Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
File: uytI9kNYARx4QtPOxcstRwaLg20.mft (raw, json)
Hash identifier: 9BzzPPkhUdQONWAge0aWttcNZB8SFFmdYtAkGr5gzSM=
Subject key identifier: C1:4A:C6:23:88:FC:1C:5A:41:C2:5B:A6:28:91:D5:69:D5:FA:F8:DD
Authority key identifier: BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
Certificate issuer: /CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Certificate serial: 019D38663D907F6B8E9C11586D9E60044EE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
Manifest number: 18A2
Signing time: Sun 29 Mar 2026 07:01:57 +0000
Manifest this update: Sun 29 Mar 2026 07:01:57 +0000
Manifest next update: Mon 30 Mar 2026 07:01:57 +0000
Files and hashes: 1: NM07OftKQkCH2joVcvMTn-HHTmY.roa (hash: rU/LdGSeAxe5BfVN3XEqDaj1sPRpRHFtD8l5ShzGTNQ=)
2: kLGeIFwIepUgbnOKoqHRUYefBPQ.roa (hash: F4tTQgdXduDuBtHDnLeKsOpcxeDgSOzzu6aJ7AclprY=)
3: uytI9kNYARx4QtPOxcstRwaLg20.crl (hash: 17mulSH1tt5b+y3Q4fBc0Uz3T2w0mH3Ke79QYZoz0ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3d:90:7f:6b:8e:9c:11:58:6d:9e:60:04:4e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Validity
Not Before: Mar 29 07:01:57 2026 GMT
Not After : Mar 30 07:01:57 2026 GMT
Subject: CN=c14ac62388fc1c5a41c25ba62891d569d5faf8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7e:49:9d:48:3d:b2:45:c6:ab:47:42:1f:14:
81:42:9b:5a:bc:68:f0:49:d9:d4:5e:79:17:fa:a3:
de:f7:0c:34:15:c9:1a:e3:9b:12:ef:42:2e:9f:6c:
b1:db:3b:f5:0b:fb:cf:d1:79:ef:75:83:03:19:47:
33:ad:80:be:4c:0a:34:ad:7e:21:34:b5:e8:02:0b:
96:e4:a6:12:f1:aa:5c:5a:66:ae:ee:38:33:c5:5a:
4f:13:00:50:a6:97:18:25:04:49:d2:6b:f6:5d:f1:
3a:e2:04:59:d6:9b:d6:09:7d:dc:dd:c0:d9:31:c3:
84:14:ff:c3:3c:33:71:2c:2b:c8:3e:d2:bc:8d:01:
59:96:15:3e:3d:aa:1a:01:09:e0:ad:10:31:90:98:
d3:b3:78:98:cf:08:f5:f3:11:5b:10:0e:29:e9:88:
ce:80:b6:dc:3a:3f:b6:87:f7:8a:5c:6f:9b:3a:51:
5e:46:55:4e:23:49:1a:c7:8b:3c:5b:39:07:c1:34:
30:34:f4:61:8f:cd:5a:eb:bb:76:12:4c:67:b4:03:
0a:d9:e5:06:d3:e6:2e:c8:17:3a:a1:b9:93:c2:e8:
4d:86:02:46:74:d7:42:61:9e:47:b2:b1:d1:83:23:
f5:cd:6a:34:82:57:4d:d9:be:9f:4d:eb:03:93:5e:
35:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4A:C6:23:88:FC:1C:5A:41:C2:5B:A6:28:91:D5:69:D5:FA:F8:DD
X509v3 Authority Key Identifier:
keyid:BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bd:20:0c:71:83:ee:40:7f:8d:07:61:b6:79:f6:02:6a:17:
