Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
File: uG3av8SJUr7ibW1fgogx9ZahVOk.mft (raw, json)
Hash identifier: KI3XuQOGsmrceGnPT7KMvCjDMym7tq/McCUfGF22iV4=
Subject key identifier: C9:F0:36:77:21:62:50:B3:0C:24:E5:43:33:81:7E:32:95:8C:98:09
Authority key identifier: B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
Certificate issuer: /CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Certificate serial: 019D2961C9B54A87AA7AFC4994BBABB834A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
Manifest number: 06DE
Signing time: Thu 26 Mar 2026 09:02:47 +0000
Manifest this update: Thu 26 Mar 2026 09:02:47 +0000
Manifest next update: Fri 27 Mar 2026 09:02:47 +0000
Files and hashes: 1: uG3av8SJUr7ibW1fgogx9ZahVOk.crl (hash: +yreb1qVEPl8Do+pDMqHww1cRhxoudj5zPqB4Xo3Kw4=)
2: vK9AviNHBBZmkmPl_0sSpGx75xE.roa (hash: fK0YnxZPR23tzgwVRccUAsgY3YVzMSTdNPagihczIFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:c9:b5:4a:87:aa:7a:fc:49:94:bb:ab:b8:34:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Validity
Not Before: Mar 26 09:02:47 2026 GMT
Not After : Mar 27 09:02:47 2026 GMT
Subject: CN=c9f03677216250b30c24e54333817e32958c9809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:07:1c:5c:d8:96:4c:00:0b:09:0d:63:4e:
6d:52:b2:b7:9b:7b:c1:3b:db:17:27:f7:3a:3d:ed:
40:ee:7e:85:55:70:ee:ff:28:9c:9e:54:d0:db:a8:
6a:e1:6f:e7:96:5d:d9:4a:ef:03:2b:27:bf:91:f3:
b5:8f:2d:5b:a3:6e:87:6d:58:64:de:f5:4d:b3:0d:
b0:c7:36:47:44:f7:5a:83:02:42:77:83:cf:6c:ad:
bb:ef:cb:25:b0:3d:3d:87:be:91:97:7b:91:3f:d5:
7b:30:a1:e5:95:a3:c7:51:1b:7b:3f:e5:07:59:32:
cf:11:aa:c6:dc:56:ed:87:b3:88:00:3e:f5:f0:08:
3a:45:c4:50:4d:b2:8b:c1:a0:5c:48:a3:c2:b1:4e:
67:ee:06:e7:9a:10:66:5e:61:26:5f:34:e4:68:ad:
08:bd:2a:18:dc:32:13:bd:a1:6b:66:87:a2:b6:d3:
a4:f1:dc:42:ff:5a:d6:52:c4:64:bf:24:b8:35:92:
64:7e:4d:65:17:91:e2:57:3d:02:a1:93:f0:40:74:
8c:d0:f4:34:f9:b7:3c:16:5b:cc:40:c1:69:df:5c:
06:dd:0b:77:49:a6:92:50:64:3f:b9:2e:bf:af:49:
ea:ec:e3:a9:47:d6:83:ae:e9:49:df:a7:f7:25:d4:
ac:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F0:36:77:21:62:50:B3:0C:24:E5:43:33:81:7E:32:95:8C:98:09
X509v3 Authority Key Identifier:
keyid:B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:8f:84:99:88:c7:a8:a6:6b:19:08:ff:3a:ec:1c:25:09:e2:
4e:7b:49:b9:ec:52:7f:f4:15:01:15:bf:65:7d:09:11:56:7d:
d4:f2:57:f9:67:76:61:0a:03:30:ac:33:bf:47:82:b5:0b:08:
1a:32:a9:48:91:dd:82:04:00:70:ed:52:f2:d7:7a:b6:1d:51:
b2:a2:e8:ca:1e:a7:3f:13:e7:82:df:4a:4d:a3:00:b6:eb:56:
4e:32:4a:bb:73:4e:8f:aa:76:75:b3:4c:0a:18:4b:d9:13:f8:
81:71:64:2a:96:3e:a2:a0:ea:dc:56:2b:cb:73:99:d7:44:d7:
eb:bb:72:d5:b8:4e:07:d9:e7:ec:8e:61:4e:9a:62:97:3b:13:
3a:db:b9:6d:72:68:40:41:f5:3f:23:7a:97:b2:5d:88:1d:bc:
76:20:07:0c:0f:6b:12:77:2d:f0:a1:aa:77:5f:e6:4e:c3:a9:
f0:b1:25:9a:65:35:2a:08:39:be:d1:ae:f4:c2:76:72:83:d4:
42:97:5a:22:9f:c7:94:11:b6:0f:d9:da:45:df:7a:4f:1b:69:
d8:d5:87:98:06:a5:e5:54:4a:6b:e9:96:22:3d:e1:70:e1:15:
96:07:fa:12:d4:af:5a:2f:fd:5e:ed:06:8d:d9:83:96:b6:ee:
78:57:14:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYcm1SoeqevxJlLuruDSoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NmRkYWJmYzQ4OTUyYmVlMjZkNmQ1ZjgyODgzMWY1OTZh
MTU0ZTkwHhcNMjYwMzI2MDkwMjQ3WhcNMjYwMzI3MDkwMjQ3WjAzMTEwLwYDVQQD
EyhjOWYwMzY3NzIxNjI1MGIzMGMyNGU1NDMzMzgxN2UzMjk1OGM5ODA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6gHHFzYlkwACwkNY05tUrK3m3vB
O9sXJ/c6Pe1A7n6FVXDu/yicnlTQ26hq4W/nll3ZSu8DKye/kfO1jy1bo26HbVhk
3vVNsw2wxzZHRPdagwJCd4PPbK2778slsD09h76Rl3uRP9V7MKHllaPHURt7P+UH
WTLPEarG3Fbth7OIAD718Ag6RcRQTbKLwaBcSKPCsU5n7gbnmhBmXmEmXzTkaK0I
vSoY3DITvaFrZoeittOk8dxC/1rWUsRkvyS4NZJkfk1lF5HiVz0CoZPwQHSM0PQ0
+bc8FlvMQMFp31wG3Qt3SaaSUGQ/uS6/r0nq7OOpR9aDrulJ36f3JdSsTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnwNnchYlCzDCTlQzOBfjKVjJgJMB8GA1UdIwQY
MBaAFLht2r/EiVK+4m1tX4KIMfWWoVTpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUczYXY4U0pVcjdpYlcxZmdvZ3g5WmFoVk9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy82Njc5ZjQtOTE2NS00YThiLTg4OTIt
N2RlYThmZmYyZTA4LzEvdUczYXY4U0pVcjdpYlcxZmdvZ3g5WmFoVk9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy82Njc5ZjQtOTE2NS00YThiLTg4OTItN2RlYThmZmYyZTA4
LzEvdUczYXY4U0pVcjdpYlcxZmdvZ3g5WmFoVk9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6Y+EmYjH
qKZrGQj/OuwcJQniTntJuexSf/QVARW/ZX0JEVZ91PJX+Wd2YQoDMKwzv0eCtQsI
GjKpSJHdggQAcO1S8td6th1RsqLoyh6nPxPngt9KTaMAtutWTjJKu3NOj6p2dbNM
ChhL2RP4gXFkKpY+oqDq3FYry3OZ10TX67ty1bhOB9nn7I5hTppilzsTOtu5bXJo
QEH1PyN6l7JdiB28diAHDA9rEnct8KGqd1/mTsOp8LElmmU1Kgg5vtGu9MJ2coPU
QpdaIp/HlBG2D9naRd96Txtp2NWHmAal5VRKa+mWIj3hcOEVlgf6EtSvWi/9Xu0G
jdmDlrbueFcUAA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:53 2026 by rpki-client