Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
File: uRil9IFVJuHpJRDTZI69oM27wqw.mft (raw, json)
Hash identifier: iktZJSzAEyF0eansWAj7Fvfq60gMz1L7xw5DrzmBDOM=
Subject key identifier: F2:0E:50:97:A4:B1:A1:9A:DC:6F:CA:C7:E5:7A:36:00:0D:53:34:F1
Authority key identifier: B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
Certificate issuer: /CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Certificate serial: 019D28BB19AB0DC429D36963794063A62569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
Manifest number: 0A93
Signing time: Thu 26 Mar 2026 06:00:43 +0000
Manifest this update: Thu 26 Mar 2026 06:00:43 +0000
Manifest next update: Fri 27 Mar 2026 06:00:43 +0000
Files and hashes: 1: IVaGwYE-xSWos9-zj2HpODEJhqg.roa (hash: L3WvUKStDTf5drv93q1GG66aaVezmjafU4Trsj7t1+s=)
2: uRil9IFVJuHpJRDTZI69oM27wqw.crl (hash: K+1EkwLzwCEqxxalZcmfv1gP0zFrZn0e7M43j6Lp5C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:19:ab:0d:c4:29:d3:69:63:79:40:63:a6:25:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Validity
Not Before: Mar 26 06:00:43 2026 GMT
Not After : Mar 27 06:00:43 2026 GMT
Subject: CN=f20e5097a4b1a19adc6fcac7e57a36000d5334f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:00:58:69:bf:86:4c:1f:50:c2:6b:f2:be:
58:bc:c0:f8:36:e1:10:87:2d:b9:dc:42:f5:36:d2:
4f:d7:79:a4:ec:77:7b:fd:f4:b1:98:e8:4b:83:13:
bb:08:6c:9d:31:a4:44:f9:bb:67:29:a3:3f:4b:49:
fd:53:1f:99:21:fd:83:62:a3:9b:0d:bf:fc:54:5f:
32:78:e9:7e:3a:fe:f5:28:f0:01:ad:b8:d3:7d:8a:
70:a8:c0:b0:58:7e:7c:b6:28:ce:1e:95:27:a6:b5:
57:33:65:98:4f:46:64:fe:7d:22:e4:8e:f7:ae:9d:
8b:3e:e0:a2:e8:ed:91:6b:07:e0:06:f6:a3:fe:06:
a2:2b:e5:de:90:bd:36:f1:3f:eb:cc:a2:fe:46:36:
fd:a2:14:55:25:d3:b0:d1:b5:74:78:ef:6e:fd:31:
2e:50:e6:a3:44:8c:21:34:e7:ff:47:2e:f0:a1:28:
4d:52:f6:37:78:bd:14:4a:fe:57:73:be:49:d4:db:
19:2e:f4:43:42:84:0e:44:1a:b0:e9:c6:3f:85:39:
e7:7e:6c:6b:dd:f0:7f:ac:a2:e3:ba:9f:c4:6a:bd:
33:47:97:93:a4:02:a7:9a:df:c3:fa:12:91:a3:5a:
2e:fb:0d:bf:ce:6d:97:9c:4f:a5:f0:36:53:05:19:
73:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0E:50:97:A4:B1:A1:9A:DC:6F:CA:C7:E5:7A:36:00:0D:53:34:F1
X509v3 Authority Key Identifier:
keyid:B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:55:f1:32:79:65:19:d6:04:cc:09:71:c8:8c:c9:74:60:c8:
17:86:df:83:41:33:e3:62:95:b8:9b:10:61:ce:72:b3:f1:bc:
48:8a:4a:fa:c0:a0:9a:60:a0:59:2c:52:6d:cc:dd:5e:71:82:
b4:78:63:df:e0:e9:fe:bc:ec:f5:71:4f:5c:62:a5:86:8b:a3:
01:57:0d:7a:70:1e:e2:1e:00:38:3f:57:52:ed:a1:72:91:ea:
45:25:fb:20:7e:17:41:90:3e:c6:43:28:f8:5e:c3:1f:f0:72:
81:62:84:be:7c:77:96:0c:06:cc:66:f4:5f:be:dd:fc:33:db:
8f:d4:91:11:bb:5e:25:4e:94:79:54:e2:b3:29:12:a4:8a:85:
cd:6e:57:cf:53:81:9d:22:4f:9c:8f:49:df:0c:46:c3:ae:96:
8a:89:46:75:4d:54:48:d9:be:ae:e0:10:41:84:4b:6c:93:3e:
c6:37:11:e7:71:11:3f:52:00:f4:2a:10:26:6b:dd:31:5e:e9:
80:12:2d:15:09:3c:22:1d:93:d0:a8:21:99:21:5e:a8:56:32:
e6:23:f4:db:da:41:0a:be:17:92:46:ea:b7:e2:a7:60:62:66:
d0:09:e6:2a:64:3e:f1:1e:55:7d:91:d9:8f:8f:4c:ba:c2:ab:
81:ec:b2:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ouxmrDcQp02ljeUBjpiVpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MThhNWY0ODE1NTI2ZTFlOTI1MTBkMzY0OGViZGEwY2Ri
YmMyYWMwHhcNMjYwMzI2MDYwMDQzWhcNMjYwMzI3MDYwMDQzWjAzMTEwLwYDVQQD
EyhmMjBlNTA5N2E0YjFhMTlhZGM2ZmNhYzdlNTdhMzYwMDBkNTMzNGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwcAWGm/hkwfUMJr8r5YvMD4NuEQ
hy253EL1NtJP13mk7Hd7/fSxmOhLgxO7CGydMaRE+btnKaM/S0n9Ux+ZIf2DYqOb
Db/8VF8yeOl+Ov71KPABrbjTfYpwqMCwWH58tijOHpUnprVXM2WYT0Zk/n0i5I73
rp2LPuCi6O2RawfgBvaj/gaiK+XekL028T/rzKL+Rjb9ohRVJdOw0bV0eO9u/TEu
UOajRIwhNOf/Ry7woShNUvY3eL0USv5Xc75J1NsZLvRDQoQORBqw6cY/hTnnfmxr
3fB/rKLjup/Ear0zR5eTpAKnmt/D+hKRo1ou+w2/zm2XnE+l8DZTBRlzEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIOUJeksaGa3G/Kx+V6NgANUzTxMB8GA1UdIwQY
MBaAFLkYpfSBVSbh6SUQ02SOvaDNu8KsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJpbDlJRlZKdUhwSlJEVFpJNjlvTTI3d3F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8zYzI5M2EtMTU5MS00Njg1LTg3Njkt
YThmOTBkNDVlYTY3LzEvdVJpbDlJRlZKdUhwSlJEVFpJNjlvTTI3d3F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8zYzI5M2EtMTU5MS00Njg1LTg3NjktYThmOTBkNDVlYTY3
LzEvdVJpbDlJRlZKdUhwSlJEVFpJNjlvTTI3d3F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1XxMnll
GdYEzAlxyIzJdGDIF4bfg0Ez42KVuJsQYc5ys/G8SIpK+sCgmmCgWSxSbczdXnGC
tHhj3+Dp/rzs9XFPXGKlhoujAVcNenAe4h4AOD9XUu2hcpHqRSX7IH4XQZA+xkMo
+F7DH/BygWKEvnx3lgwGzGb0X77d/DPbj9SREbteJU6UeVTisykSpIqFzW5Xz1OB
nSJPnI9J3wxGw66WiolGdU1USNm+ruAQQYRLbJM+xjcR53ERP1IA9CoQJmvdMV7p
gBItFQk8Ih2T0KghmSFeqFYy5iP029pBCr4Xkkbqt+KnYGJm0AnmKmQ+8R5VfZHZ
j49MusKrgeyyQQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:24:38 2026 by rpki-client