Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
File: unZwbT4IgT24sndmKK-EZRjibdI.mft (raw, json)
Hash identifier: JEjuwBH4clh+agjlx2cIlUeTCpXhYH2/51r29HqO0QQ=
Subject key identifier: 09:79:15:A5:EC:01:92:6E:98:AE:20:F7:05:8F:7D:CB:C9:75:1A:74
Authority key identifier: BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2
Certificate issuer: /CN=ba76706d3e08813db8b2776628af846518e26dd2
Certificate serial: 019D38D392FB6E223E595CF7C4498592321F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:01:22 +0000
Manifest this update: Sun 29 Mar 2026 09:01:22 +0000
Manifest next update: Mon 30 Mar 2026 09:01:22 +0000
Files and hashes: 1: 1-5QJBLxp5AmzSVUk8qikofQqav4.roa (hash: bXIAnhQl9MhR5WL6f2K74RtvR0mnQzIz2IKnZ9vIJ10=)
2: unZwbT4IgT24sndmKK-EZRjibdI.crl (hash: GBZ32N4LVk9+xesb4ZSDsedYAqw+sxiM0TFACapgPug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:92:fb:6e:22:3e:59:5c:f7:c4:49:85:92:32:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba76706d3e08813db8b2776628af846518e26dd2
Validity
Not Before: Mar 29 09:01:22 2026 GMT
Not After : Mar 30 09:01:22 2026 GMT
Subject: CN=097915a5ec01926e98ae20f7058f7dcbc9751a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a7:7f:7c:b8:1e:11:8e:e8:83:c9:82:0c:3d:
2f:dc:06:f3:85:3d:d2:01:93:9f:22:d7:7f:26:2d:
48:8f:f9:0c:3f:73:5a:1a:95:d0:f8:c2:a9:f7:58:
12:c2:39:d6:8b:8b:6c:50:01:01:28:5f:99:fe:7f:
68:8d:cc:a4:f5:af:09:e1:3f:a3:87:47:81:60:21:
1a:2d:ea:31:eb:52:60:e7:f3:ef:53:d6:4a:1d:6a:
3a:79:24:cd:cc:ba:5e:f9:f9:64:e6:8c:e6:68:33:
d3:03:8f:09:28:38:f6:8b:b4:ae:61:82:67:06:99:
e1:fb:b8:9e:18:f0:54:d4:79:7c:ad:f1:00:02:06:
16:44:15:4a:19:9e:d8:ef:09:5d:33:e5:ce:3b:3d:
11:d2:0b:f1:14:a2:cc:f3:c2:7f:de:0b:d9:e5:8c:
9a:1e:20:ab:26:d0:aa:f5:90:b6:37:5c:21:4e:5f:
38:24:be:56:1a:19:a1:04:d9:24:ee:ac:c3:ad:1f:
d9:9b:a4:45:80:ea:1f:fe:28:17:ce:21:b8:c7:c0:
52:6a:d8:33:61:26:54:4a:dc:03:37:b6:ac:82:9c:
f0:28:d6:8c:48:81:90:62:d3:e7:9a:3b:8f:f4:7a:
df:d2:8f:28:c9:44:30:cf:16:59:bf:c1:e3:81:da:
fe:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:79:15:A5:EC:01:92:6E:98:AE:20:F7:05:8F:7D:CB:C9:75:1A:74
X509v3 Authority Key Identifier:
keyid:BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:87:08:1b:45:54:5a:60:a1:c2:02:c8:7b:3b:6e:45:9d:d5:
e6:df:b4:70:99:9b:c1:84:94:25:70:f6:53:a5:3e:1e:36:9e:
