Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
File: u41koNwhmWscmeaMyVFpTik-3v4.mft (raw, json)
Hash identifier: WPJXjNTKldzcJCAAG3p28GU075jrJh3JH6QgwoKhChg=
Subject key identifier: 6F:B9:75:2E:F7:F4:E9:86:BB:9B:9C:FE:54:09:24:EF:79:4A:F8:32
Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
Certificate issuer: /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Certificate serial: 019FA297496D113A255F7E74EAA0D0ABE1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
Manifest number: 19D9
Signing time: Mon 27 Jul 2026 08:00:51 +0000
Manifest this update: Mon 27 Jul 2026 08:00:51 +0000
Manifest next update: Tue 28 Jul 2026 08:00:51 +0000
Files and hashes: 1: 6wCR-IXi-d6mFq9coQKBvKcWKb8.roa (hash: 3CTCR/QkDS3QC7l1TMcETE6DIffI4EDmk47oroP7Oco=)
2: Wve6Gpo7jKUoWkkK-ID2jmyV7c4.roa (hash: 1lWZa+k/0zeWIBYNmCvAje+cs/RGX75v0KzNg1cs52k=)
3: u41koNwhmWscmeaMyVFpTik-3v4.crl (hash: hCWZjnB1M9xNVOn9ktKOQFMcZqhLetecBKuvWQhnOv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:49:6d:11:3a:25:5f:7e:74:ea:a0:d0:ab:e1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Validity
Not Before: Jul 27 08:00:51 2026 GMT
Not After : Jul 28 08:00:51 2026 GMT
Subject: CN=6fb9752ef7f4e986bb9b9cfe540924ef794af832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8b:75:e0:98:98:6c:64:58:2c:d2:c3:85:fa:
d8:f0:bc:c1:62:ad:eb:4e:78:4d:bf:11:0d:c0:80:
fa:a7:88:22:b9:88:62:53:ca:c1:a4:94:a5:de:1b:
95:9e:ba:28:69:b0:2a:74:fc:44:c9:cb:43:0f:ea:
d2:af:e4:c0:ac:6b:b2:af:8f:5e:ed:90:d2:72:0a:
23:3e:fc:e6:48:ee:7c:f3:b6:2a:4e:5b:84:1d:3a:
9a:00:2b:3c:de:60:e1:a7:34:34:95:4c:93:68:1b:
1b:d3:ef:e3:23:f9:6b:c8:44:62:f3:bc:5e:68:fe:
ba:d9:99:34:a0:a4:df:48:c9:f1:fd:80:e6:8e:d2:
07:de:d4:4f:e0:d2:26:b3:a1:51:bc:83:e8:c4:5a:
47:3e:82:d1:fa:35:e4:c3:a0:d9:88:59:19:ae:53:
42:f7:8b:54:41:f2:f8:f2:2e:3c:f0:9c:f5:9b:bc:
81:ec:53:bf:9a:1a:d8:91:5a:42:88:e6:11:af:3c:
d5:ce:77:3e:53:c1:c4:41:63:d5:41:ef:fd:7a:f8:
8a:a0:87:62:f2:49:58:0a:cb:aa:58:82:aa:2c:95:
6d:63:17:0f:c9:01:6a:45:b9:02:2a:7b:c2:b4:25:
a7:4f:8b:94:0a:7c:26:44:59:80:3f:0d:bf:78:2c:
28:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B9:75:2E:F7:F4:E9:86:BB:9B:9C:FE:54:09:24:EF:79:4A:F8:32
X509v3 Authority Key Identifier:
keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:58:15:fd:71:72:93:41:35:26:e4:11:af:13:57:4e:6e:1e:
a6:c4:33:2e:c5:5c:7c:ad:da:29:9e:d8:8c:51:d7:75:92:54:
7e:be:df:45:63:6f:42:64:4c:cc:83:ea:df:82:39:56:ec:16:
8a:f6:03:f3:1e:5b:79:a8:dd:7f:25:fb:70:3d:cf:5a:cb:52:
b0:6f:56:d8:3d:ba:a7:c1:ad:e6:d7:90:61:af:b6:c6:16:e2:
45:ba:9c:d0:d1:f3:a3:b2:2b:a0:29:62:de:ae:4c:4b:e6:d8:
cb:7f:5a:a9:72:0e:8c:6f:85:0e:f0:25:af:1f:33:24:c6:c9:
ce:03:ee:e8:9a:05:6a:e2:d3:7f:dc:4e:3a:ea:6d:53:db:88:
87:7b:fc:33:78:e7:45:6f:8a:0c:b6:75:13:8a:1c:d2:f8:3d:
82:e9:43:2e:aa:0b:b4:76:c8:1e:98:62:9d:08:ad:25:cb:02:
4a:8e:db:34:4e:cd:7f:82:61:0d:bf:35:aa:86:1e:be:f1:0f:
e9:e6:2f:74:3e:f2:96:66:c6:1d:f0:de:9d:0a:79:a8:d3:01:
2e:95:fd:55:f1:35:16:dc:63:ee:3f:50:82:02:f6:8b:5c:07:
a9:d9:43:99:06:4b:c4:30:9e:72:58:00:ff:06:66:62:94:99:
60:1a:07:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+il0ltETolX3506qDQq+G8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiOGQ2NGEwZGMyMTk5NmIxYzk5ZTY4Y2M5NTE2OTRlMjkz
ZWRlZmUwHhcNMjYwNzI3MDgwMDUxWhcNMjYwNzI4MDgwMDUxWjAzMTEwLwYDVQQD
Eyg2ZmI5NzUyZWY3ZjRlOTg2YmI5YjljZmU1NDA5MjRlZjc5NGFmODMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIt14JiYbGRYLNLDhfrY8LzBYq3r
TnhNvxENwID6p4giuYhiU8rBpJSl3huVnrooabAqdPxEyctDD+rSr+TArGuyr49e
7ZDScgojPvzmSO5887YqTluEHTqaACs83mDhpzQ0lUyTaBsb0+/jI/lryERi87xe
aP662Zk0oKTfSMnx/YDmjtIH3tRP4NIms6FRvIPoxFpHPoLR+jXkw6DZiFkZrlNC
94tUQfL48i488Jz1m7yB7FO/mhrYkVpCiOYRrzzVznc+U8HEQWPVQe/9eviKoIdi
8klYCsuqWIKqLJVtYxcPyQFqRbkCKnvCtCWnT4uUCnwmRFmAPw2/eCwoPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+5dS739OmGu5uc/lQJJO95SvgyMB8GA1UdIwQY
MBaAFLuNZKDcIZlrHJnmjMlRaU4pPt7+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yMjAzMTgtNDZmMS00ZWJmLWE3OTUt
ZGQ0YTIxN2Q2MDZiLzEvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yMjAzMTgtNDZmMS00ZWJmLWE3OTUtZGQ0YTIxN2Q2MDZi
LzEvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlgV/XFy
k0E1JuQRrxNXTm4epsQzLsVcfK3aKZ7YjFHXdZJUfr7fRWNvQmRMzIPq34I5VuwW
ivYD8x5beajdfyX7cD3PWstSsG9W2D26p8Gt5teQYa+2xhbiRbqc0NHzo7IroCli
3q5MS+bYy39aqXIOjG+FDvAlrx8zJMbJzgPu6JoFauLTf9xOOuptU9uIh3v8M3jn
RW+KDLZ1E4oc0vg9gulDLqoLtHbIHphinQitJcsCSo7bNE7Nf4JhDb81qoYevvEP
6eYvdD7ylmbGHfDenQp5qNMBLpX9VfE1Ftxj7j9QggL2i1wHqdlDmQZLxDCeclgA
/wZmYpSZYBoHTw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 15:18:36 2026 by rpki-client