Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
File: u3zLGm47yrYxnTF_YsdL8eH0FHM.mft (raw, json)
Hash identifier: B2ivC2N8Wa93Zzhmu8erVQU5YxRXhJpQy+S4o9d0/HU=
Subject key identifier: F2:8D:F2:C1:90:FD:A2:01:AC:FE:5F:05:B3:1D:51:3E:D5:14:C8:23
Authority key identifier: BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73
Certificate issuer: /CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473
Certificate serial: 019E1ED9DBBDFDCADCB1A3E9EDACDCCCE0D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
Manifest number: 08D9
Signing time: Wed 13 May 2026 01:00:54 +0000
Manifest this update: Wed 13 May 2026 01:00:54 +0000
Manifest next update: Thu 14 May 2026 01:00:54 +0000
Files and hashes: 1: angOMGRdc3adpd1I_is4-dwikO4.roa (hash: 9j7afe7OMx1plAaw5QDHW6xfHLrBeH+kUa5ibWgW2WY=)
2: u3zLGm47yrYxnTF_YsdL8eH0FHM.crl (hash: pkCan56Z8A67cInCbAH/p7OgNn84BRJqerI/Kk0S9Po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:db:bd:fd:ca:dc:b1:a3:e9:ed:ac:dc:cc:e0:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473
Validity
Not Before: May 13 01:00:54 2026 GMT
Not After : May 14 01:00:54 2026 GMT
Subject: CN=f28df2c190fda201acfe5f05b31d513ed514c823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0e:bb:ab:0d:ea:c5:96:a3:26:27:0c:6d:27:
bc:3a:fb:2d:f4:7a:8b:e7:a9:71:61:08:13:c4:61:
2d:64:20:82:db:9a:85:e3:a3:3f:a5:d2:6a:39:e2:
65:63:81:72:2d:81:f2:bb:f7:e1:fc:fa:81:e2:49:
7c:3f:25:8e:15:d7:ca:69:51:9d:99:1a:d2:c6:8a:
81:d2:ad:dc:fb:cf:07:3a:1b:34:6f:49:9e:92:56:
1c:4f:39:38:50:55:5f:79:1d:9a:64:10:08:81:30:
00:4e:fa:fb:cc:f7:f8:c2:6e:c5:c1:f3:50:7b:bc:
1c:0b:f3:a3:63:b2:32:45:f5:a0:3b:c0:fb:5f:1b:
52:fa:89:18:b5:27:82:cb:46:1e:56:f1:99:f7:59:
8a:1f:33:20:4a:ac:c0:13:a4:4f:75:09:5d:3f:aa:
d0:ed:0f:c6:f8:46:de:d3:a6:47:45:79:27:77:54:
74:da:2e:ba:a8:32:8c:29:b2:c0:95:c0:a5:c1:28:
61:85:c9:65:b9:e7:89:cc:43:1d:cb:15:a9:f8:e1:
ff:da:d5:2a:ea:9b:e0:41:a5:5e:3d:2b:57:40:54:
e6:c4:37:79:a8:e2:3f:1c:35:c8:20:23:0f:af:c0:
29:f5:4d:66:ff:9d:fc:b5:fc:dc:43:2c:b3:cb:b2:
b0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8D:F2:C1:90:FD:A2:01:AC:FE:5F:05:B3:1D:51:3E:D5:14:C8:23
X509v3 Authority Key Identifier:
keyid:BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ce:1d:94:b6:bc:65:66:6d:1f:81:f0:27:a2:70:48:d1:c9:
7b:9d:15:78:54:02:5c:5b:e7:b5:53:3b:ae:a6:32:64:64:f9:
2c:47:e7:4c:5d:4f:fc:af:a2:d6:35:e9:83:2f:6a:7f:47:36:
82:2a:40:9b:97:c3:97:53:a9:30:b0:38:59:6c:54:ca:1d:57:
6e:aa:ad:3a:01:a6:a6:d2:5f:3e:6a:51:b4:6a:ee:92:bf:1a:
69:5c:30:1f:04:02:2d:ae:47:b4:81:23:7b:24:e4:0c:23:0a:
b7:6d:9a:1b:9c:db:dd:e1:d9:e9:88:31:63:ec:a9:51:4b:a2:
e8:42:b2:7b:62:7b:62:a6:76:c8:31:4e:18:d6:c2:34:04:36:
51:1e:40:0c:2a:14:61:9e:38:3f:5c:9d:c5:6b:7f:51:a8:db:
e7:eb:10:b8:f8:02:ef:e6:b1:8b:87:5c:29:2a:dc:22:99:65:
1e:07:4d:88:fd:b9:af:af:17:41:1b:f6:6c:f9:14:66:05:1a:
9f:eb:51:d3:e1:ed:70:67:8b:cc:f1:5d:db:72:a0:71:74:9b:
8d:4f:7d:c9:1d:43:96:87:f4:e7:80:8c:66:b8:e1:cd:ab:d1:
93:16:24:c1:78:15:3c:ad:60:a0:10:8e:44:fa:89:40:5f:b8:
0b:4b:a5:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2du9/crcsaPp7azczODTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiN2NjYjFhNmUzYmNhYjYzMTlkMzE3ZjYyYzc0YmYxZTFm
NDE0NzMwHhcNMjYwNTEzMDEwMDU0WhcNMjYwNTE0MDEwMDU0WjAzMTEwLwYDVQQD
EyhmMjhkZjJjMTkwZmRhMjAxYWNmZTVmMDViMzFkNTEzZWQ1MTRjODIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3g67qw3qxZajJicMbSe8Ovst9HqL
56lxYQgTxGEtZCCC25qF46M/pdJqOeJlY4FyLYHyu/fh/PqB4kl8PyWOFdfKaVGd
mRrSxoqB0q3c+88HOhs0b0meklYcTzk4UFVfeR2aZBAIgTAATvr7zPf4wm7FwfNQ
e7wcC/OjY7IyRfWgO8D7XxtS+okYtSeCy0YeVvGZ91mKHzMgSqzAE6RPdQldP6rQ
7Q/G+Ebe06ZHRXknd1R02i66qDKMKbLAlcClwShhhcllueeJzEMdyxWp+OH/2tUq
6pvgQaVePStXQFTmxDd5qOI/HDXIICMPr8Ap9U1m/538tfzcQyyzy7KwRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKN8sGQ/aIBrP5fBbMdUT7VFMgjMB8GA1UdIwQY
MBaAFLt8yxpuO8q2MZ0xf2LHS/Hh9BRzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTN6TEdtNDd5cll4blRGX1lzZEw4ZUgwRkhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xYmY3YjAtNDUxOC00MTQxLWJkNmMt
NjRiMGU2MTRkMDA0LzEvdTN6TEdtNDd5cll4blRGX1lzZEw4ZUgwRkhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xYmY3YjAtNDUxOC00MTQxLWJkNmMtNjRiMGU2MTRkMDA0
LzEvdTN6TEdtNDd5cll4blRGX1lzZEw4ZUgwRkhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPs4dlLa8
ZWZtH4HwJ6JwSNHJe50VeFQCXFvntVM7rqYyZGT5LEfnTF1P/K+i1jXpgy9qf0c2
gipAm5fDl1OpMLA4WWxUyh1XbqqtOgGmptJfPmpRtGrukr8aaVwwHwQCLa5HtIEj
eyTkDCMKt22aG5zb3eHZ6YgxY+ypUUui6EKye2J7YqZ2yDFOGNbCNAQ2UR5ADCoU
YZ44P1ydxWt/Uajb5+sQuPgC7+axi4dcKSrcIpllHgdNiP25r68XQRv2bPkUZgUa
n+tR0+HtcGeLzPFd23KgcXSbjU99yR1Dlof054CMZrjhzavRkxYkwXgVPK1goBCO
RPqJQF+4C0ulLA==
-----END CERTIFICATE-----
Generated at Wed May 13 08:34:37 2026 by rpki-client