b8:ea:3d:72:b3:9e:59:dc:9b:4f:65:b0:75:f7:97:ac:c3:d8:
55:89:a9:39:1d:ea:88:be:8b:62:67:68:28:df:94:9d:fe:43:
17:de:19:e9:fc:75:ff:35:73:77:17:aa:37:78:c4:d8:59:31:
eb:94:2a:e5:55:ad:bd:eb:34:fd:cf:01:b8:a7:bb:cb:25:ca:
57:1c:27:06:ff:14:34:b7:ca:ff:21:6d:c3:fd:1b:73:f9:26:
27:b7:e4:7d:ac:78:dc:9d:d4:56:7a:0f:f5:24:26:97:18:f1:
2b:b0:ed:93:c5:df:5c:76:b8:88:74:b4:4a:e3:3b:1c:88:75:
83:9c:1b:bb:e4:2c:b2:f9:a2:f0:14:4c:40:e3:f8:b0:f3:e7:
82:15:b7:32:7f:56:2e:dd:8e:68:a7:ef:66:e0:1f:72:f2:ed:
91:45:d6:7e:15:3a:d6:76:10:30:9b:20:74:9d:9d:4c:4b:44:
4d:e2:a6:f1:2f:bf:a7:26:5c:16:20:73:84:00:0f:7d:da:4d:
f0:b3:7a:b0:59:20:6a:5d:7c:1e:f6:d6:98:7b:99:b1:3c:c1:
88:9a:97:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0405L7biI+WVz3xEmFkjIfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNzY3MDZkM2UwODgxM2RiOGIyNzc2NjI4YWY4NDY1MThl
MjZkZDIwHhcNMjYwMzI5MDkwMTIyWhcNMjYwMzMwMDkwMTIyWjAzMTEwLwYDVQQD
EygwOTc5MTVhNWVjMDE5MjZlOThhZTIwZjcwNThmN2RjYmM5NzUxYTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKd/fLgeEY7og8mCDD0v3AbzhT3S
AZOfItd/Ji1Ij/kMP3NaGpXQ+MKp91gSwjnWi4tsUAEBKF+Z/n9ojcyk9a8J4T+j
h0eBYCEaLeox61Jg5/PvU9ZKHWo6eSTNzLpe+flk5ozmaDPTA48JKDj2i7SuYYJn
Bpnh+7ieGPBU1Hl8rfEAAgYWRBVKGZ7Y7wldM+XOOz0R0gvxFKLM88J/3gvZ5Yya
HiCrJtCq9ZC2N1whTl84JL5WGhmhBNkk7qzDrR/Zm6RFgOof/igXziG4x8BSatgz
YSZUStwDN7asgpzwKNaMSIGQYtPnmjuP9Hrf0o8oyUQwzxZZv8Hjgdr+7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAl5FaXsAZJumK4g9wWPfcvJdRp0MB8GA1UdIwQY
MBaAFLp2cG0+CIE9uLJ3ZiivhGUY4m3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW5ad2JUNElnVDI0c25kbUtLLUVaUmppYmRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82ZDQ3NTktYTA1ZS00NmJjLWJlNTgt
NjY5ZWVkMmVjN2VhLzEvdW5ad2JUNElnVDI0c25kbUtLLUVaUmppYmRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82ZDQ3NTktYTA1ZS00NmJjLWJlNTgtNjY5ZWVkMmVjN2Vh
LzEvdW5ad2JUNElnVDI0c25kbUtLLUVaUmppYmRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOocIG0VU
WmChwgLIeztuRZ3V5t+0cJmbwYSUJXD2U6U+HjaeuOo9crOeWdybT2WwdfeXrMPY
VYmpOR3qiL6LYmdoKN+Unf5DF94Z6fx1/zVzdxeqN3jE2Fkx65Qq5VWtves0/c8B
uKe7yyXKVxwnBv8UNLfK/yFtw/0bc/kmJ7fkfax43J3UVnoP9SQmlxjxK7Dtk8Xf
XHa4iHS0SuM7HIh1g5wbu+Qssvmi8BRMQOP4sPPnghW3Mn9WLt2OaKfvZuAfcvLt
kUXWfhU61nYQMJsgdJ2dTEtETeKm8S+/pyZcFiBzhAAPfdpN8LN6sFkgal18HvbW
mHuZsTzBiJqXpQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:45 2026 by rpki-client