Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
File: __RCr_uhz67zECyYHXVpUCzmUVw.mft (raw, json)
Hash identifier: INPtqtoiCw3LPo6qFQyIwxZ229CcsWHzVvAVPfxv2Yg=
Subject key identifier: 1D:A8:7C:EC:16:D3:7B:37:FF:18:FE:9F:8C:78:8E:A6:E5:8C:23:1B
Authority key identifier: FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C
Certificate issuer: /CN=fff442affba1cfaef3102c981d7569502ce6515c
Certificate serial: 019D2704818A92768708D58A0233A981DA0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 22:01:39 +0000
Manifest this update: Wed 25 Mar 2026 22:01:39 +0000
Manifest next update: Thu 26 Mar 2026 22:01:39 +0000
Files and hashes: 1: 8z2MsUIxn5nw1nALL7LRWOPfhD8.roa (hash: 9llBO7otknupIcgUJiQCvbsRcVO2MsJYLXN6HgTAZ1I=)
2: KHEZbMvYE8xTVowmo6UQmw6DqDg.roa (hash: cvAQSN4DUv0yDrAvqweWU+LLGRpqR/gzJ2hNAerTPDI=)
3: __RCr_uhz67zECyYHXVpUCzmUVw.crl (hash: P79pV6sJbaKVb84FwEkJ9a1lyzCEX49kQlmjCjdN0YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:81:8a:92:76:87:08:d5:8a:02:33:a9:81:da:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff442affba1cfaef3102c981d7569502ce6515c
Validity
Not Before: Mar 25 22:01:39 2026 GMT
Not After : Mar 26 22:01:39 2026 GMT
Subject: CN=1da87cec16d37b37ff18fe9f8c788ea6e58c231b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:1f:1c:ae:ff:b5:e4:18:18:2a:c9:e4:c3:
e1:5f:b4:08:ca:ab:c6:82:9d:c7:49:f4:43:e2:e3:
ea:c7:16:35:14:92:bc:40:0f:0a:3f:bd:9b:2a:75:
44:43:fa:ff:68:20:40:6b:c6:da:84:c9:d5:fa:19:
a5:18:01:a8:1b:71:83:ff:81:ce:a6:7c:0b:2a:09:
35:df:49:53:00:6e:7a:c4:79:af:75:67:81:9c:39:
85:bd:7e:c6:10:5a:56:80:65:28:89:6a:21:b0:2d:
e7:9d:85:b8:92:e5:b4:64:10:e0:5a:09:83:83:b4:
14:b8:63:5b:0d:04:34:3c:e6:ea:0c:a5:f2:d4:65:
71:1f:a9:60:9e:d3:db:cd:8e:c6:04:4a:f1:e0:51:
74:89:81:62:66:2a:71:47:eb:f0:5e:02:3b:88:9e:
6d:6b:99:9c:1e:1c:dc:c9:c5:a2:a4:7a:16:56:5b:
49:f9:51:0f:0b:fe:b5:3b:7b:92:4e:97:37:a6:71:
1b:0c:c4:bb:e3:e3:5d:fa:58:f7:50:1c:6f:d2:ea:
48:1c:0d:d1:65:b8:01:39:55:98:30:45:21:80:52:
c9:ac:6d:fc:17:d1:4d:f0:4e:50:09:15:9e:56:41:
64:ff:78:ce:db:aa:20:6f:0e:b2:08:28:4f:36:16:
67:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A8:7C:EC:16:D3:7B:37:FF:18:FE:9F:8C:78:8E:A6:E5:8C:23:1B
X509v3 Authority Key Identifier:
keyid:FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:25:3a:e1:e6:3b:a9:9b:5c:0b:91:39:cd:af:53:a7:a0:ae:
8e:45:22:83:e8:1f:53:bd:e1:ac:09:a4:67:91:d3:19:7e:bc:
