Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
File: u7qOzNl-lhif9uM88RCmyaR3RZw.mft (raw, json)
Hash identifier: XHXdKxCscLZ7oRj8k8sC7W/i/2B9jbcTbCvUju7zuLs=
Subject key identifier: F1:F3:68:9F:7A:77:3B:E8:C4:5A:47:94:6A:08:78:3C:D7:75:A1:68
Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Certificate serial: 019DB0FD6559206932AE7B141F17DAD62905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
Manifest number: 144F
Signing time: Tue 21 Apr 2026 17:01:29 +0000
Manifest this update: Tue 21 Apr 2026 17:01:29 +0000
Manifest next update: Wed 22 Apr 2026 17:01:29 +0000
Files and hashes: 1: ln2dN3QsZlTOM89zdF-YcCXd_DY.roa (hash: Wgrvp16Ne1fmoLkZNnTHVfSZqwERSnnUg2+iWW0Q9iY=)
2: u7qOzNl-lhif9uM88RCmyaR3RZw.crl (hash: CoDPe3hIFsvW3lTvPmOT4aya0CDoVRmwW5CAVcpm5TA=)
3: yzMoDxEJ3QeJWdE8R-bAoTDWCn0.roa (hash: 7ySOiEN+rsl73J6hKm0hx2DeTB7Y+zglcV1vKztJX34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:fd:65:59:20:69:32:ae:7b:14:1f:17:da:d6:29:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Validity
Not Before: Apr 21 17:01:29 2026 GMT
Not After : Apr 22 17:01:29 2026 GMT
Subject: CN=f1f3689f7a773be8c45a47946a08783cd775a168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ca:be:4c:f3:63:5e:54:01:86:23:cb:e1:14:
2f:61:8d:1d:47:bb:dc:5f:64:8a:05:24:a1:c1:14:
b0:eb:64:51:d2:81:df:5a:39:f6:28:b2:35:6d:1b:
69:23:6b:17:c2:4d:2d:db:45:0a:45:e2:67:de:3a:
7f:f5:5c:ab:c1:2d:a3:5a:02:83:35:6d:c8:76:f3:
32:15:7a:16:16:78:08:9f:dd:63:4e:87:e1:45:d9:
d0:2d:4e:83:cf:4e:12:ea:cd:6b:f9:0e:ef:2b:73:
4f:64:89:b9:3d:49:76:db:f1:f6:c1:3c:54:72:c0:
9b:01:8a:2f:f6:7a:a4:59:1c:d1:a0:24:c3:d7:2b:
d4:78:85:a8:9f:fe:ab:65:db:c2:8c:a6:09:8d:a4:
3f:e9:70:0f:8c:ae:75:f0:35:22:a1:28:9e:31:d5:
9c:6d:72:2f:de:99:6b:a8:e0:58:b2:0f:d2:ea:ca:
e1:4d:47:75:37:16:48:0c:a8:9f:8d:9f:7b:d5:ea:
eb:2f:42:1d:53:6b:17:77:31:4c:f0:e8:e5:9a:47:
cf:ad:fa:de:c9:34:1f:39:0c:f8:05:fe:61:3d:d4:
9f:1c:2e:83:7b:f5:d6:d3:5b:1b:d8:54:6a:cf:6d:
7e:21:04:b3:1e:3a:23:b0:4f:ab:df:7a:f2:e9:22:
a8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F3:68:9F:7A:77:3B:E8:C4:5A:47:94:6A:08:78:3C:D7:75:A1:68
X509v3 Authority Key Identifier:
keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:19:08:d9:90:98:31:ce:0d:d0:92:86:d2:3f:3c:3f:8f:3b:
88:43:b9:8c:7d:c6:14:cf:cc:03:f8:bc:c9:26:17:2b:92:25:
