Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
File: u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft (raw, json)
Hash identifier: UO5cWspPxdESFmMIod7nNQDz7NSN4I2DvzFp5IepcFM=
Subject key identifier: 70:0F:15:23:E2:FB:82:4D:1F:47:A4:8B:7C:81:D8:53:74:2F:E8:7C
Authority key identifier: BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D
Certificate issuer: /CN=bbf3a257f99528c3a924d269d1af438185c2006d
Certificate serial: 019D26283DD367ADA5A7DC9DF49ABF487D27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
Manifest number: 04ED
Signing time: Wed 25 Mar 2026 18:01:04 +0000
Manifest this update: Wed 25 Mar 2026 18:01:04 +0000
Manifest next update: Thu 26 Mar 2026 18:01:04 +0000
Files and hashes: 1: GBunbPk2URQkgaxpt1o-Uh4SYwg.roa (hash: kPRMfRkw+Lm6R/mPdE/dCzGyLBiV02Yx27KySSDXIPw=)
2: jh1q0Khz-_M-_NrljnyRN8ykZos.roa (hash: YxHKopg2fOCwZT68HBOpYKRGQJXtUa8z+eYm7fqEP9M=)
3: u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl (hash: 9PDe9a7jxvY+/S5jBjK3m33Kia9vQ5GkXi+dJ/hSe9Y=)
4: vuuk7Bw0qNuOFi3i_WnG1bmfFIk.roa (hash: ApgLzh88e1nVK1T+pmvKzZNPx17TlVOhS603xJ5WCsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:3d:d3:67:ad:a5:a7:dc:9d:f4:9a:bf:48:7d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf3a257f99528c3a924d269d1af438185c2006d
Validity
Not Before: Mar 25 18:01:04 2026 GMT
Not After : Mar 26 18:01:04 2026 GMT
Subject: CN=700f1523e2fb824d1f47a48b7c81d853742fe87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:99:13:74:4d:85:8e:f7:ff:b5:1b:bb:fd:89:
d8:9b:19:14:0b:b2:f6:2f:be:12:64:6f:92:d8:4d:
c7:ba:07:3e:a7:79:30:3e:b6:95:97:a1:71:af:da:
93:a9:97:10:6c:cc:3b:00:61:fb:e9:19:f6:6b:5d:
1b:47:a5:4d:17:92:c2:3f:8b:ce:81:a5:5f:de:92:
fe:b5:64:79:24:68:3f:82:e4:6d:46:06:0f:9a:8b:
2b:27:74:50:ae:d7:35:12:42:27:a7:5d:73:f3:c2:
5b:49:49:16:91:53:22:8c:01:33:78:ab:58:75:c8:
aa:4a:a9:70:3b:6b:ea:8b:6c:3e:d2:e1:95:6e:ee:
2d:8a:e6:e4:c6:a3:5e:0e:5d:5f:31:e4:ff:5b:83:
5b:34:8a:d1:c8:8b:00:5d:f4:6b:63:be:4e:e0:8a:
29:b1:37:27:66:98:8f:bc:e3:53:40:f1:f0:d6:40:
4d:65:99:3d:be:38:92:f6:63:08:9b:14:16:9e:e2:
e3:66:2e:a5:75:6a:e7:58:48:8e:f9:c7:49:43:7a:
52:1b:88:6c:f1:ac:f6:f4:15:02:31:60:f3:5f:dc:
92:53:a4:2a:c3:c0:c7:0b:15:c8:0f:9c:2b:da:09:
7a:c9:1a:54:f2:3d:b5:14:92:19:c7:0a:39:54:3c:
70:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0F:15:23:E2:FB:82:4D:1F:47:A4:8B:7C:81:D8:53:74:2F:E8:7C
X509v3 Authority Key Identifier:
