Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
File: urIywdctwcq72hbIcOyUHUWKn9w.mft (raw, json)
Hash identifier: glwcUy7mypqgWTKBb4SeGSlEPrW/a9i1lVKjLsPDloU=
Subject key identifier: C1:CB:72:59:6C:7E:87:00:9B:E3:DA:59:47:5E:90:C5:9C:38:2C:F8
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial: 019D04AED881EFBA99DECE130296899788CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
Manifest number: 1876
Signing time: Thu 19 Mar 2026 06:01:00 +0000
Manifest this update: Thu 19 Mar 2026 06:01:00 +0000
Manifest next update: Fri 20 Mar 2026 06:01:00 +0000
Files and hashes: 1: PzKWoUJeFLqjUWS7LgF4BdwM7PI.roa (hash: OsmHic4Ai/0j0JqDsk2Y5rGOjUKPGoeMip/8Vo2h1CM=)
2: UsG3baUGIxj41J_YNnv0F0uvJ9g.roa (hash: Ou9qv1YwHjFroWI++/0y93X1Q7gw8mUqZv7cZxbQ++U=)
3: urIywdctwcq72hbIcOyUHUWKn9w.crl (hash: alWUOd0D5gYejq4Y+C67U7aABkl8L+O1E7VDaEkrtuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:ae:d8:81:ef:ba:99:de:ce:13:02:96:89:97:88:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Validity
Not Before: Mar 19 06:01:00 2026 GMT
Not After : Mar 20 06:01:00 2026 GMT
Subject: CN=c1cb72596c7e87009be3da59475e90c59c382cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:67:fd:d0:ff:40:d5:f0:f4:4c:9e:ee:fc:
db:d5:1b:24:62:eb:68:f1:92:a1:49:3e:a4:8c:c3:
a5:f9:08:11:79:f5:77:ce:6f:2d:11:b6:48:a0:46:
78:92:47:d8:35:9c:c4:e0:b2:ca:98:c1:c2:fc:2a:
54:53:d7:fb:c3:a9:45:aa:dc:59:58:37:f5:50:84:
ba:04:45:1a:58:80:e9:cb:b3:4c:7b:00:5b:9b:1b:
55:1f:45:f1:e2:96:81:6f:ef:d5:62:fb:c1:82:30:
92:e4:1c:2c:16:23:2f:b3:a7:01:a6:4d:5e:a2:0b:
78:82:dd:06:d5:8f:af:34:45:d3:46:be:87:1e:c4:
c8:6f:bb:79:11:83:59:a0:b4:53:71:b9:07:a9:ad:
cf:37:f6:67:61:13:86:27:b8:60:c2:2b:11:d6:cb:
41:51:c5:8d:99:16:8c:1a:dc:77:cc:cc:b5:bf:50:
9f:ad:01:5e:f4:e4:fb:48:60:bf:64:23:76:e4:05:
ab:97:09:c7:ae:13:0c:27:ed:54:58:0f:90:05:95:
96:ee:b8:b7:4f:3c:57:2a:68:c3:e5:95:94:04:fc:
5e:0c:6b:a2:f3:0f:67:d1:cf:5e:cb:14:9f:cc:88:
2e:7a:24:30:b4:98:b0:a4:04:0b:cf:7f:de:89:7a:
da:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CB:72:59:6C:7E:87:00:9B:E3:DA:59:47:5E:90:C5:9C:38:2C:F8
X509v3 Authority Key Identifier:
keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8d:b6:54:83:11:15:5f:6e:6c:8a:82:0f:02:4a:dd:ec:c6:
69:1e:8b:74:71:6d:f6:ff:50:de:6c:bd:63:70:0b:39:6a:f4:
72:c2:cb:04:be:3e:dd:04:a2:6e:30:71:27:69:86:c7:1a:5c:
64:1a:b3:f9:30:e8:65:f7:6d:76:81:67:ac:a1:b7:84:37:65:
15:34:62:8d:1f:ee:1b:bc:2f:61:cb:05:25:9b:f1:6a:d5:b0:
98:72:f7:ae:1c:3d:d4:57:c6:c5:90:61:4d:89:c8:27:12:64:
93:c3:a2:a9:43:9f:98:c7:fd:5c:90:a7:47:6e:29:e9:fd:b5:
85:03:28:9c:3b:72:95:18:88:a8:bf:e8:bb:57:48:ab:53:ee:
10:f6:27:88:8a:49:7b:04:2e:9f:ef:49:7b:b3:e5:0c:33:db:
c1:a8:84:b2:01:45:59:94:6c:c1:72:28:54:96:cb:e9:a4:c4:
7b:ed:90:20:19:01:9b:8b:11:cc:c3:f6:92:3f:7c:0e:2a:6c:
1a:ae:b9:56:e5:df:18:c9:2f:af:b9:bb:10:43:24:0f:f7:d3:
f5:08:ec:bc:8a:12:79:5e:82:fd:40:5f:36:32:fe:8a:84:2c:
06:bf:46:42:9c:2b:d6:8a:a8:ae:87:ed:f1:73:ae:0c:3a:cf:
e5:a1:dd:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ErtiB77qZ3s4TApaJl4jOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYjIzMmMxZDcyZGMxY2FiYmRhMTZjODcwZWM5NDFkNDU4
YTlmZGMwHhcNMjYwMzE5MDYwMTAwWhcNMjYwMzIwMDYwMTAwWjAzMTEwLwYDVQQD
EyhjMWNiNzI1OTZjN2U4NzAwOWJlM2RhNTk0NzVlOTBjNTljMzgyY2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuihn/dD/QNXw9Eye7vzb1RskYuto
8ZKhST6kjMOl+QgRefV3zm8tEbZIoEZ4kkfYNZzE4LLKmMHC/CpUU9f7w6lFqtxZ
WDf1UIS6BEUaWIDpy7NMewBbmxtVH0Xx4paBb+/VYvvBgjCS5BwsFiMvs6cBpk1e
ogt4gt0G1Y+vNEXTRr6HHsTIb7t5EYNZoLRTcbkHqa3PN/ZnYROGJ7hgwisR1stB
UcWNmRaMGtx3zMy1v1CfrQFe9OT7SGC/ZCN25AWrlwnHrhMMJ+1UWA+QBZWW7ri3
TzxXKmjD5ZWUBPxeDGui8w9n0c9eyxSfzIgueiQwtJiwpAQLz3/eiXraRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHLcllsfocAm+PaWUdekMWcOCz4MB8GA1UdIwQY
MBaAFLqyMsHXLcHKu9oWyHDslB1Fip/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXJJeXdkY3R3Y3E3MmhiSWNPeVVIVVdLbjl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83OTU3NzQtZmI5ZS00MTNmLTlmNzAt
N2QzZWZiNGE2YTdmLzEvdXJJeXdkY3R3Y3E3MmhiSWNPeVVIVVdLbjl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83OTU3NzQtZmI5ZS00MTNmLTlmNzAtN2QzZWZiNGE2YTdm
LzEvdXJJeXdkY3R3Y3E3MmhiSWNPeVVIVVdLbjl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfo22VIMR
FV9ubIqCDwJK3ezGaR6LdHFt9v9Q3my9Y3ALOWr0csLLBL4+3QSibjBxJ2mGxxpc
ZBqz+TDoZfdtdoFnrKG3hDdlFTRijR/uG7wvYcsFJZvxatWwmHL3rhw91FfGxZBh
TYnIJxJkk8OiqUOfmMf9XJCnR24p6f21hQMonDtylRiIqL/ou1dIq1PuEPYniIpJ
ewQun+9Je7PlDDPbwaiEsgFFWZRswXIoVJbL6aTEe+2QIBkBm4sRzMP2kj98Dips
Gq65VuXfGMkvr7m7EEMkD/fT9QjsvIoSeV6C/UBfNjL+ioQsBr9GQpwr1oqoroft
8XOuDDrP5aHdGg==
-----END CERTIFICATE-----
Generated at Thu Mar 19 14:03:55 2026 by rpki-client