Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
File: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft (raw, json)
Hash identifier: P2HE8ADitkN4aUMDK7lRv1ChJfs5j6ooDD2oV309WW4=
Subject key identifier: 96:E4:AA:88:98:D5:29:D6:E9:0F:16:6F:0A:9A:27:61:E3:77:B1:34
Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
Certificate issuer: /CN=bbd351b274fc23a42728303638a0d62b606401b4
Certificate serial: 019D281675B20A345F4ADA3CCE161CB4E936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 03:00:53 +0000
Manifest this update: Thu 26 Mar 2026 03:00:53 +0000
Manifest next update: Fri 27 Mar 2026 03:00:53 +0000
Files and hashes: 1: 3dXQNTeYEXwgMvCj--w5pPENAJU.roa (hash: 3G9QvRM4k9jqWeSWNLfEsowBkk0Z8XBxLLqfEHkaBDM=)
2: b9cInp7Or1qBr9PuhesAeLquPqQ.roa (hash: 4GENDH+hUgF++1KALJEHVMXlXhH/iPfvsuAOj33raco=)
3: hS7RgT3aGNpjDg2o5zlqkEAGb90.roa (hash: ruxCN88xcOgn5K5hz1rXwR19nQEArZ1nYrpc6XCrIWE=)
4: pUeHHF4pC4-zIRXO_grSASp1OfM.roa (hash: kn9V/PD8fwcG7V/Q9LK/O7MAEpNrkEsY4bQFNUkSntc=)
5: tm-0BywjpYQ_JdG102XSdl2PwkI.roa (hash: DKW7dfG1+ENLwCJlJJ+O62vn9P7SrAjIIPIC1AGnTVc=)
6: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl (hash: eabEheIHW68mkX/pbQfeOu3ZVCHuxEG9UwFsNN1aUvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:75:b2:0a:34:5f:4a:da:3c:ce:16:1c:b4:e9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4
Validity
Not Before: Mar 26 03:00:53 2026 GMT
Not After : Mar 27 03:00:53 2026 GMT
Subject: CN=96e4aa8898d529d6e90f166f0a9a2761e377b134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:fa:5b:2b:f6:39:27:20:ae:77:44:77:29:
74:a9:6c:c3:81:b2:fd:06:bd:b8:ce:d0:91:e2:7b:
ae:13:71:31:38:dd:2a:d0:14:1e:4f:9d:e0:91:f5:
cd:14:39:a6:10:31:d1:92:9f:e5:0f:32:60:0a:fc:
11:68:c7:5d:70:21:85:78:ca:72:81:fe:fc:e9:15:
47:16:13:ff:0d:e3:d1:81:81:b3:fb:59:d8:49:b6:
6c:57:97:ba:52:99:53:70:6d:b9:da:a8:c1:b6:48:
ce:76:f7:31:58:0d:be:77:7d:71:25:f7:ab:65:77:
16:17:5d:55:ca:67:02:1c:03:00:c5:da:72:b8:5d:
47:e9:1a:5e:46:f3:78:8b:ea:50:43:e9:fa:e3:b4:
f9:be:7a:57:6d:f6:59:09:d5:a0:17:73:2d:46:c7:
56:95:98:7b:95:f0:1d:15:1c:6a:29:72:bc:0a:68:
82:d3:01:f3:92:2b:1b:89:da:c0:7c:de:38:48:93:
1f:95:e9:2b:33:85:75:07:64:45:93:79:bf:d1:0d:
f3:5d:0b:f9:4f:20:ed:e1:96:e0:e8:7a:95:53:fd:
17:5a:36:58:6b:e6:55:cd:5f:e0:c5:b8:ec:40:90:
c4:f7:c3:cf:3b:ea:ac:ec:39:ad:34:f7:e1:60:23:
86:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E4:AA:88:98:D5:29:D6:E9:0F:16:6F:0A:9A:27:61:E3:77:B1:34
