Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.mft
File: uiZ7jiFT-_yZA4R7RQKivvRLVuY.mft (raw, json)
Hash identifier: 5GhvtpGdTE6x4hSwlODUKrQeZSLCCeZh/h7dKTml5Zo=
Subject key identifier: C4:1F:4F:96:BC:28:3D:08:4E:CF:1C:AF:24:86:E6:84:68:58:5A:01
Authority key identifier: BA:26:7B:8E:21:53:FB:FC:99:03:84:7B:45:02:A2:BE:F4:4B:56:E6
Certificate issuer: /CN=ba267b8e2153fbfc9903847b4502a2bef44b56e6
Certificate serial: 019D341A7039304E68DA374B1CF4E97D3B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uiZ7jiFT-_yZA4R7RQKivvRLVuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.mft
Manifest number: 0227
Signing time: Sat 28 Mar 2026 11:00:40 +0000
Manifest this update: Sat 28 Mar 2026 11:00:40 +0000
Manifest next update: Sun 29 Mar 2026 11:00:40 +0000
Files and hashes: 1: U3z2UwwtJfDwPF04tJx4HYAWqfA.roa (hash: HuQjDIAqN0uW/r+0BXG7wnBu0UWfqjaAQNHtUxgCY7s=)
2: uiZ7jiFT-_yZA4R7RQKivvRLVuY.crl (hash: 6KfFcHtXZzR1LNwrGjbGX4Ow0ksRR2WnhtIo3+UBLbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uiZ7jiFT-_yZA4R7RQKivvRLVuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:1a:70:39:30:4e:68:da:37:4b:1c:f4:e9:7d:3b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba267b8e2153fbfc9903847b4502a2bef44b56e6
Validity
Not Before: Mar 28 11:00:40 2026 GMT
Not After : Mar 29 11:00:40 2026 GMT
Subject: CN=c41f4f96bc283d084ecf1caf2486e68468585a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:50:4e:07:7f:d2:20:55:53:bc:89:88:df:42:
bc:df:10:de:2e:59:7c:bf:ac:92:64:e7:d8:1a:d2:
4b:b9:88:65:a6:88:7f:43:04:ac:44:81:15:47:41:
8f:83:d4:01:65:15:2d:e2:59:97:8a:b1:c6:e6:8b:
49:43:0e:bb:d7:b3:40:39:c2:e5:29:be:77:63:24:
b2:eb:2d:ab:26:d6:60:90:10:70:82:3f:a7:2c:e5:
1b:21:fb:c4:5d:dc:ed:ed:a7:7d:f3:72:df:a3:b0:
be:a1:f3:3f:9d:4f:2d:89:75:24:3b:7f:85:88:4f:
57:00:71:b2:ba:db:7f:5e:6c:29:81:00:c9:d2:30:
85:88:9c:ab:fb:e2:f6:74:33:c0:28:4e:5c:d1:40:
db:73:f9:8a:9e:9b:73:cb:b8:d5:22:32:6e:df:71:
36:0c:08:45:2e:53:44:13:4e:37:78:5e:73:9f:0a:
b1:56:20:8b:c0:43:c2:39:88:73:0a:d1:35:ce:ec:
f8:b7:84:d2:1e:63:21:02:e6:f5:5b:48:ca:e4:43:
1c:49:8c:fa:93:e8:ae:ba:67:0d:17:b4:1d:f4:bf:
41:a8:6e:c1:97:77:bf:fe:b3:2a:1a:e7:38:7f:74:
fa:5e:fd:21:d4:c1:f2:7e:37:f0:e1:ac:a6:c2:b1:
8a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1F:4F:96:BC:28:3D:08:4E:CF:1C:AF:24:86:E6:84:68:58:5A:01
X509v3 Authority Key Identifier:
keyid:BA:26:7B:8E:21:53:FB:FC:99:03:84:7B:45:02:A2:BE:F4:4B:56:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiZ7jiFT-_yZA4R7RQKivvRLVuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ed:fe:2f:f9:db:a4:3e:61:80:05:e4:6f:e4:b7:d1:c1:56:
e5:7b:24:86:6a:1d:a7:07:df:58:e5:db:4c:83:7f:81:f5:66:
06:55:81:c4:aa:44:71:a4:2b:32:9d:e0:03:97:20:13:b0:30:
a1:3f:ea:db:74:99:1c:40:2e:8f:01:ef:20:a4:71:ba:35:56:
b5:eb:15:3e:e7:0a:d5:76:db:34:67:a0:76:34:b8:5f:7c:52:
c9:6a:ff:a1:51:19:c3:91:9e:56:ed:76:d9:d6:5a:62:d3:c1:
87:f9:c0:fe:ae:67:91:9d:f3:d0:50:bb:67:f4:90:54:8d:f3:
19:fd:f0:08:b1:ab:8d:3c:5e:0a:b7:31:18:91:51:9f:90:fa:
f7:11:e6:ce:80:f5:09:1b:26:b1:44:f2:8a:0a:cf:c1:d0:5d:
ca:b7:1a:fc:d0:8d:88:18:25:2f:31:c1:e4:36:de:0e:ff:9f:
d5:93:c0:a8:60:ad:df:c2:d7:5c:ab:65:4c:28:16:a8:f3:ea:
aa:07:b7:3b:63:a6:42:4e:9e:71:68:0d:81:bb:5e:34:74:69:
f7:37:0a:58:8d:76:22:c9:38:05:35:7d:3c:f7:1e:e2:06:3f:
e0:b2:b5:21:28:a4:7d:aa:7a:d5:33:ef:ff:7c:7b:64:0e:dd:
b0:33:e5:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ00GnA5ME5o2jdLHPTpfTuQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMjY3YjhlMjE1M2ZiZmM5OTAzODQ3YjQ1MDJhMmJlZjQ0
YjU2ZTYwHhcNMjYwMzI4MTEwMDQwWhcNMjYwMzI5MTEwMDQwWjAzMTEwLwYDVQQD
EyhjNDFmNGY5NmJjMjgzZDA4NGVjZjFjYWYyNDg2ZTY4NDY4NTg1YTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFBOB3/SIFVTvImI30K83xDeLll8
v6ySZOfYGtJLuYhlpoh/QwSsRIEVR0GPg9QBZRUt4lmXirHG5otJQw6717NAOcLl
Kb53YySy6y2rJtZgkBBwgj+nLOUbIfvEXdzt7ad983Lfo7C+ofM/nU8tiXUkO3+F
iE9XAHGyutt/XmwpgQDJ0jCFiJyr++L2dDPAKE5c0UDbc/mKnptzy7jVIjJu33E2
DAhFLlNEE043eF5znwqxViCLwEPCOYhzCtE1zuz4t4TSHmMhAub1W0jK5EMcSYz6
k+iuumcNF7Qd9L9BqG7Bl3e//rMqGuc4f3T6Xv0h1MHyfjfw4aymwrGKOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQfT5a8KD0ITs8crySG5oRoWFoBMB8GA1UdIwQY
MBaAFLome44hU/v8mQOEe0UCor70S1bmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWlaN2ppRlQtX3laQTRSN1JRS2l2dlJMVnVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85ODVkYTUtNzg4Yy00N2EwLWFiOGUt
ODg1NGIwMTlkYjlhLzEvdWlaN2ppRlQtX3laQTRSN1JRS2l2dlJMVnVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85ODVkYTUtNzg4Yy00N2EwLWFiOGUtODg1NGIwMTlkYjlh
LzEvdWlaN2ppRlQtX3laQTRSN1JRS2l2dlJMVnVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+3+L/nb
pD5hgAXkb+S30cFW5XskhmodpwffWOXbTIN/gfVmBlWBxKpEcaQrMp3gA5cgE7Aw
oT/q23SZHEAujwHvIKRxujVWtesVPucK1XbbNGegdjS4X3xSyWr/oVEZw5GeVu12
2dZaYtPBh/nA/q5nkZ3z0FC7Z/SQVI3zGf3wCLGrjTxeCrcxGJFRn5D69xHmzoD1
CRsmsUTyigrPwdBdyrca/NCNiBglLzHB5DbeDv+f1ZPAqGCt38LXXKtlTCgWqPPq
qge3O2OmQk6ecWgNgbteNHRp9zcKWI12Isk4BTV9PPce4gY/4LK1ISikfap61TPv
/3x7ZA7dsDPl7A==
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:16:32 2026 by rpki-client