Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
File: unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json)
Hash identifier: 1mX0+0ZLP1Fvyi8yVcGamQqQu+9y6F+bsSUGbaKDF6A=
Subject key identifier: DD:E8:30:F4:E9:59:96:8A:BC:A0:44:B5:84:DD:8C:01:B5:58:47:08
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 019D25F1615ADDD8EF46C82A0F371F858A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
Manifest number: 188F
Signing time: Wed 25 Mar 2026 17:01:09 +0000
Manifest this update: Wed 25 Mar 2026 17:01:09 +0000
Manifest next update: Thu 26 Mar 2026 17:01:09 +0000
Files and hashes: 1: ELl-IrEPcLADQrckbaizcrV9pro.roa (hash: dX1w5CK8c5BwI0rUjgeAtIMuwEFW5kTJU8HWC5OU5oY=)
2: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: RsnkOPJRNIcJKL5i3LNsWKFEiXqiXWslwPTCqj3ZbXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:61:5a:dd:d8:ef:46:c8:2a:0f:37:1f:85:8a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: Mar 25 17:01:09 2026 GMT
Not After : Mar 26 17:01:09 2026 GMT
Subject: CN=dde830f4e959968abca044b584dd8c01b5584708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a4:bf:ca:2d:92:92:13:3e:4c:98:3b:35:9e:
46:3e:cf:d4:45:f3:d3:ee:3e:10:d9:16:0e:d9:70:
5c:3c:8b:06:80:0a:ef:66:d2:5e:4e:b1:1f:a7:e3:
20:c3:77:4b:1b:fa:b4:9f:bf:3f:0e:c5:74:45:8f:
37:cb:21:ab:47:2f:38:81:ba:e7:bc:a1:d8:da:ab:
7e:12:89:3e:ae:05:e0:a2:65:0a:41:d4:64:f8:6c:
5c:85:af:52:1a:f1:52:b2:9f:83:4f:18:1b:d0:c3:
21:a7:78:4a:cb:40:20:ea:33:a8:dd:47:db:21:84:
ce:75:6d:22:66:3f:0d:cf:ce:33:aa:12:50:ac:d2:
75:76:37:53:55:e0:3c:9c:ae:f0:30:95:df:f6:47:
a6:c4:3f:43:71:f5:1b:6e:82:fb:70:22:dd:03:6f:
fe:0c:56:21:4d:61:c7:a5:43:12:90:89:70:88:74:
e8:86:e8:80:22:11:76:69:e9:8a:f7:b0:42:71:31:
3f:01:d0:7b:19:e1:90:46:8a:db:ce:70:a8:96:e7:
18:e6:b1:1e:3f:fb:12:62:7b:bd:a4:85:97:0e:d0:
34:7a:ca:b5:c1:30:0f:8f:e5:23:5e:78:07:4a:0c:
b8:67:60:da:65:77:fb:ae:70:5f:2d:4c:12:0b:cb:
5f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E8:30:F4:E9:59:96:8A:BC:A0:44:B5:84:DD:8C:01:B5:58:47:08
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ca:da:2f:8c:c2:d9:14:21:3c:58:00:23:1f:39:0d:97:59:
40:3f:66:4c:c5:a0:b1:51:b3:9c:fc:b5:b0:05:b5:44:c8:0e:
56:81:62:0f:8b:99:66:cd:4c:e0:0b:d1:99:36:eb:17:f3:c2:
fe:ab:b3:53:f9:52:8e:71:f4:cb:85:ed:07:fd:40:78:6f:2c:
3f:e0:92:aa:90:d5:e2:65:39:e0:5a:7b:cd:bf:58:83:ef:86:
ae:3c:25:61:aa:f9:73:74:e5:97:1c:08:c1:3f:de:8e:df:c2:
cc:a9:95:18:7d:d0:ec:59:04:5c:27:36:ff:38:e7:3d:13:b9:
98:ca:99:c2:dd:14:2c:91:72:e0:4b:e9:70:2b:90:e9:d2:b1:
96:69:b7:c7:09:5d:08:10:2d:de:50:0a:78:d9:45:4b:53:d3:
45:60:6e:af:99:e4:e6:5a:16:7b:e0:6b:73:cc:02:23:88:98:
9d:05:c6:58:77:42:ea:1c:39:49:c7:79:61:0c:01:5a:7c:83:
87:61:c6:f4:75:12:d3:41:f9:17:e9:64:01:77:fa:4e:14:c6:
21:5c:1f:4e:c8:6e:ac:87:65:05:db:c5:29:3f:27:e2:7b:8a:
97:d9:4d:07:8f:51:28:55:f0:a6:d7:ac:1e:b4:86:42:45:c8:
ab:8d:94:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8WFa3djvRsgqDzcfhYonMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhN2I5MzQwMmI5MjE4ZDdmNjEyYjRmOTYyNjI3MGE3MWFl
NmJlMmQwHhcNMjYwMzI1MTcwMTA5WhcNMjYwMzI2MTcwMTA5WjAzMTEwLwYDVQQD
EyhkZGU4MzBmNGU5NTk5NjhhYmNhMDQ0YjU4NGRkOGMwMWI1NTg0NzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6S/yi2SkhM+TJg7NZ5GPs/URfPT
7j4Q2RYO2XBcPIsGgArvZtJeTrEfp+Mgw3dLG/q0n78/DsV0RY83yyGrRy84gbrn
vKHY2qt+Eok+rgXgomUKQdRk+Gxcha9SGvFSsp+DTxgb0MMhp3hKy0Ag6jOo3Ufb
IYTOdW0iZj8Nz84zqhJQrNJ1djdTVeA8nK7wMJXf9kemxD9DcfUbboL7cCLdA2/+
DFYhTWHHpUMSkIlwiHTohuiAIhF2aemK97BCcTE/AdB7GeGQRorbznColucY5rEe
P/sSYnu9pIWXDtA0esq1wTAPj+UjXngHSgy4Z2DaZXf7rnBfLUwSC8tf1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3oMPTpWZaKvKBEtYTdjAG1WEcIMB8GA1UdIwQY
MBaAFLp7k0ArkhjX9hK0+WJicKca5r4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgt
ZjRjOTM2MDFjODU5LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgtZjRjOTM2MDFjODU5
LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMraL4zC
2RQhPFgAIx85DZdZQD9mTMWgsVGznPy1sAW1RMgOVoFiD4uZZs1M4AvRmTbrF/PC
/quzU/lSjnH0y4XtB/1AeG8sP+CSqpDV4mU54Fp7zb9Yg++GrjwlYar5c3TllxwI
wT/ejt/CzKmVGH3Q7FkEXCc2/zjnPRO5mMqZwt0ULJFy4EvpcCuQ6dKxlmm3xwld
CBAt3lAKeNlFS1PTRWBur5nk5loWe+Brc8wCI4iYnQXGWHdC6hw5Scd5YQwBWnyD
h2HG9HUS00H5F+lkAXf6ThTGIVwfTshurIdlBdvFKT8n4nuKl9lNB49RKFXwptes
HrSGQkXIq42U0w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:35 2026 by rpki-client