:d8:19:91:01:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Validity
Not Before: Mar 29 10:00:38 2026 GMT
Not After : Mar 30 10:00:38 2026 GMT
Subject: CN=b7f91c54c2e55abc52b2d5db947fdd94227c24ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4c:24:ed:0f:15:c2:c8:ce:aa:23:3b:e6:b8:
c9:fa:2a:b6:3d:4e:a0:02:26:e1:9c:7d:6a:06:e3:
fd:7d:e4:10:88:0b:d9:00:8a:c6:b6:e4:d1:f2:d8:
8e:51:61:27:c3:41:fb:8e:a8:c0:8d:69:07:f1:18:
3d:4d:16:e1:5a:d1:b8:e7:f6:5b:78:47:79:b8:4a:
77:ed:d5:59:ce:4a:96:95:52:b2:e1:04:a9:49:09:
97:8b:de:17:95:93:b6:34:12:08:86:8c:c3:3e:28:
8e:07:74:e2:46:0e:fb:5b:3a:ff:71:78:c9:bd:b0:
23:09:95:a7:68:a4:ef:fa:49:ea:2e:73:8c:3b:6a:
9f:7f:cf:d0:60:7d:e5:99:1c:91:dc:c4:5c:7e:a2:
59:2d:41:a5:df:f7:60:e0:25:ed:b3:af:ad:83:25:
14:cd:5f:d3:20:3d:1b:49:29:49:67:34:76:c3:23:
46:7f:5f:d2:23:f6:37:72:2a:e6:0d:9f:e8:0d:7e:
50:f9:5a:eb:8d:28:82:93:ee:e9:6b:71:06:da:db:
66:b7:e9:9e:cf:65:f2:2a:ba:25:b2:06:1d:2c:b9:
4d:77:61:78:0d:c3:b6:22:07:9f:03:70:80:3b:ac:
ff:ef:86:38:6e:df:2b:bf:dd:ab:7c:57:7f:a3:87:
79:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F9:1C:54:C2:E5:5A:BC:52:B2:D5:DB:94:7F:DD:94:22:7C:24:FF
X509v3 Authority Key Identifier:
keyid:B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:cb:7d:5d:c2:d6:4b:f1:ca:cc:04:4c:20:24:a5:e0:60:bc:
52:11:f8:95:ab:47:96:b5:26:c5:91:be:3f:0d:07:cb:d2:fc:
a1:5b:4d:5f:91:31:97:f5:4e:3b:19:ee:5d:10:f2:8e:ea:cf:
1d:9d:c8:cc:65:1a:13:15:10:07:a2:7d:6f:4b:6c:0c:d8:4e:
8a:5b:a3:b7:4f:01:c6:1f:90:ec:9c:91:66:eb:4a:47:74:83:
8e:a7:c1:15:e9:d0:73:74:fa:90:18:8b:d3:9c:ad:5f:6c:67:
17:88:44:9f:a1:c9:97:e5:8a:32:fd:4b:27:c5:b1:fb:75:88:
ec:dd:0b:9c:31:c5:36:73:32:20:aa:27:8e:4c:e2:5b:ed:9d:
b3:ed:89:4c:a3:5b:89:48:c3:c8:f2:43:db:4b:6e:28:63:89:
02:fb:d4:f2:4e:d5:5d:39:1a:84:b6:87:a1:2f:55:dc:3a:a3:
e0:6f:e9:c1:dd:ca:fc:57:67:0b:b8:c2:c4:1f:04:7c:1f:4f:
2b:d5:31:e5:9b:9b:e3:49:a1:48:ae:63:a5:88:29:99:d4:2c:
6c:1a:af:c5:66:99:51:35:db:cc:73:e2:eb:44:98:42:16:d5:
c3:bf:c0:8d:43:06:5b:9c:6a:14:71:10:dd:b5:64:72:db:08:
bd:80:3e:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CdRSxhhFc5XOT9gZkQFsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4YzBkZGUzOGJhYjYyNThiNWEwMjk0ZWMxMzRmNmNhYzE1
ZDM2NmUwHhcNMjYwMzI5MTAwMDM4WhcNMjYwMzMwMTAwMDM4WjAzMTEwLwYDVQQD
EyhiN2Y5MWM1NGMyZTU1YWJjNTJiMmQ1ZGI5NDdmZGQ5NDIyN2MyNGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUwk7Q8VwsjOqiM75rjJ+iq2PU6g
AibhnH1qBuP9feQQiAvZAIrGtuTR8tiOUWEnw0H7jqjAjWkH8Rg9TRbhWtG45/Zb
eEd5uEp37dVZzkqWlVKy4QSpSQmXi94XlZO2NBIIhozDPiiOB3TiRg77Wzr/cXjJ
vbAjCZWnaKTv+knqLnOMO2qff8/QYH3lmRyR3MRcfqJZLUGl3/dg4CXts6+tgyUU
zV/TID0bSSlJZzR2wyNGf1/SI/Y3cirmDZ/oDX5Q+VrrjSiCk+7pa3EG2ttmt+me
z2XyKrolsgYdLLlNd2F4DcO2IgefA3CAO6z/74Y4bt8rv92rfFd/o4d5jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLf5HFTC5Vq8UrLV25R/3ZQifCT/MB8GA1UdIwQY
MBaAFLjA3eOLq2JYtaApTsE09srBXTZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU1EZDQ0dXJZbGkxb0NsT3dUVDJ5c0ZkTm00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83YTUyNmMtMmRjNy00MDY5LTllMzIt
MDRlZGJkYmNlYzM3LzEvdU1EZDQ0dXJZbGkxb0NsT3dUVDJ5c0ZkTm00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83YTUyNmMtMmRjNy00MDY5LTllMzItMDRlZGJkYmNlYzM3
LzEvdU1EZDQ0dXJZbGkxb0NsT3dUVDJ5c0ZkTm00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT8t9XcLW
S/HKzARMICSl4GC8UhH4latHlrUmxZG+Pw0Hy9L8oVtNX5Exl/VOOxnuXRDyjurP
HZ3IzGUaExUQB6J9b0tsDNhOilujt08Bxh+Q7JyRZutKR3SDjqfBFenQc3T6kBiL
05ytX2xnF4hEn6HJl+WKMv1LJ8Wx+3WI7N0LnDHFNnMyIKonjkziW+2ds+2JTKNb
iUjDyPJD20tuKGOJAvvU8k7VXTkahLaHoS9V3Dqj4G/pwd3K/FdnC7jCxB8EfB9P
K9Ux5Zub40mhSK5jpYgpmdQsbBqvxWaZUTXbzHPi60SYQhbVw7/AjUMGW5xqFHEQ
3bVkctsIvYA+tg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:52 2026 by rpki-client