Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
File: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft (raw, json)
Hash identifier: oLCLqXkLYDzSjZxXRUuxf+5pbljbG6xIa3untnEbjA4=
Subject key identifier: 0A:43:48:8C:DD:C8:19:6E:4E:40:43:6F:68:D8:E7:5C:B4:82:5D:3C
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Certificate issuer: /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial: 019DF9F21F405E1F25978C38A5E0E6DA5ED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
Manifest number: 1216
Signing time: Tue 05 May 2026 21:01:27 +0000
Manifest this update: Tue 05 May 2026 21:01:27 +0000
Manifest next update: Wed 06 May 2026 21:01:27 +0000
Files and hashes: 1: 7_6PqMOGWDvG_0a0CBpZCjoPH3M.roa (hash: ELHzePk+eTFwUV0lzyfOvVlVrH0Oe68AnbgtcOo/mUI=)
2: AwKBOhlF9uaXHOgDwaWxiRTycC8.roa (hash: ulOM++8A5dnNmN9Kuzc/O4/HWsO5q48Fbn6dGRtakzw=)
3: eSb5SaQiTFGxJv1r1Rg9Zwy6k48.roa (hash: 3gfCITmerObL4KZJwGEUq8/MM5Wu7GSAZmrfKVP18TY=)
4: pSuYpl6WxbthlcwSwOwfJ2eEOEM.roa (hash: 0ZM4/++BdSQLGaayny50tbB3TCayRFezzAq6CjxEPBs=)
5: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl (hash: R+uuutl8LrojQ0fxo9n/ZZA/HQnahYOI5oo8NadaZt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:f2:1f:40:5e:1f:25:97:8c:38:a5:e0:e6:da:5e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Validity
Not Before: May 5 21:01:27 2026 GMT
Not After : May 6 21:01:27 2026 GMT
Subject: CN=0a43488cddc8196e4e40436f68d8e75cb4825d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:09:09:a4:f1:c1:4d:57:07:4d:73:59:d9:
63:d1:37:4a:cd:3d:43:db:19:2d:6f:cc:5c:e8:8b:
d4:cb:7a:63:cf:6c:e7:8b:93:a6:8c:e8:0e:3d:90:
42:cd:af:75:87:df:c9:d2:7d:07:cc:b8:45:78:fe:
43:54:7f:af:78:7e:74:8c:57:cc:41:5b:2f:b1:db:
85:79:e6:c6:c1:93:ed:2e:a6:24:49:9c:ba:3e:4a:
96:69:69:e9:f8:aa:f3:fe:56:b8:a7:e3:b6:20:6e:
73:f5:0c:fe:cd:9a:ca:d6:00:4e:29:79:b2:12:46:
37:d1:37:80:b1:1a:df:36:c8:b7:fa:0e:95:38:c2:
60:97:0d:ee:27:6a:31:49:03:01:df:c2:be:60:be:
3e:94:4c:88:c6:81:19:fa:0b:d1:1d:91:2f:b8:4e:
3e:79:de:eb:07:9d:65:75:61:27:ab:8d:97:9a:a7:
55:f1:48:2c:54:ec:8d:db:62:c5:95:35:0b:17:5c:
1f:5a:97:37:f5:3b:62:25:6f:79:3b:58:70:75:6a:
c7:49:8f:d5:22:7d:ae:a6:c6:70:48:72:19:62:99:
3a:d6:87:c2:2b:9b:0d:54:dc:a3:43:e1:14:f4:e6:
8e:c0:ba:3c:a0:cb:69:e3:53:3c:27:60:11:23:0a:
7c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:43:48:8C:DD:C8:19:6E:4E:40:43:6F:68:D8:E7:5C:B4:82:5D:3C
X509v3 Authority Key Identifier:
keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:74:96:69:63:f0:15:8a:d1:16:d8:4e:1e:35:25:f4:20:98:
79:2a:24:9d:15:99:87:2c:2c:3e:87:fc:28:99:91:eb:ec:28:
fc:57:e3:c7:9a:73:30:9a:98:93:2f:0b:d5:79:c3:b3:8c:ca:
09:dc:8c:83:ff:4c:2b:2e:ae:7a:e6:db:dd:38:db:4f:84:83:
bf:e8:68:28:d4:f3:4a:1e:fb:7d:86:4e:13:28:f8:0d:4d:c7:
c5:63:4a:d2:7e:14:3b:55:1b:8d:fa:b1:f6:8e:21:7b:bb:49:
89:79:20:7f:20:4d:f6:1b:f6:02:fb:f8:fb:e3:21:26:fb:71:
9a:5c:11:69:fd:8e:99:c2:29:53:f1:6e:de:c2:fe:c9:d6:af:
2b:00:b3:49:44:7c:a7:f3:0c:86:21:0d:96:ad:60:dd:1a:60:
02:97:9c:cc:3e:f5:3c:0b:e4:60:e1:8d:e6:1c:da:6d:c8:17:
28:4d:cf:66:ac:51:ef:b5:3d:ab:48:3f:95:89:df:0c:fc:21:
be:3c:75:94:8f:0e:8c:06:25:05:ad:3c:df:7e:5b:cf:02:b2:
9c:f0:75:c2:57:64:68:25:5e:0f:a9:27:c6:0d:3e:a0:a3:99:
0b:d3:83:9c:a5:61:b1:e6:8e:c7:98:ca:f1:20:82:49:6c:e1:
48:0d:ac:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ358h9AXh8ll4w4peDm2l7XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MjA3Njk3ZDBiN2MyNDE5OWU2ZGQxMjgyYjQ5YjU2Y2Vm
MDI0NGYwHhcNMjYwNTA1MjEwMTI3WhcNMjYwNTA2MjEwMTI3WjAzMTEwLwYDVQQD
EygwYTQzNDg4Y2RkYzgxOTZlNGU0MDQzNmY2OGQ4ZTc1Y2I0ODI1ZDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWAJCaTxwU1XB01zWdlj0TdKzT1D
2xktb8xc6IvUy3pjz2zni5OmjOgOPZBCza91h9/J0n0HzLhFeP5DVH+veH50jFfM
QVsvsduFeebGwZPtLqYkSZy6PkqWaWnp+Krz/la4p+O2IG5z9Qz+zZrK1gBOKXmy
EkY30TeAsRrfNsi3+g6VOMJglw3uJ2oxSQMB38K+YL4+lEyIxoEZ+gvRHZEvuE4+
ed7rB51ldWEnq42XmqdV8UgsVOyN22LFlTULF1wfWpc39TtiJW95O1hwdWrHSY/V
In2upsZwSHIZYpk61ofCK5sNVNyjQ+EU9OaOwLo8oMtp41M8J2ARIwp8kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApDSIzdyBluTkBDb2jY51y0gl08MB8GA1UdIwQY
MBaAFLggdpfQt8JBmebdEoK0m1bO8CRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUNCMmw5QzN3a0daNXQwU2dyU2JWczd3SkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iOTkzZWYtYWFhNy00MDBjLThkYjct
OTZkMzA0YzhkYjAyLzEvdUNCMmw5QzN3a0daNXQwU2dyU2JWczd3SkU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9iOTkzZWYtYWFhNy00MDBjLThkYjctOTZkMzA0YzhkYjAy
LzEvdUNCMmw5QzN3a0daNXQwU2dyU2JWczd3SkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsHSWaWPw
FYrRFthOHjUl9CCYeSoknRWZhywsPof8KJmR6+wo/Ffjx5pzMJqYky8L1XnDs4zK
CdyMg/9MKy6ueubb3TjbT4SDv+hoKNTzSh77fYZOEyj4DU3HxWNK0n4UO1Ubjfqx
9o4he7tJiXkgfyBN9hv2Avv4++MhJvtxmlwRaf2OmcIpU/Fu3sL+ydavKwCzSUR8
p/MMhiENlq1g3RpgApeczD71PAvkYOGN5hzabcgXKE3PZqxR77U9q0g/lYnfDPwh
vjx1lI8OjAYlBa08335bzwKynPB1wldkaCVeD6knxg0+oKOZC9ODnKVhseaOx5jK
8SCCSWzhSA2s3Q==
-----END CERTIFICATE-----
Generated at Wed May 6 03:46:54 2026 by rpki-client