Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
File: urRT2Xui9KBFhD5rSpU7PlEG6vI.mft (raw, json)
Hash identifier: UDAw8jmn8FDPcEIly7n7flHSqvdA4WpNKw9vCyb3kEI=
Subject key identifier: 2D:C2:1F:FA:C2:C9:91:40:07:03:70:21:4F:DF:BD:C9:2C:5B:DE:7F
Authority key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
Certificate issuer: /CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Certificate serial: 019D2772B7F609C57842016827A5D4750767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
Manifest number: 1893
Signing time: Thu 26 Mar 2026 00:02:02 +0000
Manifest this update: Thu 26 Mar 2026 00:02:02 +0000
Manifest next update: Fri 27 Mar 2026 00:02:02 +0000
Files and hashes: 1: urRT2Xui9KBFhD5rSpU7PlEG6vI.crl (hash: hw/V0ncswOM4tC/I4Ich1iqiGCsnaEcQ2b42Yjfgsx4=)
2: y7cO-uvd-g6IKXPnSmNUZia9w1s.roa (hash: aa7Xz8229L+R/TET5wKLzyMqkiPkHrosbEK4nrHeitk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b7:f6:09:c5:78:42:01:68:27:a5:d4:75:07:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Validity
Not Before: Mar 26 00:02:02 2026 GMT
Not After : Mar 27 00:02:02 2026 GMT
Subject: CN=2dc21ffac2c99140070370214fdfbdc92c5bde7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ca:bb:65:8c:3a:47:bf:da:da:4e:18:d0:ea:
2e:ab:31:4e:17:38:7c:ab:d1:b1:85:40:94:b9:8e:
c2:72:18:5d:35:53:85:70:e9:d5:2c:3a:77:0b:b5:
e6:ab:5f:a4:d4:a8:89:da:b7:79:06:5d:f3:fa:05:
0a:7e:ff:8e:4a:d1:8c:e1:f8:6c:a9:b5:4a:d6:3e:
9d:36:17:cc:a8:3c:9c:0d:ec:56:0d:cc:bb:f5:22:
ca:a5:84:be:10:8d:d6:ad:a4:e1:41:16:6a:43:ac:
c8:67:ab:4e:b8:e1:de:ae:b0:57:95:d9:30:e9:c2:
83:1d:be:80:4c:b1:53:9c:3e:0f:25:6b:7d:fc:7c:
c7:61:62:4e:3e:7c:81:6d:86:d9:ca:57:4c:b1:13:
9f:09:d9:90:c1:22:26:14:ff:a7:ac:1c:2b:b4:08:
d8:64:ff:2a:83:de:2d:b4:03:51:b8:a0:26:02:fb:
cc:21:b2:d3:fa:d6:23:7a:4e:2b:a5:c9:fc:28:aa:
9c:44:6b:9d:7a:c0:c6:92:f6:ba:eb:26:35:e3:c2:
4c:5c:84:d5:f0:bc:0b:e5:82:72:7f:10:0f:d8:70:
44:28:9a:d1:a9:d1:77:4e:03:20:c1:a8:69:85:05:
6f:e0:c2:54:db:74:29:12:b4:af:4c:89:02:18:b0:
7b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C2:1F:FA:C2:C9:91:40:07:03:70:21:4F:DF:BD:C9:2C:5B:DE:7F
X509v3 Authority Key Identifier:
keyid:BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ce:35:8c:29:92:e5:c0:9d:41:e1:78:c1:13:eb:97:ea:c4:
42:32:34:fa:95:87:be:c9:82:6b:41:20:20:0b:8e:74:16:70:
ba:7d:24:c4:59:7d:cf:e8:b7:b1:01:95:8d:9b:84:e7:a8:ae:
c6:94:76:de:94:88:8b:12:fc:30:5b:71:46:8d:a4:03:3b:19:
f8:3c:ca:77:ac:bc:58:d7:04:65:e2:a7:c4:3a:b9:f5:8e:90:
1f:f2:eb:d4:81:d8:82:d0:eb:43:40:f6:48:ca:ab:d5:00:78:
34:40:09:b7:f6:d4:05:f6:84:ae:b0:c2:c5:ff:2b:2b:61:1b:
1c:84:b6:60:c1:b6:ea:fd:67:20:86:59:20:15:22:ed:ff:c6:
f6:e9:a2:da:f5:dc:37:d5:cf:a0:6f:58:21:0f:0f:27:fc:3d:
e3:6e:f8:8b:94:21:57:4f:5f:31:ea:cb:9e:71:b3:c4:43:b4:
e9:8e:14:4c:1b:b3:63:69:b3:cf:eb:91:47:b2:a3:d9:3c:fc:
bd:52:e0:af:24:88:06:bc:64:e3:2d:86:85:7e:78:80:23:d1:
59:78:ff:7a:f4:7c:4b:b9:66:a9:33:3c:fe:68:84:fc:a7:79:
de:fc:f3:f8:c2:f8:ca:16:77:5a:b4:26:9c:af:3c:6f:03:e6:
fc:5f:9c:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncrf2CcV4QgFoJ6XUdQdnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYjQ1M2Q5N2JhMmY0YTA0NTg0M2U2YjRhOTUzYjNlNTEw
NmVhZjIwHhcNMjYwMzI2MDAwMjAyWhcNMjYwMzI3MDAwMjAyWjAzMTEwLwYDVQQD
EygyZGMyMWZmYWMyYzk5MTQwMDcwMzcwMjE0ZmRmYmRjOTJjNWJkZTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcq7ZYw6R7/a2k4Y0OouqzFOFzh8
q9GxhUCUuY7CchhdNVOFcOnVLDp3C7Xmq1+k1KiJ2rd5Bl3z+gUKfv+OStGM4fhs
qbVK1j6dNhfMqDycDexWDcy79SLKpYS+EI3WraThQRZqQ6zIZ6tOuOHerrBXldkw
6cKDHb6ATLFTnD4PJWt9/HzHYWJOPnyBbYbZyldMsROfCdmQwSImFP+nrBwrtAjY
ZP8qg94ttANRuKAmAvvMIbLT+tYjek4rpcn8KKqcRGudesDGkva66yY148JMXITV
8LwL5YJyfxAP2HBEKJrRqdF3TgMgwahphQVv4MJU23QpErSvTIkCGLB75wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3CH/rCyZFABwNwIU/fvcksW95/MB8GA1UdIwQY
MBaAFLq0U9l7ovSgRYQ+a0qVOz5RBuryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82NzAzY2EtY2VkNC00MjA3LWFiMDUt
NGE2ZjU1NzcxYmQxLzEvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82NzAzY2EtY2VkNC00MjA3LWFiMDUtNGE2ZjU1NzcxYmQx
LzEvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAas41jCmS
5cCdQeF4wRPrl+rEQjI0+pWHvsmCa0EgIAuOdBZwun0kxFl9z+i3sQGVjZuE56iu
xpR23pSIixL8MFtxRo2kAzsZ+DzKd6y8WNcEZeKnxDq59Y6QH/Lr1IHYgtDrQ0D2
SMqr1QB4NEAJt/bUBfaErrDCxf8rK2EbHIS2YMG26v1nIIZZIBUi7f/G9umi2vXc
N9XPoG9YIQ8PJ/w94274i5QhV09fMerLnnGzxEO06Y4UTBuzY2mzz+uRR7Kj2Tz8
vVLgrySIBrxk4y2GhX54gCPRWXj/evR8S7lmqTM8/miE/Kd53vzz+ML4yhZ3WrQm
nK88bwPm/F+crw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:56:05 2026 by rpki-client