Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
File: g-uiXEochs51okt254VYyS-KA3I.mft (raw, json)
Hash identifier: 96z52VG4lq3WsBYFKaMVKBAGWHfqZHK0RDPp9UXXC+U=
Subject key identifier: AD:2E:41:61:29:35:EE:F6:E6:9B:7A:7D:93:42:9A:40:B9:DF:EF:1C
Authority key identifier: 83:EB:A2:5C:4A:1C:86:CE:75:A2:4B:76:E7:85:58:C9:2F:8A:03:72
Certificate issuer: /CN=83eba25c4a1c86ce75a24b76e78558c92f8a0372
Certificate serial: 019D29972C74D547437A5624D72BFAB77FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
Manifest number: 0BA2
Signing time: Thu 26 Mar 2026 10:01:06 +0000
Manifest this update: Thu 26 Mar 2026 10:01:06 +0000
Manifest next update: Fri 27 Mar 2026 10:01:06 +0000
Files and hashes: 1: Qkl6jbTArK2aP6QFpQseshP33wQ.roa (hash: MNT4yJBRPJ1/lKyRlnOcoc3E7tWrf6Wr9czYSAowGAA=)
2: g-uiXEochs51okt254VYyS-KA3I.crl (hash: GeCpyhbtPx+cVt7bRW9iTpwNeEtySVmkF2hfRI7RArQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:2c:74:d5:47:43:7a:56:24:d7:2b:fa:b7:7f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83eba25c4a1c86ce75a24b76e78558c92f8a0372
Validity
Not Before: Mar 26 10:01:06 2026 GMT
Not After : Mar 27 10:01:06 2026 GMT
Subject: CN=ad2e41612935eef6e69b7a7d93429a40b9dfef1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cd:3b:02:8e:69:d8:46:1e:14:64:98:55:ee:
e0:4d:8c:b9:fb:d2:fd:6b:ff:54:06:4d:fb:e4:70:
63:ac:55:e1:07:f4:bb:ad:da:5a:c2:c4:1b:33:66:
38:5c:f1:67:35:59:62:9e:93:81:cb:34:56:78:4e:
f7:95:ac:c2:ff:ae:49:a0:b3:e4:92:d5:a9:f2:0f:
a4:45:d3:df:cb:47:4f:3a:be:5b:49:eb:92:60:1f:
6a:4d:13:bc:31:7e:d7:1e:71:88:21:f1:c1:ff:c3:
0f:33:6a:86:db:42:9f:f2:89:27:b4:88:99:2a:fb:
f4:85:e9:a9:72:f1:a5:3a:35:fd:65:47:0a:f5:11:
bc:ae:1f:5a:55:0b:03:0e:98:db:f1:54:b5:be:b6:
64:27:75:bc:5c:b1:77:6e:cf:94:cb:41:a2:1e:85:
8e:8e:98:f1:2d:ab:1c:ad:8f:c9:ac:db:4e:cd:5b:
8c:fb:5c:b6:f8:0d:5f:6f:7c:c6:1a:bf:86:22:ed:
5d:4d:9f:e6:87:4c:e6:4c:63:0e:bc:42:54:4d:1a:
d1:f1:b3:c5:3e:f2:77:27:6b:39:36:47:71:3b:97:
27:ef:29:f1:10:cc:88:3f:9b:c3:8f:fe:9a:e5:e7:
cf:29:45:ca:ea:d9:74:cc:e5:1d:58:5d:f8:eb:b9:
f0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2E:41:61:29:35:EE:F6:E6:9B:7A:7D:93:42:9A:40:B9:DF:EF:1C
X509v3 Authority Key Identifier:
keyid:83:EB:A2:5C:4A:1C:86:CE:75:A2:4B:76:E7:85:58:C9:2F:8A:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7f:f0:15:62:df:3d:3e:c0:2c:34:4d:c0:91:23:ab:83:b5:
6a:fc:95:85:3d:07:e1:b1:ee:8c:25:f9:4c:8b:c5:15:0e:59:
fc:c0:07:7c:ab:e7:eb:5b:7e:30:cb:45:e8:05:6b:7c:8e:8e:
09:67:07:ea:f9:85:1c:ef:b6:55:93:ed:51:32:70:ae:7b:12:
fd:9f:ce:b7:b7:43:06:ba:fc:91:38:f1:19:d7:b2:65:00:27:
aa:11:b9:a9:67:2b:f1:3d:1c:42:41:be:e5:41:1e:dc:49:26:
5d:d3:2c:08:dc:5a:12:79:97:56:9e:a2:8f:57:3d:68:e0:f0:
b7:64:97:20:5c:45:3c:32:d8:db:1f:56:30:07:36:cb:17:c5:
c2:d1:ca:d6:1d:7c:4f:ef:c0:bb:fe:1e:cf:aa:61:33:05:dc:
21:5c:8e:a3:1d:52:a7:a6:81:c1:3c:47:6f:4f:c3:35:03:09:
f3:ab:4a:a4:ff:ed:d7:c1:e1:82:4d:12:df:35:f5:94:a8:72:
54:9d:6f:4c:92:ed:48:f4:b7:c2:b5:16:9c:b3:fa:85:c3:f0:
77:95:9c:15:6c:c6:11:bb:62:9b:c6:69:b1:c5:8b:85:19:4b:
5a:7b:43:6e:6c:df:90:98:c2:01:de:c1:39:92:70:4a:24:f1:
57:8c:da:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plyx01UdDelYk1yv6t3/VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZWJhMjVjNGExYzg2Y2U3NWEyNGI3NmU3ODU1OGM5MmY4
YTAzNzIwHhcNMjYwMzI2MTAwMTA2WhcNMjYwMzI3MTAwMTA2WjAzMTEwLwYDVQQD
EyhhZDJlNDE2MTI5MzVlZWY2ZTY5YjdhN2Q5MzQyOWE0MGI5ZGZlZjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp807Ao5p2EYeFGSYVe7gTYy5+9L9
a/9UBk375HBjrFXhB/S7rdpawsQbM2Y4XPFnNVlinpOByzRWeE73lazC/65JoLPk
ktWp8g+kRdPfy0dPOr5bSeuSYB9qTRO8MX7XHnGIIfHB/8MPM2qG20Kf8okntIiZ
Kvv0hempcvGlOjX9ZUcK9RG8rh9aVQsDDpjb8VS1vrZkJ3W8XLF3bs+Uy0GiHoWO
jpjxLascrY/JrNtOzVuM+1y2+A1fb3zGGr+GIu1dTZ/mh0zmTGMOvEJUTRrR8bPF
PvJ3J2s5NkdxO5cn7ynxEMyIP5vDj/6a5efPKUXK6tl0zOUdWF3467nwdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0uQWEpNe725pt6fZNCmkC53+8cMB8GA1UdIwQY
MBaAFIProlxKHIbOdaJLdueFWMkvigNyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZy11aVhFb2NoczUxb2t0MjU0Vll5Uy1LQTNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jNTYxMmQtZTgxYi00M2JlLWFlN2Mt
NTc3ZmFmODU1Mzk5LzEvZy11aVhFb2NoczUxb2t0MjU0Vll5Uy1LQTNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9jNTYxMmQtZTgxYi00M2JlLWFlN2MtNTc3ZmFmODU1Mzk5
LzEvZy11aVhFb2NoczUxb2t0MjU0Vll5Uy1LQTNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3/wFWLf
PT7ALDRNwJEjq4O1avyVhT0H4bHujCX5TIvFFQ5Z/MAHfKvn61t+MMtF6AVrfI6O
CWcH6vmFHO+2VZPtUTJwrnsS/Z/Ot7dDBrr8kTjxGdeyZQAnqhG5qWcr8T0cQkG+
5UEe3EkmXdMsCNxaEnmXVp6ij1c9aODwt2SXIFxFPDLY2x9WMAc2yxfFwtHK1h18
T+/Au/4ez6phMwXcIVyOox1Sp6aBwTxHb0/DNQMJ86tKpP/t18Hhgk0S3zX1lKhy
VJ1vTJLtSPS3wrUWnLP6hcPwd5WcFWzGEbtim8ZpscWLhRlLWntDbmzfkJjCAd7B
OZJwSiTxV4za1Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:06 2026 by rpki-client