Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
File: urXl5gHL9dGdENTbR2qSOzs2-Cc.mft (raw, json)
Hash identifier: xY1LcKEhrNxqz9f74pWrSdlP+hdMCE5TbeAaNzbQC6M=
Subject key identifier: B7:E9:0E:12:C0:E3:B8:86:21:B3:9E:19:D3:9F:8A:A5:02:0C:31:97
Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
Certificate issuer: /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Certificate serial: 019D25BA66D1EFC06092EFF99775A0617380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 16:01:06 +0000
Manifest this update: Wed 25 Mar 2026 16:01:06 +0000
Manifest next update: Thu 26 Mar 2026 16:01:06 +0000
Files and hashes: 1: 8AC5hr87IvNKc2uj2TEkr-2Z034.asa (hash: qt1zTECZT/ge+oHl/7hzl6IVpmrHO5U65Ej5M0jkaj4=)
2: urXl5gHL9dGdENTbR2qSOzs2-Cc.crl (hash: oQ8BZqTC0Z95KgjIzp75IWfqCUF7KgcEeWQegFPiWLk=)
3: xo56gz-sHNgNhs5F1QLj5VzEnGA.roa (hash: YHF2lJdgiYyyfdcc4I4hM7f5QuuqDFl1zASnR1Kz4/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:66:d1:ef:c0:60:92:ef:f9:97:75:a0:61:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Validity
Not Before: Mar 25 16:01:06 2026 GMT
Not After : Mar 26 16:01:06 2026 GMT
Subject: CN=b7e90e12c0e3b88621b39e19d39f8aa5020c3197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8d:bc:c3:60:cc:ba:68:ba:44:cd:50:d8:45:
f2:8a:5d:54:45:2d:92:a4:25:72:00:ba:e8:23:50:
ec:4b:cc:87:2a:50:a5:73:fa:26:71:ec:34:dc:38:
ef:9d:c8:9b:08:ba:db:28:b6:21:63:1e:89:34:ee:
0d:ee:30:96:dd:12:bc:b8:49:d2:76:eb:88:63:a5:
63:7b:31:e1:c2:41:f6:a8:ff:f5:f7:49:e6:e6:cb:
55:34:d6:84:52:ca:82:a3:0f:40:ed:96:35:f2:a0:
33:ee:4d:88:1c:16:c0:24:02:a3:9b:9c:a4:71:f0:
cd:3f:f2:f3:0a:99:b2:52:77:43:e0:d3:03:aa:95:
86:3b:db:fa:bf:5f:9f:f6:2d:81:32:05:dd:77:42:
49:c0:75:4d:57:f3:d9:88:04:f0:17:38:f6:d2:06:
aa:64:45:46:1c:9f:c5:07:ad:b1:46:21:c2:70:58:
21:7b:d9:5d:3b:ba:42:60:49:fc:4f:bb:bb:37:cf:
e4:da:be:50:f8:c9:1f:7f:a0:99:16:4f:a5:2a:42:
be:4b:a5:ba:a6:be:44:75:61:1a:ab:57:08:e4:5b:
6b:0d:98:e0:59:93:ee:e4:44:05:c2:0e:d0:0b:17:
f3:c6:57:64:5c:b0:82:ed:e2:be:e4:92:c5:74:00:
cd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E9:0E:12:C0:E3:B8:86:21:B3:9E:19:D3:9F:8A:A5:02:0C:31:97
X509v3 Authority Key Identifier:
keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:98:55:7c:e9:5c:83:7b:1f:6b:c1:cf:04:19:96:2d:3a:ea:
18:bf:25:9c:50:78:0b:03:09:b2:84:f6:d0:c1:93:10:fb:07:
0d:9a:87:22:a5:1c:af:a6:36:55:08:79:d0:41:69:83:0c:f1:
34:aa:9f:8a:20:88:37:1f:e5:cb:6f:75:1f:24:38:70:2a:b4:
b6:50:f9:de:c3:d3:39:a3:8d:5d:df:80:0f:e6:9e:69:24:8f:
e0:cf:09:f4:99:6e:a0:e3:7f:68:d4:34:64:c9:46:6b:4d:30:
56:e7:17:10:84:5c:1c:5a:a4:3f:51:dc:a4:d9:ba:54:e4:e8:
36:5c:6e:70:b7:0d:b6:06:15:d1:6b:02:91:cc:5e:80:80:1d:
34:ef:c8:b8:a4:b1:8b:4e:2d:ad:41:9e:ac:c2:19:92:e1:25:
be:e6:af:00:85:48:9c:35:00:ec:62:46:5d:12:88:08:6a:6c:
49:eb:03:5a:36:06:f1:4a:e9:0c:5e:21:d3:3d:93:b7:77:a6:
6f:43:c8:7b:eb:52:6a:d3:25:11:cb:4e:eb:a1:05:28:ec:0d:
54:2c:ff:8e:3c:66:ba:6d:72:3d:7e:4a:8f:e5:c6:0c:ac:05:
78:b6:90:6c:5f:e1:36:0c:ac:9d:ac:13:ef:02:59:0e:36:a8:
3f:f5:e7:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lumbR78Bgku/5l3WgYXOAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYjVlNWU2MDFjYmY1ZDE5ZDEwZDRkYjQ3NmE5MjNiM2Iz
NmY4MjcwHhcNMjYwMzI1MTYwMTA2WhcNMjYwMzI2MTYwMTA2WjAzMTEwLwYDVQQD
EyhiN2U5MGUxMmMwZTNiODg2MjFiMzllMTlkMzlmOGFhNTAyMGMzMTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0428w2DMumi6RM1Q2EXyil1URS2S
pCVyALroI1DsS8yHKlClc/omcew03DjvncibCLrbKLYhYx6JNO4N7jCW3RK8uEnS
duuIY6VjezHhwkH2qP/190nm5stVNNaEUsqCow9A7ZY18qAz7k2IHBbAJAKjm5yk
cfDNP/LzCpmyUndD4NMDqpWGO9v6v1+f9i2BMgXdd0JJwHVNV/PZiATwFzj20gaq
ZEVGHJ/FB62xRiHCcFghe9ldO7pCYEn8T7u7N8/k2r5Q+Mkff6CZFk+lKkK+S6W6
pr5EdWEaq1cI5FtrDZjgWZPu5EQFwg7QCxfzxldkXLCC7eK+5JLFdADNNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfpDhLA47iGIbOeGdOfiqUCDDGXMB8GA1UdIwQY
MBaAFLq15eYBy/XRnRDU20dqkjs7NvgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8wMGRmMjktNTAyMi00MDVlLTg5NWQt
NzdjYTg5Y2Y0MzZhLzEvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8wMGRmMjktNTAyMi00MDVlLTg5NWQtNzdjYTg5Y2Y0MzZh
LzEvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi5hVfOlc
g3sfa8HPBBmWLTrqGL8lnFB4CwMJsoT20MGTEPsHDZqHIqUcr6Y2VQh50EFpgwzx
NKqfiiCINx/ly291HyQ4cCq0tlD53sPTOaONXd+AD+aeaSSP4M8J9JluoON/aNQ0
ZMlGa00wVucXEIRcHFqkP1HcpNm6VOToNlxucLcNtgYV0WsCkcxegIAdNO/IuKSx
i04trUGerMIZkuElvuavAIVInDUA7GJGXRKICGpsSesDWjYG8UrpDF4h0z2Tt3em
b0PIe+tSatMlEctO66EFKOwNVCz/jjxmum1yPX5Kj+XGDKwFeLaQbF/hNgysnawT
7wJZDjaoP/XnBQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:19:35 2026 by rpki-client