Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
File: uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft (raw, json)
Hash identifier: ookOP27pPj5qwgZXmF7WEAsgNuUfrhOxpbl1hyjK/aE=
Subject key identifier: F7:49:16:7B:B3:D0:3C:B9:C4:B1:60:F8:3A:04:39:93:FB:09:50:7B
Authority key identifier: B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
Certificate issuer: /CN=b8d14227473e4b75c877274cf6c050f25c57721f
Certificate serial: 019D2704D36ACB11955860BBEAFA1FBCA2DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 22:02:00 +0000
Manifest this update: Wed 25 Mar 2026 22:02:00 +0000
Manifest next update: Thu 26 Mar 2026 22:02:00 +0000
Files and hashes: 1: gnUBlLxOjDH4Z1f5fn-4AChySoE.roa (hash: sfLmAWTXK6E2qypaAtchDrq6czQBGZESEbOVmGAo4Qo=)
2: uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl (hash: sK7+BKxUr+SdNJyLscKw+RcbzkYGq57AumfgWN1LHcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d3:6a:cb:11:95:58:60:bb:ea:fa:1f:bc:a2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d14227473e4b75c877274cf6c050f25c57721f
Validity
Not Before: Mar 25 22:02:00 2026 GMT
Not After : Mar 26 22:02:00 2026 GMT
Subject: CN=f749167bb3d03cb9c4b160f83a043993fb09507b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:1e:a3:ea:3b:5f:21:3d:d8:01:a6:3e:3b:
96:20:95:ed:9a:ce:d2:8d:1c:60:5f:0a:4c:14:aa:
77:98:fb:92:a6:7e:ad:eb:e6:73:b4:4a:e4:8e:a6:
fb:75:49:eb:01:5f:f4:6c:73:43:47:6b:cc:9c:76:
c8:92:fa:08:8b:58:46:ba:b4:d2:89:e4:39:b0:cd:
fa:01:72:2e:6e:de:58:2c:d2:e7:a9:63:6c:fb:55:
45:dd:05:c8:13:11:f6:4e:84:8e:b6:cf:12:ea:28:
e6:a1:91:c4:c1:86:64:85:10:39:b1:04:4d:83:f7:
78:dd:90:7d:f6:2e:64:bd:e7:e9:af:5a:87:dc:77:
a0:00:b2:5b:04:3c:78:26:4f:fc:35:7b:f8:f3:bd:
b2:5d:fc:3e:33:d2:08:c4:34:5f:3a:cd:a3:ce:f3:
cf:77:a7:dc:24:d0:d2:10:5b:74:46:0c:3c:e2:b7:
00:d1:97:a5:cd:2c:d4:87:ae:f0:51:4b:0d:5f:04:
d1:1f:50:c7:91:3e:36:6b:47:ee:08:3d:ea:54:01:
e5:14:34:61:d4:e8:99:bd:71:e9:f6:cf:70:68:b3:
fa:0f:ea:ef:dc:94:fd:62:2f:2b:90:5c:eb:e5:e3:
81:f2:56:ee:fa:00:5d:69:99:8f:f1:a6:31:84:8f:
45:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:49:16:7B:B3:D0:3C:B9:C4:B1:60:F8:3A:04:39:93:FB:09:50:7B
X509v3 Authority Key Identifier:
keyid:B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f5:5f:6d:54:31:03:fb:f7:76:12:7a:92:39:60:5b:77:f9:
5b:d4:31:4a:62:7d:7d:77:36:78:24:e2:9d:ee:14:c5:4f:64:
fa:b0:de:02:d9:ca:dc:e2:9c:7d:2b:09:28:6a:17:a0:b2:a8:
19:5c:5b:df:cc:b8:56:1b:f8:f5:f0:08:19:b0:a1:f0:70:54:
39:2b:ff:1b:85:d4:76:f8:40:db:08:ee:a3:4f:f7:d7:34:e2:
2b:74:78:65:6d:0b:c9:74:d3:ab:93:5c:e8:6e:b8:60:43:1c:
32:4f:65:ba:a0:d0:0a:33:ce:c1:26:48:d0:87:14:4f:79:e9:
0a:ea:13:35:dd:2f:60:a0:1b:3b:35:59:fb:ac:e9:a5:33:32:
b6:33:2c:3e:c1:ec:58:18:81:be:69:5d:2d:54:d9:36:d8:a6:
a7:83:01:83:6a:f1:9e:68:18:97:ef:89:e7:1c:27:2e:fb:14:
95:8a:22:ce:12:6f:79:b9:4e:a1:77:62:11:4f:17:3c:c5:52:
fc:74:06:6a:db:e0:a1:38:04:15:12:70:0c:03:e8:7d:8d:e9:
09:36:31:0f:ab:50:0e:12:db:68:11:a8:91:30:1c:b2:e9:d5:
f2:ae:bd:bc:e0:24:ab:fb:07:9c:2d:4b:45:0d:55:a4:00:2f:
38:35:24:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBNNqyxGVWGC76vofvKLeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZDE0MjI3NDczZTRiNzVjODc3Mjc0Y2Y2YzA1MGYyNWM1
NzcyMWYwHhcNMjYwMzI1MjIwMjAwWhcNMjYwMzI2MjIwMjAwWjAzMTEwLwYDVQQD
EyhmNzQ5MTY3YmIzZDAzY2I5YzRiMTYwZjgzYTA0Mzk5M2ZiMDk1MDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa0eo+o7XyE92AGmPjuWIJXtms7S
jRxgXwpMFKp3mPuSpn6t6+ZztErkjqb7dUnrAV/0bHNDR2vMnHbIkvoIi1hGurTS
ieQ5sM36AXIubt5YLNLnqWNs+1VF3QXIExH2ToSOts8S6ijmoZHEwYZkhRA5sQRN
g/d43ZB99i5kvefpr1qH3HegALJbBDx4Jk/8NXv4872yXfw+M9IIxDRfOs2jzvPP
d6fcJNDSEFt0Rgw84rcA0ZelzSzUh67wUUsNXwTRH1DHkT42a0fuCD3qVAHlFDRh
1OiZvXHp9s9waLP6D+rv3JT9Yi8rkFzr5eOB8lbu+gBdaZmP8aYxhI9FqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdJFnuz0Dy5xLFg+DoEOZP7CVB7MB8GA1UdIwQY
MBaAFLjRQidHPkt1yHcnTPbAUPJcV3IfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU5GQ0owYy1TM1hJZHlkTTlzQlE4bHhYY2g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNzRiODAtNDBlYS00ZTM0LWI1MGQt
MTE0ZmFjZTFhNTcxLzEvdU5GQ0owYy1TM1hJZHlkTTlzQlE4bHhYY2g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9kNzRiODAtNDBlYS00ZTM0LWI1MGQtMTE0ZmFjZTFhNTcx
LzEvdU5GQ0owYy1TM1hJZHlkTTlzQlE4bHhYY2g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjfVfbVQx
A/v3dhJ6kjlgW3f5W9QxSmJ9fXc2eCTine4UxU9k+rDeAtnK3OKcfSsJKGoXoLKo
GVxb38y4Vhv49fAIGbCh8HBUOSv/G4XUdvhA2wjuo0/31zTiK3R4ZW0LyXTTq5Nc
6G64YEMcMk9luqDQCjPOwSZI0IcUT3npCuoTNd0vYKAbOzVZ+6zppTMytjMsPsHs
WBiBvmldLVTZNtimp4MBg2rxnmgYl++J5xwnLvsUlYoizhJveblOoXdiEU8XPMVS
/HQGatvgoTgEFRJwDAPofY3pCTYxD6tQDhLbaBGokTAcsunV8q69vOAkq/sHnC1L
RQ1VpAAvODUk6g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:02 2026 by rpki-client