Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
File: u_pCfUICOv2oiOhBX07c97ffGwU.mft (raw, json)
Hash identifier: /HD4g4tJu+6hHSbAhq+tCZKlJhvvjVjEYLn5iRbejkw=
Subject key identifier: 21:25:86:CD:DD:C3:53:A6:86:AE:2C:19:E4:18:4F:21:B5:63:66:17
Authority key identifier: BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05
Certificate issuer: /CN=bbfa427d42023afda888e8415f4edcf7b7df1b05
Certificate serial: 019D330801D6F39935CCCD5E75AC293F322B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
Manifest number: 0ADF
Signing time: Sat 28 Mar 2026 06:00:55 +0000
Manifest this update: Sat 28 Mar 2026 06:00:55 +0000
Manifest next update: Sun 29 Mar 2026 06:00:55 +0000
Files and hashes: 1: 1-hnniNiqKhghSmVXCidavYogegc.roa (hash: Jduthbq3o8EtI4RJz3qiljL6aUb5nGCPK55RrxKoNyI=)
2: u_pCfUICOv2oiOhBX07c97ffGwU.crl (hash: bjbLe5RGvPL+wrVqjYmgj6y1RGbwRgY39bb4VrU+B2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:01:d6:f3:99:35:cc:cd:5e:75:ac:29:3f:32:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfa427d42023afda888e8415f4edcf7b7df1b05
Validity
Not Before: Mar 28 06:00:55 2026 GMT
Not After : Mar 29 06:00:55 2026 GMT
Subject: CN=212586cdddc353a686ae2c19e4184f21b5636617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:f1:dc:1d:2a:89:07:73:55:07:eb:ba:8c:
19:6f:44:b0:44:d6:78:ec:c7:df:a8:ba:e0:7d:ca:
cf:c1:3b:a9:b0:16:78:a5:e0:c4:55:08:c3:1d:f3:
9d:77:3c:37:65:11:d7:53:0b:ae:c1:b3:2e:bd:61:
1c:0c:67:66:e2:fa:ad:7e:51:4d:11:5a:9a:07:53:
f2:28:1e:d9:ab:fa:16:4c:fa:8c:c4:36:65:8a:f8:
54:bd:44:53:73:c2:3b:9b:77:62:84:30:1d:6b:ed:
2c:ed:0a:a9:4e:84:8b:63:d8:79:62:73:9d:9a:3a:
5b:27:32:03:e5:8c:9a:32:00:12:4b:7b:06:51:d5:
97:8c:f6:a1:d3:2f:b5:18:87:8d:29:27:fe:8c:61:
0d:c0:80:71:bc:c8:71:7a:21:88:32:86:63:b9:85:
f7:e4:ef:a4:1c:2b:87:a0:6c:88:76:db:f2:e2:8f:
4c:88:38:d7:6e:57:0b:e8:a4:92:86:32:5d:fd:81:
a3:f1:84:49:fe:3d:cc:90:ac:56:41:44:87:e9:b6:
be:71:26:29:5b:86:75:4e:7a:ee:9b:94:c8:de:1a:
58:d8:92:8b:77:81:fa:5d:f7:80:b0:aa:6b:37:7d:
cc:84:63:a7:f9:7d:9e:b7:87:1c:15:46:10:12:1d:
56:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:25:86:CD:DD:C3:53:A6:86:AE:2C:19:E4:18:4F:21:B5:63:66:17
X509v3 Authority Key Identifier:
keyid:BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a3:ba:c3:ca:a7:a7:bc:68:ec:02:2b:e8:00:59:32:cd:2f:
dd:cf:ca:cc:08:04:bc:54:4f:21:21:ef:ef:a2:ad:34:a9:c0:
a7:27:e2:88:cd:5d:d5:3f:31:97:ef:bd:cd:1a:b4:96:eb:21:
5e:c9:41:76:3e:ca:e5:d5:59:b6:96:c9:e1:ae:63:2e:27:96:
62:e5:68:a4:fc:4d:35:90:ec:83:55:16:cf:d9:85:e1:0c:8c:
72:33:79:40:57:07:1e:60:d1:51:d6:46:87:26:71:13:b8:aa:
d0:da:df:17:c0:17:a1:ac:cf:c4:0b:be:d1:d1:51:4c:ad:13:
75:1d:27:02:04:78:6a:94:70:71:ef:f0:da:c8:0a:e2:f5:a6:
50:6b:8f:72:e3:cd:dc:fc:71:b7:32:76:20:d4:9d:65:8d:d4:
56:f1:8a:b1:53:48:86:68:eb:33:33:a2:0a:21:bb:4a:2b:ba:
ee:26:2e:ca:27:bf:73:d1:1c:68:11:3e:88:4e:16:64:72:f1:
cd:96:21:ba:6e:3b:88:b1:57:99:db:64:fd:d5:1a:96:2a:79:
ab:e2:2c:57:2b:19:19:0b:50:f4:72:ff:f3:be:21:42:3b:5a:
d0:9c:6f:de:c8:f1:6c:3a:5c:73:20:a2:cb:ff:63:69:af:61:
6b:61:21:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zCAHW85k1zM1edawpPzIrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZmE0MjdkNDIwMjNhZmRhODg4ZTg0MTVmNGVkY2Y3Yjdk
ZjFiMDUwHhcNMjYwMzI4MDYwMDU1WhcNMjYwMzI5MDYwMDU1WjAzMTEwLwYDVQQD
EygyMTI1ODZjZGRkYzM1M2E2ODZhZTJjMTllNDE4NGYyMWI1NjM2NjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWTx3B0qiQdzVQfruowZb0SwRNZ4
7MffqLrgfcrPwTupsBZ4peDEVQjDHfOddzw3ZRHXUwuuwbMuvWEcDGdm4vqtflFN
EVqaB1PyKB7Zq/oWTPqMxDZlivhUvURTc8I7m3dihDAda+0s7QqpToSLY9h5YnOd
mjpbJzID5YyaMgASS3sGUdWXjPah0y+1GIeNKSf+jGENwIBxvMhxeiGIMoZjuYX3
5O+kHCuHoGyIdtvy4o9MiDjXblcL6KSShjJd/YGj8YRJ/j3MkKxWQUSH6ba+cSYp
W4Z1Tnrum5TI3hpY2JKLd4H6XfeAsKprN33MhGOn+X2et4ccFUYQEh1WhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCElhs3dw1Omhq4sGeQYTyG1Y2YXMB8GA1UdIwQY
MBaAFLv6Qn1CAjr9qIjoQV9O3Pe33xsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9wQ2ZVSUNPdjJvaU9oQlgwN2M5N2ZmR3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80YTc5YTEtM2QxOS00ZGU0LWJlODkt
OGEyMDA2OTFmNzI0LzEvdV9wQ2ZVSUNPdjJvaU9oQlgwN2M5N2ZmR3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS80YTc5YTEtM2QxOS00ZGU0LWJlODktOGEyMDA2OTFmNzI0
LzEvdV9wQ2ZVSUNPdjJvaU9oQlgwN2M5N2ZmR3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbaO6w8qn
p7xo7AIr6ABZMs0v3c/KzAgEvFRPISHv76KtNKnApyfiiM1d1T8xl++9zRq0lush
XslBdj7K5dVZtpbJ4a5jLieWYuVopPxNNZDsg1UWz9mF4QyMcjN5QFcHHmDRUdZG
hyZxE7iq0NrfF8AXoazPxAu+0dFRTK0TdR0nAgR4apRwce/w2sgK4vWmUGuPcuPN
3PxxtzJ2INSdZY3UVvGKsVNIhmjrMzOiCiG7Siu67iYuyie/c9EcaBE+iE4WZHLx
zZYhum47iLFXmdtk/dUalip5q+IsVysZGQtQ9HL/874hQjta0Jxv3sjxbDpccyCi
y/9jaa9ha2Ehgw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 08:44:25 2026 by rpki-client