b2:14:e1:1b:1c:b1:c0:1f:74:fc:4f:fc:d8:8a:a9:ce:3c:32:
31:45:64:a6:52:33:05:6b:52:7f:4c:81:77:c9:d7:66:0a:1d:
66:15:6c:2f:91:52:01:0c:10:1e:dd:17:6a:2e:c3:94:f9:98:
48:6a:3c:68:4d:4c:0d:e7:09:20:d2:e8:5e:5c:8d:c5:0a:49:
cf:f8:91:4b:16:47:df:8d:b0:86:2c:b6:a6:93:55:2d:08:2d:
17:d2:24:10:92:48:de:3f:7a:29:d8:90:65:a7:c3:68:7c:35:
60:36:f8:2f:fe:d0:4a:96:81:cf:2c:bd:ac:6d:d6:52:fc:3d:
9a:4b:75:bb:16:3f:58:da:69:3f:87:89:11:e6:64:c3:3e:9c:
08:e1:26:74:b4:bd:1f:71:e0:ca:39:ed:6c:70:67:ce:63:62:
26:39:6b:a1:ee:fb:66:77:0b:e4:3b:67:ea:dd:91:d0:4b:35:
61:2f:ce:3a:44:4c:7d:1f:0d:13:4a:36:d6:ee:42:a5:37:7d:
b4:33:66:cd:3b:70:33:b4:15:00:b5:9d:cb:a6:1e:61:46:c2:
7e:ea:2c:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2w/WVZIGkyrnsUHxfa1ikFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYmE4ZWNjZDk3ZTk2MTg5ZmY2ZTMzY2YxMTBhNmM5YTQ3
NzQ1OWMwHhcNMjYwNDIxMTcwMTI5WhcNMjYwNDIyMTcwMTI5WjAzMTEwLwYDVQQD
EyhmMWYzNjg5ZjdhNzczYmU4YzQ1YTQ3OTQ2YTA4NzgzY2Q3NzVhMTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMq+TPNjXlQBhiPL4RQvYY0dR7vc
X2SKBSShwRSw62RR0oHfWjn2KLI1bRtpI2sXwk0t20UKReJn3jp/9VyrwS2jWgKD
NW3IdvMyFXoWFngIn91jTofhRdnQLU6Dz04S6s1r+Q7vK3NPZIm5PUl22/H2wTxU
csCbAYov9nqkWRzRoCTD1yvUeIWon/6rZdvCjKYJjaQ/6XAPjK518DUioSieMdWc
bXIv3plrqOBYsg/S6srhTUd1NxZIDKifjZ971errL0IdU2sXdzFM8OjlmkfPrfre
yTQfOQz4Bf5hPdSfHC6De/XW01sb2FRqz21+IQSzHjojsE+r33ry6SKobwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHzaJ96dzvoxFpHlGoIeDzXdaFoMB8GA1UdIwQY
MBaAFLu6jszZfpYYn/bjPPEQpsmkd0WcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTdxT3pObC1saGlmOXVNODhSQ215YVIzUlp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iOWRhYjgtZDA4NC00YjczLTk5YjIt
ZWU1YjUxNjhiZjJmLzEvdTdxT3pObC1saGlmOXVNODhSQ215YVIzUlp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iOWRhYjgtZDA4NC00YjczLTk5YjItZWU1YjUxNjhiZjJm
LzEvdTdxT3pObC1saGlmOXVNODhSQ215YVIzUlp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxkI2ZCY
Mc4N0JKG0j88P487iEO5jH3GFM/MA/i8ySYXK5IlshThGxyxwB90/E/82Iqpzjwy
MUVkplIzBWtSf0yBd8nXZgodZhVsL5FSAQwQHt0Xai7DlPmYSGo8aE1MDecJINLo
XlyNxQpJz/iRSxZH342whiy2ppNVLQgtF9IkEJJI3j96KdiQZafDaHw1YDb4L/7Q
SpaBzyy9rG3WUvw9mkt1uxY/WNppP4eJEeZkwz6cCOEmdLS9H3HgyjntbHBnzmNi
Jjlroe77ZncL5Dtn6t2R0Es1YS/OOkRMfR8NE0o21u5CpTd9tDNmzTtwM7QVALWd
y6YeYUbCfuosmg==
-----END CERTIFICATE-----
Generated at Wed Apr 22 00:08:31 2026 by rpki-client