14:b4:fa:e4:f9:b1:5b:fd:d8:ca:31:48:da:66:76:7b:53:7d:
f3:a7:e7:78:44:3d:d3:e3:a4:d9:ba:e8:b4:5a:8a:77:60:ed:
d8:b4:f2:c6:9a:f9:0c:f4:ae:b9:c6:04:00:04:97:30:85:bb:
6d:d5:4a:ce:51:78:bb:7a:a1:1f:b5:af:40:20:6c:b1:45:c5:
b7:82:f7:be:8f:e5:05:16:16:30:10:f2:be:ae:a2:50:b8:ce:
25:8c:c1:29:cb:ee:e8:69:c5:72:87:d5:b8:84:4c:05:b9:6c:
8f:c3:16:64:51:d0:97:a7:7c:b8:0d:88:af:eb:63:eb:da:79:
73:54:bd:a6:a5:b4:61:60:04:29:5d:c9:94:a3:b0:3f:e0:12:
26:18:10:83:75:cd:b8:2c:52:3f:66:65:ed:03:21:f2:4a:fe:
23:d4:1d:01:97:fd:15:6b:d9:09:92:d3:37:4a:d4:5a:5c:d5:
f1:02:ad:d9:36:82:7b:b0:36:71:6d:36:af:36:6b:d1:a3:c3:
d9:23:56:d2:a1:63:24:eb:c6:0e:18:b2:8e:12:1d:32:a2:35:
21:be:54:82:1d:47:15:f1:82:1c:06:91:d8:04:e6:9d:3c:02:
d9:69:49:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zj2Qf2uOnBFYbZ5gBE7pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMmI0OGY2NDM1ODAxMWM3ODQyZDNjZWM1Y2IyZDQ3MDY4
YjgzNmQwHhcNMjYwMzI5MDcwMTU3WhcNMjYwMzMwMDcwMTU3WjAzMTEwLwYDVQQD
EyhjMTRhYzYyMzg4ZmMxYzVhNDFjMjViYTYyODkxZDU2OWQ1ZmFmOGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH5JnUg9skXGq0dCHxSBQptavGjw
SdnUXnkX+qPe9ww0Fcka45sS70Iun2yx2zv1C/vP0XnvdYMDGUczrYC+TAo0rX4h
NLXoAguW5KYS8apcWmau7jgzxVpPEwBQppcYJQRJ0mv2XfE64gRZ1pvWCX3c3cDZ
McOEFP/DPDNxLCvIPtK8jQFZlhU+PaoaAQngrRAxkJjTs3iYzwj18xFbEA4p6YjO
gLbcOj+2h/eKXG+bOlFeRlVOI0kax4s8WzkHwTQwNPRhj81a67t2EkxntAMK2eUG
0+YuyBc6obmTwuhNhgJGdNdCYZ5HsrHRgyP1zWo0gldN2b6fTesDk1416QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFKxiOI/BxaQcJbpiiR1WnV+vjdMB8GA1UdIwQY
MBaAFLsrSPZDWAEceELTzsXLLUcGi4NtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXl0STlrTllBUng0UXRQT3hjc3RSd2FMZzIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNjZiNmItY2RkZS00MGNiLWExODIt
YzUyMjk4NjNhZWJhLzEvdXl0STlrTllBUng0UXRQT3hjc3RSd2FMZzIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mNjZiNmItY2RkZS00MGNiLWExODItYzUyMjk4NjNhZWJh
LzEvdXl0STlrTllBUng0UXRQT3hjc3RSd2FMZzIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAML0gDHGD
7kB/jQdhtnn2AmoXFLT65PmxW/3YyjFI2mZ2e1N986fneEQ90+Ok2brotFqKd2Dt
2LTyxpr5DPSuucYEAASXMIW7bdVKzlF4u3qhH7WvQCBssUXFt4L3vo/lBRYWMBDy
vq6iULjOJYzBKcvu6GnFcofVuIRMBblsj8MWZFHQl6d8uA2Ir+tj69p5c1S9pqW0
YWAEKV3JlKOwP+ASJhgQg3XNuCxSP2Zl7QMh8kr+I9QdAZf9FWvZCZLTN0rUWlzV
8QKt2TaCe7A2cW02rzZr0aPD2SNW0qFjJOvGDhiyjhIdMqI1Ib5Ugh1HFfGCHAaR
2ATmnTwC2WlJVA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:30 2026 by rpki-client