Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier: /iI6Eef10JPtmoRgvPxiKHChKNiGck2X/k/AaUJ5TE8=
Subject key identifier: 49:43:37:84:1D:81:3A:9B:41:0C:EA:A0:20:A5:B7:19:EE:21:14:37
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial: 019D1C493F914D8C5E55844AC4A2B61754FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number: 1882
Signing time: Mon 23 Mar 2026 20:00:55 +0000
Manifest this update: Mon 23 Mar 2026 20:00:55 +0000
Manifest next update: Tue 24 Mar 2026 20:00:55 +0000
Files and hashes: 1: IvGUn_2-YX3IhLfXSvYGkrdm6NU.roa (hash: tNs9qrcIboBy4IbyGsAG+6ZLzNLrX28RoLdHaH5fRLc=)
2: LJPLYMO5vOxs_MtRPfGWysA-2S4.roa (hash: RrDOCY1v4Pi574dcipWzNUzibj7ERd9ByP6OHQKcs1o=)
3: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: i+5qn59r12zpg1gloHIG8CUK10h8aFuUmTjrpV5q3Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 16:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1c:49:3f:91:4d:8c:5e:55:84:4a:c4:a2:b6:17:54:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Validity
Not Before: Mar 23 20:00:55 2026 GMT
Not After : Mar 24 20:00:55 2026 GMT
Subject: CN=494337841d813a9b410ceaa020a5b719ee211437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f9:47:fa:e0:2d:74:24:f7:3b:18:b3:c1:75:
ed:95:7a:c6:49:74:bc:0f:35:b7:53:ca:9b:c4:b2:
2e:9c:74:a5:ea:60:0c:ca:d1:d2:32:a2:a0:9c:10:
56:4e:2e:fb:2e:f1:a9:94:cc:30:7d:37:3c:36:5a:
8c:da:1c:f1:f1:97:70:66:28:0f:9e:d7:5f:e7:30:
ad:05:80:10:21:27:05:28:22:b3:8b:17:c2:07:da:
eb:97:d5:ca:ec:07:fe:14:a8:ee:3d:60:46:ec:92:
68:78:7f:72:67:5e:f8:80:e4:0b:1b:d7:5e:38:56:
a9:55:1a:79:f1:6f:73:29:40:7c:1f:d5:d9:d9:c8:
35:a2:c9:dd:25:b0:85:54:a3:e9:6a:6a:aa:ee:f5:
b7:9c:af:db:b3:85:a6:64:7c:d1:cd:1a:b5:c7:7d:
a6:ae:e0:8e:ce:0a:f5:2d:04:85:64:08:fa:14:da:
e2:2f:2a:22:ec:f4:9c:34:94:75:81:63:cf:06:ab:
ab:72:c8:ca:5b:8a:49:b4:60:89:72:86:7c:a8:60:
ea:f9:42:80:3a:50:55:06:96:0c:e5:47:6c:9d:db:
03:dc:77:0a:ac:c9:cb:bb:ba:37:12:ff:0d:5d:1b:
8e:d3:03:c0:3d:e2:bf:16:e5:7b:54:dd:2c:20:60:
ba:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:43:37:84:1D:81:3A:9B:41:0C:EA:A0:20:A5:B7:19:EE:21:14:37
X509v3 Authority Key Identifier:
keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5d:97:ef:cb:dc:e7:91:79:f5:01:a7:b7:8a:1e:a2:6e:cc:
22:11:78:a2:0f:da:11:2e:e7:4b:15:02:ab:98:be:62:30:84:
97:e8:02:c2:5a:a9:6c:c9:bc:f6:54:f2:db:ec:4e:77:02:90:
58:6d:04:31:8a:ef:c9:54:af:f1:91:3e:6f:21:40:74:5a:6b:
fe:ba:6f:54:cf:a1:2e:03:a1:e6:58:a6:44:8e:81:a8:96:7a:
8e:3b:e2:1c:d8:ae:bc:53:48:db:3e:fe:85:e7:b2:22:6f:a9:
cf:4a:74:9a:7d:dc:76:da:57:af:d3:e0:91:ba:c1:e1:1e:5f:
4c:6d:50:18:45:d6:43:d3:79:e3:5b:4a:21:1d:a3:2e:45:8a:
36:90:ae:5c:c7:c6:70:fa:3d:2d:fe:e8:60:75:9c:5c:61:cf:
66:bf:4a:85:91:8e:4b:b2:00:1b:58:a3:ac:ec:4e:0f:34:19:
53:d7:75:ef:9b:e9:3d:a7:c6:23:b5:c7:7f:36:40:aa:72:6f:
72:f5:df:2d:40:ae:ca:3c:f4:ec:3c:33:f8:b2:cb:4d:34:87:
1f:eb:7a:6f:35:b3:64:db:04:db:c2:c5:17:05:70:c4:5a:3b:
3d:1e:13:46:bc:67:33:68:2c:8e:56:5a:5d:6d:fa:2f:a6:3f:
59:85:93:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0cST+RTYxeVYRKxKK2F1T6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNzY0NjdlZjA5MjFjNTExOTBlMmVhNjBmMmFiYjNiZDZl
OWMxOWYwHhcNMjYwMzIzMjAwMDU1WhcNMjYwMzI0MjAwMDU1WjAzMTEwLwYDVQQD
Eyg0OTQzMzc4NDFkODEzYTliNDEwY2VhYTAyMGE1YjcxOWVlMjExNDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPlH+uAtdCT3OxizwXXtlXrGSXS8
DzW3U8qbxLIunHSl6mAMytHSMqKgnBBWTi77LvGplMwwfTc8NlqM2hzx8ZdwZigP
ntdf5zCtBYAQIScFKCKzixfCB9rrl9XK7Af+FKjuPWBG7JJoeH9yZ174gOQLG9de
OFapVRp58W9zKUB8H9XZ2cg1osndJbCFVKPpamqq7vW3nK/bs4WmZHzRzRq1x32m
ruCOzgr1LQSFZAj6FNriLyoi7PScNJR1gWPPBqurcsjKW4pJtGCJcoZ8qGDq+UKA
OlBVBpYM5UdsndsD3HcKrMnLu7o3Ev8NXRuO0wPAPeK/FuV7VN0sIGC6oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElDN4QdgTqbQQzqoCCltxnuIRQ3MB8GA1UdIwQY
MBaAFFN2Rn7wkhxRGQ4upg8quzvW6cGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9jOWRiMGUtOTAzZS00ODVlLWI2N2Yt
MmM3YTJhNzQ2Mjc5LzEvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9jOWRiMGUtOTAzZS00ODVlLWI2N2YtMmM3YTJhNzQ2Mjc5
LzEvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASV2X78vc
55F59QGnt4oeom7MIhF4og/aES7nSxUCq5i+YjCEl+gCwlqpbMm89lTy2+xOdwKQ
WG0EMYrvyVSv8ZE+byFAdFpr/rpvVM+hLgOh5limRI6BqJZ6jjviHNiuvFNI2z7+
heeyIm+pz0p0mn3cdtpXr9PgkbrB4R5fTG1QGEXWQ9N541tKIR2jLkWKNpCuXMfG
cPo9Lf7oYHWcXGHPZr9KhZGOS7IAG1ijrOxODzQZU9d175vpPafGI7XHfzZAqnJv
cvXfLUCuyjz07Dwz+LLLTTSHH+t6bzWzZNsE28LFFwVwxFo7PR4TRrxnM2gsjlZa
XW36L6Y/WYWT8Q==
-----END CERTIFICATE-----
Generated at Mon Mar 23 22:46:33 2026 by rpki-client