f6:f3:26:66:3c:eb:7c:ac:b7:c5:07:dd:40:94:bd:98:82:8b:
51:ec:9a:54:74:25:fa:b0:52:5c:6b:32:57:d3:92:3a:81:8a:
0e:34:42:48:f3:27:bc:1f:3b:a6:9f:e4:fe:16:0e:6d:08:3f:
f0:48:18:10:2b:10:a5:e6:68:f4:33:6a:d7:a6:40:9b:79:b5:
3d:b5:9b:9e:25:21:b0:a8:62:d5:40:b6:5f:7b:30:d6:19:09:
89:04:26:c9:8c:46:2d:bf:9f:12:61:f3:cd:92:ca:32:5c:87:
34:21:ae:2b:33:ba:49:67:68:ec:65:1f:23:91:ab:76:b7:84:
78:e3:6c:7c:41:f4:43:42:1e:94:d7:86:63:87:ac:fb:3a:fe:
2b:6a:52:0f:eb:00:b0:cf:ec:9f:2f:cf:83:0a:0e:14:ce:72:
87:a6:05:8e:49:97:de:0d:fe:3f:ee:89:1c:b8:c7:5a:64:6e:
0c:9b:d2:9f:c0:fc:14:c3:07:8f:f6:18:98:54:dd:a8:a3:0a:
d2:0b:37:3c:de:b5:1d:64:49:91:dd:e7:23:8c:63:e9:4f:be:
03:04:07:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBIGKknaHCNWKAjOpgdoNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZjQ0MmFmZmJhMWNmYWVmMzEwMmM5ODFkNzU2OTUwMmNl
NjUxNWMwHhcNMjYwMzI1MjIwMTM5WhcNMjYwMzI2MjIwMTM5WjAzMTEwLwYDVQQD
EygxZGE4N2NlYzE2ZDM3YjM3ZmYxOGZlOWY4Yzc4OGVhNmU1OGMyMzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7sfHK7/teQYGCrJ5MPhX7QIyqvG
gp3HSfRD4uPqxxY1FJK8QA8KP72bKnVEQ/r/aCBAa8bahMnV+hmlGAGoG3GD/4HO
pnwLKgk130lTAG56xHmvdWeBnDmFvX7GEFpWgGUoiWohsC3nnYW4kuW0ZBDgWgmD
g7QUuGNbDQQ0PObqDKXy1GVxH6lgntPbzY7GBErx4FF0iYFiZipxR+vwXgI7iJ5t
a5mcHhzcycWipHoWVltJ+VEPC/61O3uSTpc3pnEbDMS74+Nd+lj3UBxv0upIHA3R
ZbgBOVWYMEUhgFLJrG38F9FN8E5QCRWeVkFk/3jO26ogbw6yCChPNhZnNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2ofOwW03s3/xj+n4x4jqbljCMbMB8GA1UdIwQY
MBaAFP/0Qq/7oc+u8xAsmB11aVAs5lFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX19SQ3JfdWh6Njd6RUN5WUhYVnBVQ3ptVVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85ZmVkZDAtNGVkNy00NDE5LThlNzMt
YjVjYTBhZGYyZjA4LzEvX19SQ3JfdWh6Njd6RUN5WUhYVnBVQ3ptVVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC85ZmVkZDAtNGVkNy00NDE5LThlNzMtYjVjYTBhZGYyZjA4
LzEvX19SQ3JfdWh6Njd6RUN5WUhYVnBVQ3ptVVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcyU64eY7
qZtcC5E5za9Tp6CujkUig+gfU73hrAmkZ5HTGX689vMmZjzrfKy3xQfdQJS9mIKL
UeyaVHQl+rBSXGsyV9OSOoGKDjRCSPMnvB87pp/k/hYObQg/8EgYECsQpeZo9DNq
16ZAm3m1PbWbniUhsKhi1UC2X3sw1hkJiQQmyYxGLb+fEmHzzZLKMlyHNCGuKzO6
SWdo7GUfI5GrdreEeONsfEH0Q0IelNeGY4es+zr+K2pSD+sAsM/sny/PgwoOFM5y
h6YFjkmX3g3+P+6JHLjHWmRuDJvSn8D8FMMHj/YYmFTdqKMK0gs3PN61HWRJkd3n
I4xj6U++AwQHVA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:57 2026 by rpki-client