Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
File: uNI7HmwH5iry0ufrbeCJOwkRmrs.mft (raw, json)
Hash identifier: OkMI3EvxT5DtOOSHGm5noiHGtiysg7HLrXHWdgkUcd4=
Subject key identifier: 3F:B4:E8:CF:43:8A:D4:97:B9:6D:11:55:50:5D:C1:8A:68:81:08:21
Authority key identifier: B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
Certificate issuer: /CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Certificate serial: 019D25158AE6137928CEC3AA2BCF51F6441E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
Manifest number: 184B
Signing time: Wed 25 Mar 2026 13:01:01 +0000
Manifest this update: Wed 25 Mar 2026 13:01:01 +0000
Manifest next update: Thu 26 Mar 2026 13:01:01 +0000
Files and hashes: 1: 4vljd6eS7xs98V4vbQdU27KIRbo.roa (hash: p9Wr9nNkj4z/XeaCt1WGEIqENx+18d7M1y0DLvifYF0=)
2: uNI7HmwH5iry0ufrbeCJOwkRmrs.crl (hash: TmilZAGonCsgOabkNORbQUQ4FYEwg1TkKqPtSUDz+4M=)
3: uUX1xSwp1T9nuxxoEoS7mJ4ylKQ.asa (hash: ARnmi9JFKrZP1rcaarKtNChdLdy0XQtmO2iQxRYVYjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:15:8a:e6:13:79:28:ce:c3:aa:2b:cf:51:f6:44:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Validity
Not Before: Mar 25 13:01:01 2026 GMT
Not After : Mar 26 13:01:01 2026 GMT
Subject: CN=3fb4e8cf438ad497b96d1155505dc18a68810821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8a:11:13:ba:59:1b:f9:d7:d1:0f:2d:60:71:
90:f8:b4:c2:7c:ba:85:c7:aa:9e:8c:9d:77:09:cf:
f7:53:79:1e:7a:3b:c2:d1:e8:f4:b7:e2:41:e5:74:
69:eb:7d:92:ed:7e:2d:35:29:aa:85:e7:da:3a:a6:
20:82:ee:64:b8:02:3d:50:8a:4e:f4:ee:61:a9:e7:
68:e5:52:66:8d:6b:61:4a:d0:fe:db:f1:88:da:2d:
bf:5a:d3:c3:ac:1c:09:28:77:dc:4a:0d:c9:cc:c9:
99:9d:3f:77:1d:b5:3b:79:6e:17:47:78:ed:da:0f:
52:1b:26:75:5c:b9:51:6d:69:f1:c3:fd:33:64:0a:
88:71:34:02:d7:e4:e4:9e:27:99:d5:f0:97:dc:ee:
9c:bf:cf:7b:2c:0c:8b:a1:a6:83:03:bd:00:8d:76:
d1:70:1b:74:aa:67:ce:a3:52:1f:a7:c9:6d:70:12:
fb:f5:95:b5:bc:bb:41:12:fc:29:45:37:4f:d4:00:
0d:c0:ce:24:52:ab:07:dc:4f:0c:29:c5:80:23:87:
b8:e5:10:a0:86:44:af:7a:e6:78:cf:9a:e8:6c:cd:
7e:ba:7a:50:e7:2a:20:40:0d:53:97:ff:b9:9b:d8:
47:e0:73:b6:e7:d1:22:8c:cf:7c:e6:46:5c:29:44:
bf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B4:E8:CF:43:8A:D4:97:B9:6D:11:55:50:5D:C1:8A:68:81:08:21
X509v3 Authority Key Identifier:
keyid:B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:72:e1:5a:20:02:3d:9a:bd:77:55:37:7e:21:91:f8:31:c3:
