Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
File: u2MubMSrZyETUbUpP4Fdfl8JOr0.mft (raw, json)
Hash identifier: YIFrN7MBdvZQsAR6JFHsIS6IesPdo3vMYB3+jQAEypU=
Subject key identifier: 2E:BA:4F:2E:CA:2D:91:F8:44:17:88:F4:8C:81:9C:4A:B5:02:0B:A7
Authority key identifier: BB:63:2E:6C:C4:AB:67:21:13:51:B5:29:3F:81:5D:7E:5F:09:3A:BD
Certificate issuer: /CN=bb632e6cc4ab67211351b5293f815d7e5f093abd
Certificate serial: 019D37F72CD90E43800B604376C24481C866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
Manifest number: 057D
Signing time: Sun 29 Mar 2026 05:00:38 +0000
Manifest this update: Sun 29 Mar 2026 05:00:38 +0000
Manifest next update: Mon 30 Mar 2026 05:00:38 +0000
Files and hashes: 1: u2MubMSrZyETUbUpP4Fdfl8JOr0.crl (hash: X8UFHqYX06AqCpDEZyukCSJugUTLxXoJXVBykCDcUVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:2c:d9:0e:43:80:0b:60:43:76:c2:44:81:c8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb632e6cc4ab67211351b5293f815d7e5f093abd
Validity
Not Before: Mar 29 05:00:38 2026 GMT
Not After : Mar 30 05:00:38 2026 GMT
Subject: CN=2eba4f2eca2d91f8441788f48c819c4ab5020ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:61:7b:f7:39:90:51:92:45:3f:40:69:89:7b:
b2:08:8e:19:75:17:64:72:56:60:77:c0:27:e3:ec:
a3:a4:58:56:d8:b1:94:19:5d:c4:ab:12:60:55:50:
15:f8:4b:bd:6f:9b:b7:37:4b:67:4e:10:22:1c:ae:
85:13:40:e7:e2:bd:13:f3:85:dd:d2:42:bb:cc:ea:
e8:1a:0c:25:65:39:3a:77:3b:01:0e:81:e5:c4:83:
1a:7e:96:cf:15:c9:ba:e0:73:65:79:4c:64:2c:a7:
f1:4a:ad:75:f0:89:d2:94:3b:f5:ed:d9:46:3b:03:
c7:9f:96:ef:f7:4b:db:89:d2:b6:fc:46:db:ac:53:
ae:61:c4:66:0a:e0:cf:84:dc:aa:e6:d0:e5:11:c4:
3d:e0:51:69:42:73:39:3e:6d:79:dd:7b:75:44:f7:
ba:63:57:d8:2e:4e:81:62:1e:ad:20:a2:a7:e0:29:
a2:8e:fc:9b:19:c8:67:68:9b:09:84:cb:d4:63:09:
d7:b9:fd:ae:0d:0e:01:bb:fb:22:32:32:1e:09:ff:
6f:21:6b:87:08:3b:3c:5a:ae:9f:f6:8f:0c:cf:de:
c4:09:44:2d:95:b7:3d:38:df:3a:25:97:64:bc:5a:
97:f3:b4:05:1d:1a:38:aa:e9:2f:15:8c:93:eb:8b:
b1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BA:4F:2E:CA:2D:91:F8:44:17:88:F4:8C:81:9C:4A:B5:02:0B:A7
X509v3 Authority Key Identifier:
keyid:BB:63:2E:6C:C4:AB:67:21:13:51:B5:29:3F:81:5D:7E:5F:09:3A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9f:bf:f6:c8:bc:26:1f:80:3a:25:96:ac:ff:96:06:35:65:
05:b7:da:21:4f:19:39:65:d3:de:34:f2:60:ed:9c:68:b0:ae:
b7:c1:87:7d:42:6f:5c:21:4c:45:a2:ee:bd:b8:4a:b0:c6:7c:
0f:a1:ee:64:5a:f0:6e:12:25:32:f0:23:4c:56:85:38:1f:ed:
9d:7b:ff:c1:cc:a4:a9:f7:3f:32:04:70:ed:01:32:2b:4c:f7:
00:36:3e:2e:da:b3:00:47:77:d6:50:1e:84:7d:0b:a1:00:15:
24:1d:e4:df:cc:5a:96:b5:e1:40:53:63:2f:80:1a:60:0d:1b:
28:17:cf:3d:d2:16:da:97:cd:53:cc:8d:55:cb:7e:80:c1:c3:
3b:8f:03:eb:98:56:b1:6b:8c:8c:a2:b3:ce:c2:41:57:1d:97:
98:bb:73:34:41:ab:c0:57:04:f4:45:93:69:a5:46:1e:3b:1f:
a7:a5:96:f3:2e:e5:7b:5a:fd:a6:9d:63:1c:3c:ce:6e:bf:bf:
2c:ab:88:d6:74:44:0a:96:1c:84:11:7b:59:7d:fe:53:32:71:
1e:c4:25:e5:24:75:1b:53:aa:5a:cc:37:01:fd:7a:dd:89:16:
2b:7e:f5:64:e8:ba:6a:0a:7d:d3:b6:9d:2b:63:40:bc:6c:ed:
bb:a5:2d:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039yzZDkOAC2BDdsJEgchmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNjMyZTZjYzRhYjY3MjExMzUxYjUyOTNmODE1ZDdlNWYw
OTNhYmQwHhcNMjYwMzI5MDUwMDM4WhcNMjYwMzMwMDUwMDM4WjAzMTEwLwYDVQQD
EygyZWJhNGYyZWNhMmQ5MWY4NDQxNzg4ZjQ4YzgxOWM0YWI1MDIwYmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22F79zmQUZJFP0BpiXuyCI4ZdRdk
clZgd8An4+yjpFhW2LGUGV3EqxJgVVAV+Eu9b5u3N0tnThAiHK6FE0Dn4r0T84Xd
0kK7zOroGgwlZTk6dzsBDoHlxIMafpbPFcm64HNleUxkLKfxSq118InSlDv17dlG
OwPHn5bv90vbidK2/EbbrFOuYcRmCuDPhNyq5tDlEcQ94FFpQnM5Pm153Xt1RPe6
Y1fYLk6BYh6tIKKn4CmijvybGchnaJsJhMvUYwnXuf2uDQ4Bu/siMjIeCf9vIWuH
CDs8Wq6f9o8Mz97ECUQtlbc9ON86JZdkvFqX87QFHRo4qukvFYyT64uxjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC66Ty7KLZH4RBeI9IyBnEq1AgunMB8GA1UdIwQY
MBaAFLtjLmzEq2chE1G1KT+BXX5fCTq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTJNdWJNU3JaeUVUVWJVcFA0RmRmbDhKT3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iMTM4NGMtNGI1Yy00MmM3LWEzY2Qt
ZmI4YWQyZGIxZjIwLzEvdTJNdWJNU3JaeUVUVWJVcFA0RmRmbDhKT3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iMTM4NGMtNGI1Yy00MmM3LWEzY2QtZmI4YWQyZGIxZjIw
LzEvdTJNdWJNU3JaeUVUVWJVcFA0RmRmbDhKT3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUp+/9si8
Jh+AOiWWrP+WBjVlBbfaIU8ZOWXT3jTyYO2caLCut8GHfUJvXCFMRaLuvbhKsMZ8
D6HuZFrwbhIlMvAjTFaFOB/tnXv/wcykqfc/MgRw7QEyK0z3ADY+LtqzAEd31lAe
hH0LoQAVJB3k38xalrXhQFNjL4AaYA0bKBfPPdIW2pfNU8yNVct+gMHDO48D65hW
sWuMjKKzzsJBVx2XmLtzNEGrwFcE9EWTaaVGHjsfp6WW8y7le1r9pp1jHDzObr+/
LKuI1nRECpYchBF7WX3+UzJxHsQl5SR1G1OqWsw3Af163YkWK371ZOi6agp907ad
K2NAvGztu6UtvQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:36 2026 by rpki-client