X509v3 Authority Key Identifier:
keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:89:f9:e6:ee:37:63:b7:35:9e:c6:ef:3b:6c:98:f1:a5:4e:
7c:2d:d6:43:1f:5b:8b:f8:54:14:62:11:9b:06:bf:e5:d3:63:
3f:c0:eb:54:b3:09:2e:9a:72:8c:0c:ea:31:af:fb:fb:b6:88:
ed:93:01:20:01:ae:d4:08:85:b2:49:c6:92:a0:cb:ed:f7:ad:
36:b2:52:2b:b9:8f:b7:1a:c7:cd:3d:43:ea:e4:cc:3b:74:4b:
83:d5:98:8b:a0:73:13:9f:01:36:41:12:1c:f2:b7:ba:dd:60:
54:86:31:3d:9c:e9:2a:15:46:54:4a:ae:01:d2:59:5f:f1:80:
98:87:bb:4c:ac:fe:4c:9b:24:a8:9d:ce:3c:4f:99:9d:3b:52:
df:b7:b2:03:24:ee:5a:53:eb:2b:81:95:35:a5:11:6c:d0:fa:
0a:f7:c6:54:cb:eb:0d:da:5f:b3:eb:44:8e:4c:7a:4e:ec:44:
2a:95:c5:b9:1b:9b:5d:94:3a:54:98:b9:3c:9c:19:dd:f8:1a:
17:54:c3:33:9c:d8:d7:d7:07:39:cc:8f:52:da:7d:85:4a:dc:
a7:ce:49:ab:16:8f:51:e5:f1:af:27:b5:c4:27:4c:b6:8d:bc:
af:ac:b3:d9:5b:2f:a7:31:c5:a5:20:13:c3:3a:6a:1c:c5:87:
c5:a4:19:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFnWyCjRfSto8zhYctOk2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZDM1MWIyNzRmYzIzYTQyNzI4MzAzNjM4YTBkNjJiNjA2
NDAxYjQwHhcNMjYwMzI2MDMwMDUzWhcNMjYwMzI3MDMwMDUzWjAzMTEwLwYDVQQD
Eyg5NmU0YWE4ODk4ZDUyOWQ2ZTkwZjE2NmYwYTlhMjc2MWUzNzdiMTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2T6Wyv2OScgrndEdyl0qWzDgbL9
Br24ztCR4nuuE3ExON0q0BQeT53gkfXNFDmmEDHRkp/lDzJgCvwRaMddcCGFeMpy
gf786RVHFhP/DePRgYGz+1nYSbZsV5e6UplTcG252qjBtkjOdvcxWA2+d31xJfer
ZXcWF11VymcCHAMAxdpyuF1H6RpeRvN4i+pQQ+n647T5vnpXbfZZCdWgF3MtRsdW
lZh7lfAdFRxqKXK8CmiC0wHzkisbidrAfN44SJMflekrM4V1B2RFk3m/0Q3zXQv5
TyDt4Zbg6HqVU/0XWjZYa+ZVzV/gxbjsQJDE98PPO+qs7DmtNPfhYCOGvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbkqoiY1SnW6Q8WbwqaJ2Hjd7E0MB8GA1UdIwQY
MBaAFLvTUbJ0/COkJygwNjig1itgZAG0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jMWY5MGEtMmJhZC00MWI0LWIxYTYt
NDZiMzAyOGEwM2IwLzEvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9jMWY5MGEtMmJhZC00MWI0LWIxYTYtNDZiMzAyOGEwM2Iw
LzEvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALIn55u43
Y7c1nsbvO2yY8aVOfC3WQx9bi/hUFGIRmwa/5dNjP8DrVLMJLppyjAzqMa/7+7aI
7ZMBIAGu1AiFsknGkqDL7fetNrJSK7mPtxrHzT1D6uTMO3RLg9WYi6BzE58BNkES
HPK3ut1gVIYxPZzpKhVGVEquAdJZX/GAmIe7TKz+TJskqJ3OPE+ZnTtS37eyAyTu
WlPrK4GVNaURbND6CvfGVMvrDdpfs+tEjkx6TuxEKpXFuRubXZQ6VJi5PJwZ3fga
F1TDM5zY19cHOcyPUtp9hUrcp85JqxaPUeXxrye1xCdMto28r6yz2VsvpzHFpSAT
wzpqHMWHxaQZNw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:54 2026 by rpki-client