f4:73:45:6f:db:f6:4b:4a:52:85:39:e2:0a:cb:c4:85:fc:57:
33:ab:78:77:85:b8:dc:c9:49:cb:c2:63:bd:b0:37:82:cb:0b:
e8:62:97:af:20:37:82:b8:74:d4:83:49:16:78:3c:62:92:e3:
d5:44:42:4c:c1:ba:44:1c:af:98:0b:53:c0:35:01:cb:77:6f:
5e:2f:d7:92:b6:55:56:1c:53:f4:4b:eb:dc:c6:ee:a8:7d:88:
1d:98:ce:ae:b5:c8:50:bf:d7:1e:41:7d:a5:c8:c1:8f:0c:3e:
04:b4:50:33:59:9f:53:d4:64:b6:55:51:a6:52:51:c7:d7:70:
3b:bf:5f:51:dc:bf:2a:b5:a1:b6:bb:8b:40:53:e0:57:39:ef:
97:5f:ef:12:0c:df:52:31:f9:c0:94:37:38:12:3c:1d:31:0e:
6b:52:3a:3a:81:24:36:33:6a:85:3d:3c:8e:3b:b3:8a:4c:6d:
65:96:28:1b:68:ba:0a:50:19:6a:95:34:27:fc:c7:b3:7c:92:
e6:9c:b8:68:89:82:fd:c2:40:65:2b:33:13:fb:c9:4c:2a:b3:
9a:8e:29:9a:b7:b5:4b:40:81:68:ab:60:34:5c:25:35:8a:a3:
57:a6:d7:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lFYrmE3kozsOqK89R9kQeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZDIzYjFlNmMwN2U2MmFmMmQyZTdlYjZkZTA4OTNiMDkx
MTlhYmIwHhcNMjYwMzI1MTMwMTAxWhcNMjYwMzI2MTMwMTAxWjAzMTEwLwYDVQQD
EygzZmI0ZThjZjQzOGFkNDk3Yjk2ZDExNTU1MDVkYzE4YTY4ODEwODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIoRE7pZG/nX0Q8tYHGQ+LTCfLqF
x6qejJ13Cc/3U3keejvC0ej0t+JB5XRp632S7X4tNSmqhefaOqYggu5kuAI9UIpO
9O5hqedo5VJmjWthStD+2/GI2i2/WtPDrBwJKHfcSg3JzMmZnT93HbU7eW4XR3jt
2g9SGyZ1XLlRbWnxw/0zZAqIcTQC1+TknieZ1fCX3O6cv897LAyLoaaDA70AjXbR
cBt0qmfOo1Ifp8ltcBL79ZW1vLtBEvwpRTdP1AANwM4kUqsH3E8MKcWAI4e45RCg
hkSveuZ4z5robM1+unpQ5yogQA1Tl/+5m9hH4HO259EijM985kZcKUS/JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+06M9DitSXuW0RVVBdwYpogQghMB8GA1UdIwQY
MBaAFLjSOx5sB+Yq8tLn623giTsJEZq7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU5JN0htd0g1aXJ5MHVmcmJlQ0pPd2tSbXJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iNzRhYTItMjVlMC00YWQ1LThjYzMt
NjkwNjFlZjJjNDk5LzEvdU5JN0htd0g1aXJ5MHVmcmJlQ0pPd2tSbXJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9iNzRhYTItMjVlMC00YWQ1LThjYzMtNjkwNjFlZjJjNDk5
LzEvdU5JN0htd0g1aXJ5MHVmcmJlQ0pPd2tSbXJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3LhWiAC
PZq9d1U3fiGR+DHD9HNFb9v2S0pShTniCsvEhfxXM6t4d4W43MlJy8JjvbA3gssL
6GKXryA3grh01INJFng8YpLj1URCTMG6RByvmAtTwDUBy3dvXi/XkrZVVhxT9Evr
3MbuqH2IHZjOrrXIUL/XHkF9pcjBjww+BLRQM1mfU9RktlVRplJRx9dwO79fUdy/
KrWhtruLQFPgVznvl1/vEgzfUjH5wJQ3OBI8HTEOa1I6OoEkNjNqhT08jjuzikxt
ZZYoG2i6ClAZapU0J/zHs3yS5py4aImC/cJAZSszE/vJTCqzmo4pmre1S0CBaKtg
NFwlNYqjV6bXKg==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:28:04 2026 by rpki-client