Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
File: un1KwTROw43OmXaNeKEU6_fxfYU.mft (raw, json)
Hash identifier: QJA1seLgIqEPw51JqSkh/FK2kpHofopC/CeK+zRXXIk=
Subject key identifier: 63:FD:4D:B4:65:5F:DF:AA:25:34:59:20:EC:56:FE:4A:15:B3:BB:F3
Authority key identifier: BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
Certificate issuer: /CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Certificate serial: 019CE4B5A3566F50F721DDC93955372BC601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
Manifest number: 0F1D
Signing time: Fri 13 Mar 2026 01:00:34 +0000
Manifest this update: Fri 13 Mar 2026 01:00:34 +0000
Manifest next update: Sat 14 Mar 2026 01:00:34 +0000
Files and hashes: 1: o1To2AOAuoLP-nWNuTs68gOKGAE.roa (hash: IQkZrzowlCF0UtrbBWeIReby2n7O6GCUFgToo++Y5B0=)
2: un1KwTROw43OmXaNeKEU6_fxfYU.crl (hash: q+B65OHUX2I7E0nCUDgTWVERDJGkEfHBq6esQyt+mjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:a3:56:6f:50:f7:21:dd:c9:39:55:37:2b:c6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Validity
Not Before: Mar 13 01:00:34 2026 GMT
Not After : Mar 14 01:00:34 2026 GMT
Subject: CN=63fd4db4655fdfaa25345920ec56fe4a15b3bbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0d:bc:87:8b:a1:87:5b:d6:f8:67:74:33:fa:
7f:62:c9:c5:83:1e:81:a3:73:22:d7:5a:95:35:78:
1a:a8:90:9a:7c:aa:fa:5c:39:22:c0:a5:b1:84:aa:
2c:b5:fb:4a:6a:44:ec:cd:8e:d3:c9:cf:78:86:85:
40:e6:a4:02:78:ff:92:2e:13:af:ab:30:24:b6:63:
bb:62:2f:8f:46:63:54:cb:a8:ab:69:7d:12:43:3f:
55:dd:fc:3f:d7:40:71:04:1e:68:1d:d0:b0:14:5f:
77:d4:a5:8c:1c:55:42:b3:3b:b8:b9:6f:2b:6c:2d:
a3:55:e0:b8:83:82:5a:4e:b3:98:49:ab:4f:a7:f4:
83:39:52:63:f5:8d:00:17:ad:84:a4:78:51:21:8e:
a9:a6:8a:96:21:b8:a6:d4:ad:22:bb:45:78:c8:f6:
89:f2:ed:1d:d7:0d:51:93:70:96:10:d1:a9:e1:9c:
48:d9:74:29:8e:12:f9:8b:fe:da:0c:a9:3e:99:8e:
4e:1c:ac:43:46:2c:a3:36:e6:06:94:d6:9c:93:5c:
db:89:41:56:38:56:4e:61:dc:66:4a:2a:2f:ee:a9:
41:12:49:e2:71:5c:ae:d6:20:f8:a0:31:75:8e:d2:
b1:90:eb:61:ee:e0:c9:6b:63:13:c8:ab:52:36:02:
1d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FD:4D:B4:65:5F:DF:AA:25:34:59:20:EC:56:FE:4A:15:B3:BB:F3
X509v3 Authority Key Identifier:
keyid:BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:fa:93:62:89:35:00:45:63:1d:2e:cb:0f:d0:43:bb:9e:03:
59:5c:fe:25:26:e2:fd:fd:a4:0c:df:d8:42:f7:f4:22:d5:97:
7a:5c:25:0b:e8:92:9b:f1:f0:29:41:86:60:ef:65:87:e9:f1:
80:a4:52:58:1f:67:11:c8:78:a0:ab:90:d0:27:1b:c7:25:6c:
5a:cc:d2:1f:45:a3:c0:88:0e:bc:52:86:ab:57:b0:7a:d3:88:
ef:f9:dc:f1:06:ea:eb:84:da:cf:69:53:52:01:12:7b:1e:8b:
f5:a5:2c:8c:9c:2e:17:e3:ff:b2:68:e2:af:7e:40:74:72:3a:
d8:40:94:c9:92:6c:d7:ea:70:f3:06:4b:f0:f3:62:db:fd:4d:
38:63:fe:18:bc:49:9f:78:d8:6e:e1:e0:a0:bf:f1:24:fa:fe:
07:af:da:cd:47:2d:cd:08:3b:c8:9b:36:57:c0:7e:6e:cb:ae:
39:e8:66:5d:4d:f3:81:c8:a3:f4:a7:4e:17:42:ca:4b:e7:95:
38:11:1f:7c:6b:56:9e:65:83:26:57:27:89:eb:9c:d0:ee:c6:
7d:ea:50:07:0a:e9:e6:91:71:7d:6b:2e:fb:e3:f9:10:4d:92:
6a:62:00:ef:18:4c:bf:8a:2f:24:f1:bb:90:45:b8:3c:6b:43:
9b:7d:84:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzktaNWb1D3Id3JOVU3K8YBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhN2Q0YWMxMzQ0ZWMzOGRjZTk5NzY4ZDc4YTExNGViZjdm
MTdkODUwHhcNMjYwMzEzMDEwMDM0WhcNMjYwMzE0MDEwMDM0WjAzMTEwLwYDVQQD
Eyg2M2ZkNGRiNDY1NWZkZmFhMjUzNDU5MjBlYzU2ZmU0YTE1YjNiYmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w28h4uhh1vW+Gd0M/p/YsnFgx6B
o3Mi11qVNXgaqJCafKr6XDkiwKWxhKostftKakTszY7Tyc94hoVA5qQCeP+SLhOv
qzAktmO7Yi+PRmNUy6iraX0SQz9V3fw/10BxBB5oHdCwFF931KWMHFVCszu4uW8r
bC2jVeC4g4JaTrOYSatPp/SDOVJj9Y0AF62EpHhRIY6ppoqWIbim1K0iu0V4yPaJ
8u0d1w1Rk3CWENGp4ZxI2XQpjhL5i/7aDKk+mY5OHKxDRiyjNuYGlNack1zbiUFW
OFZOYdxmSiov7qlBEknicVyu1iD4oDF1jtKxkOth7uDJa2MTyKtSNgId4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGP9TbRlX9+qJTRZIOxW/koVs7vzMB8GA1UdIwQY
MBaAFLp9SsE0TsONzpl2jXihFOv38X2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW4xS3dUUk93NDNPbVhhTmVLRVU2X2Z4ZllVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iNjYxMjUtNjg0NC00YTg3LTliYjUt
YWY0MjYyM2VhNDMxLzEvdW4xS3dUUk93NDNPbVhhTmVLRVU2X2Z4ZllVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9iNjYxMjUtNjg0NC00YTg3LTliYjUtYWY0MjYyM2VhNDMx
LzEvdW4xS3dUUk93NDNPbVhhTmVLRVU2X2Z4ZllVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePqTYok1
AEVjHS7LD9BDu54DWVz+JSbi/f2kDN/YQvf0ItWXelwlC+iSm/HwKUGGYO9lh+nx
gKRSWB9nEch4oKuQ0CcbxyVsWszSH0WjwIgOvFKGq1ewetOI7/nc8Qbq64Taz2lT
UgESex6L9aUsjJwuF+P/smjir35AdHI62ECUyZJs1+pw8wZL8PNi2/1NOGP+GLxJ
n3jYbuHgoL/xJPr+B6/azUctzQg7yJs2V8B+bsuuOehmXU3zgcij9KdOF0LKS+eV
OBEffGtWnmWDJlcnieuc0O7GfepQBwrp5pFxfWsu++P5EE2SamIA7xhMv4ovJPG7
kEW4PGtDm32E8A==
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:59:44 2026 by rpki-client