Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
File: u8VfskrVVuBCAmUfbVqLJ9W-35c.mft (raw, json)
Hash identifier: XtPe1oVtK7GFBEkjYOs1NRIkjFBFQG72936wtb2oV2I=
Subject key identifier: 4B:F6:EA:BF:20:73:36:0D:9F:B8:A2:7E:F5:3C:A7:44:5C:0F:5C:69
Authority key identifier: BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
Certificate issuer: /CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Certificate serial: 019E1DC7A7F0425F1CEF375251F7B35C3691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
Manifest number: 15E3
Signing time: Tue 12 May 2026 20:01:24 +0000
Manifest this update: Tue 12 May 2026 20:01:24 +0000
Manifest next update: Wed 13 May 2026 20:01:24 +0000
Files and hashes: 1: 1UXzpmvTwZAsUDWWE8erylOknmA.roa (hash: bPU4V6mvT+M1L74dQ2qnl35ymoh6uHxc1XZ4WDy2uqA=)
2: amKu-jsoMwsxR9Euv1nnf91FACw.roa (hash: hG2SQQAbvE2nMpMXDrClrQrRBBagLC5ssOgwcgvlSt0=)
3: u8VfskrVVuBCAmUfbVqLJ9W-35c.crl (hash: tFUUowLuNd9TDgBC9bi1zHZn9s+zv6bQMWBW4HD397Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:a7:f0:42:5f:1c:ef:37:52:51:f7:b3:5c:36:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Validity
Not Before: May 12 20:01:24 2026 GMT
Not After : May 13 20:01:24 2026 GMT
Subject: CN=4bf6eabf2073360d9fb8a27ef53ca7445c0f5c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:94:85:1b:d8:cb:e3:2d:30:be:db:7f:21:0e:
58:3c:98:7a:43:c8:41:87:ef:2f:24:cf:95:9f:67:
28:a6:b4:4f:a9:a8:7f:33:ee:1e:f3:1f:09:d9:f9:
6e:b7:6b:19:cc:6e:76:28:8c:72:2c:b3:68:91:4e:
86:b4:67:12:f1:27:d6:b4:25:e4:a8:a9:6d:64:c9:
c2:48:33:fc:47:9c:ef:ca:13:95:71:54:89:e5:36:
7f:cb:dd:16:92:e6:c0:e1:40:df:bd:c1:2e:30:16:
8b:b1:e7:03:9c:b4:29:25:fa:47:1e:82:37:f6:f9:
79:8f:37:33:ba:ba:9f:fa:c9:bd:95:24:cb:6c:e7:
65:c2:1b:56:51:3e:a8:69:ce:ed:44:22:a0:4e:92:
fd:c2:1b:f0:2c:ca:f0:69:51:41:d1:4f:2c:31:d6:
1d:f3:a7:99:66:3d:dd:98:ae:dc:44:7d:df:94:56:
13:47:f4:01:6c:e1:ee:bb:42:46:e9:b3:8c:76:30:
64:18:e8:80:d2:2c:55:83:f0:dc:9f:c8:d5:2b:ba:
d9:33:5f:17:29:f5:3a:e0:95:f5:e5:c6:19:4d:94:
72:e8:f8:e8:eb:82:c6:52:0f:d9:ba:93:bf:f9:c8:
34:53:09:5a:99:b7:87:38:83:9f:a8:35:60:18:3a:
d9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F6:EA:BF:20:73:36:0D:9F:B8:A2:7E:F5:3C:A7:44:5C:0F:5C:69
X509v3 Authority Key Identifier:
keyid:BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:06:f5:38:00:e0:35:eb:62:2b:8f:bf:67:a7:4e:83:78:6e:
85:4f:77:f4:46:50:30:7c:d7:fc:f9:c8:0f:c9:ba:dd:2d:be:
4a:ad:73:9b:5f:a9:82:74:d2:cd:25:47:a8:1c:2c:98:57:9a:
11:58:cf:7a:59:65:05:d9:3a:c7:66:f6:8e:81:c6:c9:52:70:
fe:59:c4:ab:05:ae:67:46:01:db:17:9b:66:14:e3:87:43:72:
d2:67:3b:32:4a:38:d3:dd:49:99:d5:84:0a:cb:4a:df:44:2c:
c2:72:6c:32:5b:65:39:f3:ec:f8:7e:24:cc:16:71:6d:14:cd:
49:35:dd:70:ff:8b:1e:bb:d4:95:9c:f7:a0:89:bd:77:68:39:
97:13:a7:b2:c3:2e:e4:7b:fb:29:51:e7:6f:bd:da:78:6b:7d:
d2:f3:ba:c3:89:d1:0d:ec:22:e1:c7:44:e0:d4:7a:54:1f:a3:
38:3c:2f:f9:ff:ed:58:c9:ba:56:b5:66:3e:40:6c:bf:5d:69:
be:62:29:d8:4c:1e:9d:32:e9:71:17:d8:4d:b1:e0:5f:d2:16:
83:db:f4:44:af:86:84:1b:eb:1d:69:45:7e:28:89:b1:30:db:
eb:22:6e:e7:9f:06:66:82:c5:cf:23:50:93:f6:cc:d7:ea:f6:
04:d2:cb:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dx6fwQl8c7zdSUfezXDaRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYzU1ZmIyNGFkNTU2ZTA0MjAyNjUxZjZkNWE4YjI3ZDVi
ZWRmOTcwHhcNMjYwNTEyMjAwMTI0WhcNMjYwNTEzMjAwMTI0WjAzMTEwLwYDVQQD
Eyg0YmY2ZWFiZjIwNzMzNjBkOWZiOGEyN2VmNTNjYTc0NDVjMGY1YzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJSFG9jL4y0wvtt/IQ5YPJh6Q8hB
h+8vJM+Vn2coprRPqah/M+4e8x8J2flut2sZzG52KIxyLLNokU6GtGcS8SfWtCXk
qKltZMnCSDP8R5zvyhOVcVSJ5TZ/y90WkubA4UDfvcEuMBaLsecDnLQpJfpHHoI3
9vl5jzczurqf+sm9lSTLbOdlwhtWUT6oac7tRCKgTpL9whvwLMrwaVFB0U8sMdYd
86eZZj3dmK7cRH3flFYTR/QBbOHuu0JG6bOMdjBkGOiA0ixVg/Dcn8jVK7rZM18X
KfU64JX15cYZTZRy6Pjo64LGUg/ZupO/+cg0UwlambeHOIOfqDVgGDrZmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEv26r8gczYNn7iifvU8p0RcD1xpMB8GA1UdIwQY
MBaAFLvFX7JK1VbgQgJlH21aiyfVvt+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdThWZnNrclZWdUJDQW1VZmJWcUxKOVctMzVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80NjkyMmYtNWNiNi00ZDk4LWI0ZmMt
OTNiZDVlNDA4ZjkxLzEvdThWZnNrclZWdUJDQW1VZmJWcUxKOVctMzVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi80NjkyMmYtNWNiNi00ZDk4LWI0ZmMtOTNiZDVlNDA4Zjkx
LzEvdThWZnNrclZWdUJDQW1VZmJWcUxKOVctMzVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgb1OADg
NetiK4+/Z6dOg3huhU939EZQMHzX/PnID8m63S2+Sq1zm1+pgnTSzSVHqBwsmFea
EVjPelllBdk6x2b2joHGyVJw/lnEqwWuZ0YB2xebZhTjh0Ny0mc7Mko4091JmdWE
CstK30QswnJsMltlOfPs+H4kzBZxbRTNSTXdcP+LHrvUlZz3oIm9d2g5lxOnssMu
5Hv7KVHnb73aeGt90vO6w4nRDewi4cdE4NR6VB+jODwv+f/tWMm6VrVmPkBsv11p
vmIp2EwenTLpcRfYTbHgX9IWg9v0RK+GhBvrHWlFfiiJsTDb6yJu558GZoLFzyNQ
k/bM1+r2BNLLbA==
-----END CERTIFICATE-----
Generated at Wed May 13 07:28:07 2026 by rpki-client