Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
File: uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft (raw, json)
Hash identifier: LFYI+H6NrmyvTfSODUIlKNqE0yKSD98ma0RnChCu8Us=
Subject key identifier: 45:AA:75:97:54:C1:DD:5C:8F:3A:9B:74:39:53:2E:A9:03:35:C2:E6
Authority key identifier: B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E
Certificate issuer: /CN=b9145315b44cb65d2a791a0ae5823664d0c4445e
Certificate serial: 019D2AE015255FE3ADEB131338F572559539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 16:00:21 +0000
Manifest this update: Thu 26 Mar 2026 16:00:21 +0000
Manifest next update: Fri 27 Mar 2026 16:00:21 +0000
Files and hashes: 1: uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl (hash: gCiRaw2NONy1D1EhWf1XALPCyqN+tlOkLYzueY9pLAE=)
2: x5xm4vdFbBHznlJcV5ZiHWVVd_M.roa (hash: SnPKDlLfVQyV1q/jxDCUh9flkRaLQ6KKhfXTPJRDfDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:15:25:5f:e3:ad:eb:13:13:38:f5:72:55:95:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9145315b44cb65d2a791a0ae5823664d0c4445e
Validity
Not Before: Mar 26 16:00:21 2026 GMT
Not After : Mar 27 16:00:21 2026 GMT
Subject: CN=45aa759754c1dd5c8f3a9b7439532ea90335c2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f0:fa:8e:bb:f1:80:1d:5b:75:1f:14:4e:8c:
e6:19:23:2e:07:75:7e:d4:8d:8d:a7:1d:7e:f4:c7:
0b:90:07:1c:f2:ef:ff:40:35:f2:96:fe:4f:2c:0f:
f1:07:ea:83:12:12:95:00:76:90:5d:a5:cb:1e:a2:
2a:61:43:3a:0c:5a:5f:19:c3:ac:56:2d:83:98:9f:
13:e8:8e:16:78:5f:5f:4b:28:30:f6:bb:d3:cc:15:
07:9b:f7:18:82:17:21:19:62:10:08:17:b0:5c:32:
0a:38:fe:b5:96:a4:4f:78:d7:d5:2f:de:ee:06:32:
bc:6b:87:b5:84:1c:92:64:db:1f:f9:d8:ca:e0:f0:
9c:04:0c:ad:d3:87:78:3d:2e:c7:1f:09:44:29:90:
a0:24:21:92:9e:be:1e:43:ef:d6:69:c2:05:68:05:
3b:6b:42:91:f2:60:02:94:e4:9b:32:ac:73:dc:84:
91:5d:33:a0:60:d5:50:23:ab:3d:83:41:0e:14:7a:
00:89:57:14:d8:36:68:60:09:a2:f7:94:4b:82:fa:
04:5a:39:c2:aa:a0:35:34:e1:7b:3f:c1:16:4b:4c:
78:84:17:ed:34:a9:56:34:82:77:f2:02:2a:0d:e8:
6f:a1:ee:5c:6c:76:91:8f:3a:3e:04:11:f5:2c:20:
4a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AA:75:97:54:C1:DD:5C:8F:3A:9B:74:39:53:2E:A9:03:35:C2:E6
X509v3 Authority Key Identifier:
keyid:B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:00:a1:12:ca:5f:59:59:b9:f7:78:34:ff:90:bc:2a:a5:e9:
f7:9a:3e:57:5c:28:5f:b3:e4:28:68:85:ef:28:ef:b5:80:5b:
ad:42:1d:6d:89:68:fa:33:ef:2f:1e:d8:f8:18:9d:90:76:e4:
82:81:d6:a3:bd:fe:10:b6:38:4d:53:db:95:16:49:d1:6e:d2:
40:bc:4d:13:5c:d5:74:a7:60:98:c9:2e:a0:f4:2c:24:00:70:
64:fb:93:3f:e7:9b:73:fa:fa:b4:ba:e7:ce:74:1d:f9:d4:17:
f9:ad:7e:42:ff:be:31:66:83:e2:c2:4c:59:71:ad:f9:67:db:
61:fa:37:56:3c:22:91:0f:5b:21:0a:f6:6d:77:07:33:ec:2b:
6f:50:dc:94:76:f2:67:35:64:80:8f:30:45:6d:83:e5:a3:36:
6d:26:1b:f1:78:e3:ee:69:f2:76:e9:51:0f:5d:18:ce:a0:ea:
88:bf:b9:44:00:83:a9:8e:8e:b7:10:f1:0f:71:fd:a0:bc:c1:
d2:83:7d:15:b3:df:78:7f:3f:fb:70:31:7b:f3:f1:03:12:e2:
94:9a:cc:80:83:43:ef:6b:80:7e:48:1d:bf:ad:9e:fc:62:a4:
30:0d:0c:d4:56:23:05:24:28:b6:8f:02:04:68:05:0f:dd:e1:
6a:94:fc:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4BUlX+Ot6xMTOPVyVZU5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTQ1MzE1YjQ0Y2I2NWQyYTc5MWEwYWU1ODIzNjY0ZDBj
NDQ0NWUwHhcNMjYwMzI2MTYwMDIxWhcNMjYwMzI3MTYwMDIxWjAzMTEwLwYDVQQD
Eyg0NWFhNzU5NzU0YzFkZDVjOGYzYTliNzQzOTUzMmVhOTAzMzVjMmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfD6jrvxgB1bdR8UTozmGSMuB3V+
1I2Npx1+9McLkAcc8u//QDXylv5PLA/xB+qDEhKVAHaQXaXLHqIqYUM6DFpfGcOs
Vi2DmJ8T6I4WeF9fSygw9rvTzBUHm/cYghchGWIQCBewXDIKOP61lqRPeNfVL97u
BjK8a4e1hBySZNsf+djK4PCcBAyt04d4PS7HHwlEKZCgJCGSnr4eQ+/WacIFaAU7
a0KR8mAClOSbMqxz3ISRXTOgYNVQI6s9g0EOFHoAiVcU2DZoYAmi95RLgvoEWjnC
qqA1NOF7P8EWS0x4hBftNKlWNIJ38gIqDehvoe5cbHaRjzo+BBH1LCBK2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWqdZdUwd1cjzqbdDlTLqkDNcLmMB8GA1UdIwQY
MBaAFLkUUxW0TLZdKnkaCuWCNmTQxEReMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJSVEZiUk10bDBxZVJvSzVZSTJaTkRFUkY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80Zjg4N2UtM2Y2Yy00OGEzLWJiMDMt
ZGZiOTQ2ZDE3ZDBjLzEvdVJSVEZiUk10bDBxZVJvSzVZSTJaTkRFUkY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS80Zjg4N2UtM2Y2Yy00OGEzLWJiMDMtZGZiOTQ2ZDE3ZDBj
LzEvdVJSVEZiUk10bDBxZVJvSzVZSTJaTkRFUkY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQChEspf
WVm593g0/5C8KqXp95o+V1woX7PkKGiF7yjvtYBbrUIdbYlo+jPvLx7Y+BidkHbk
goHWo73+ELY4TVPblRZJ0W7SQLxNE1zVdKdgmMkuoPQsJABwZPuTP+ebc/r6tLrn
znQd+dQX+a1+Qv++MWaD4sJMWXGt+WfbYfo3VjwikQ9bIQr2bXcHM+wrb1DclHby
ZzVkgI8wRW2D5aM2bSYb8Xjj7mnydulRD10YzqDqiL+5RACDqY6OtxDxD3H9oLzB
0oN9FbPfeH8/+3Axe/PxAxLilJrMgIND72uAfkgdv62e/GKkMA0M1FYjBSQoto8C
BGgFD93hapT8Vg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:22 2026 by rpki-client