keyid:BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:98:45:64:22:b0:f6:da:d7:23:6e:df:44:8a:64:81:b1:29:
a9:aa:18:ee:dc:62:04:e7:0b:1a:7d:19:0b:c5:a1:e7:0b:fd:
0f:25:bd:70:6f:ce:05:85:75:36:3f:0f:bf:95:d1:b6:c8:d7:
18:fa:f2:1f:0f:9b:14:bc:62:ca:b9:4c:a8:06:9a:55:8b:9e:
c3:35:4e:0a:9c:72:85:8f:ee:2a:ed:14:c9:4d:8b:ba:98:df:
f5:d1:c0:9a:b5:6d:4b:e7:35:15:b0:28:6d:da:77:de:99:65:
85:d0:de:f0:38:dc:a6:1f:c2:ba:9d:43:0b:d0:2a:49:11:20:
aa:ca:85:43:77:29:50:65:4c:3e:37:e3:8a:6e:bc:ee:1d:b4:
23:bc:08:8a:73:c8:5e:76:65:67:8c:22:ec:51:e1:13:1c:b2:
73:f2:83:da:e0:67:d0:03:b5:00:35:c6:06:b6:71:e0:51:d2:
e4:75:b7:1d:b2:72:0b:1a:ec:bf:f7:9c:68:bf:59:89:e5:63:
fa:cf:bc:aa:a5:4d:0e:35:25:a1:8c:12:07:07:eb:f6:ef:6b:
78:1d:44:47:52:bb:f8:22:a2:5d:16:ff:c9:b3:e8:92:47:af:
46:09:d9:9f:43:b6:26:4a:7d:6a:64:54:07:ba:a8:76:48:63:
8c:09:40:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKD3TZ62lp9yd9Jq/SH0nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZjNhMjU3Zjk5NTI4YzNhOTI0ZDI2OWQxYWY0MzgxODVj
MjAwNmQwHhcNMjYwMzI1MTgwMTA0WhcNMjYwMzI2MTgwMTA0WjAzMTEwLwYDVQQD
Eyg3MDBmMTUyM2UyZmI4MjRkMWY0N2E0OGI3YzgxZDg1Mzc0MmZlODdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZkTdE2Fjvf/tRu7/YnYmxkUC7L2
L74SZG+S2E3Hugc+p3kwPraVl6Fxr9qTqZcQbMw7AGH76Rn2a10bR6VNF5LCP4vO
gaVf3pL+tWR5JGg/guRtRgYPmosrJ3RQrtc1EkInp11z88JbSUkWkVMijAEzeKtY
dciqSqlwO2vqi2w+0uGVbu4tiubkxqNeDl1fMeT/W4NbNIrRyIsAXfRrY75O4Iop
sTcnZpiPvONTQPHw1kBNZZk9vjiS9mMImxQWnuLjZi6ldWrnWEiO+cdJQ3pSG4hs
8az29BUCMWDzX9ySU6Qqw8DHCxXID5wr2gl6yRpU8j21FJIZxwo5VDxw5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAPFSPi+4JNH0eki3yB2FN0L+h8MB8GA1UdIwQY
MBaAFLvzolf5lSjDqSTSadGvQ4GFwgBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9PaVZfbVZLTU9wSk5KcDBhOURnWVhDQUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80ZmFhZmYtMzg0Zi00MDJlLThiOGMt
NDVmNzdkZmEyNjM2LzEvdV9PaVZfbVZLTU9wSk5KcDBhOURnWVhDQUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC80ZmFhZmYtMzg0Zi00MDJlLThiOGMtNDVmNzdkZmEyNjM2
LzEvdV9PaVZfbVZLTU9wSk5KcDBhOURnWVhDQUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuZhFZCKw
9trXI27fRIpkgbEpqaoY7txiBOcLGn0ZC8Wh5wv9DyW9cG/OBYV1Nj8Pv5XRtsjX
GPryHw+bFLxiyrlMqAaaVYuewzVOCpxyhY/uKu0UyU2Lupjf9dHAmrVtS+c1FbAo
bdp33pllhdDe8Djcph/Cup1DC9AqSREgqsqFQ3cpUGVMPjfjim687h20I7wIinPI
XnZlZ4wi7FHhExyyc/KD2uBn0AO1ADXGBrZx4FHS5HW3HbJyCxrsv/ecaL9ZieVj
+s+8qqVNDjUloYwSBwfr9u9reB1ER1K7+CKiXRb/ybPokkevRgnZn0O2Jkp9amRU
B7qodkhjjAlAcA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:46 2026 by rpki-client