Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5358eb-1d43-44f4-bc00-07abff67202c/1/UfF0UrXxvy_3B27gWf8nXAyxEt4.mft
File: UfF0UrXxvy_3B27gWf8nXAyxEt4.mft (raw, json)
Hash identifier: zUmgpluh+HLjnWAU8iovsHsjjDC7FEms8Eg7BNFml1E=
Subject key identifier: F7:D3:63:38:B2:EE:64:8D:57:3B:E8:CB:88:FD:D8:42:84:F8:48:5E
Authority key identifier: 51:F1:74:52:B5:F1:BF:2F:F7:07:6E:E0:59:FF:27:5C:0C:B1:12:DE
Certificate issuer: /CN=51f17452b5f1bf2ff7076ee059ff275c0cb112de
Certificate serial: 019D28BB3EB928F480AD0076F5217F87F89C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfF0UrXxvy_3B27gWf8nXAyxEt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5358eb-1d43-44f4-bc00-07abff67202c/1/UfF0UrXxvy_3B27gWf8nXAyxEt4.mft
Manifest number: 012D
Signing time: Thu 26 Mar 2026 06:00:53 +0000
Manifest this update: Thu 26 Mar 2026 06:00:53 +0000
Manifest next update: Fri 27 Mar 2026 06:00:53 +0000
Files and hashes: 1: UfF0UrXxvy_3B27gWf8nXAyxEt4.crl (hash: CgyDDTMuBhlvp+qqsO4LrgF7VgiTFssKzOaGcczlm5o=)
2: xnR36Bx0JpfUS9cQokAQPkGelYc.roa (hash: JFUwAB+A5Z2yKD/NiQL6NZtFTms+2uaDA3yF3P2VOQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5358eb-1d43-44f4-bc00-07abff67202c/1/UfF0UrXxvy_3B27gWf8nXAyxEt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/5358eb-1d43-44f4-bc00-07abff67202c/1/UfF0UrXxvy_3B27gWf8nXAyxEt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UfF0UrXxvy_3B27gWf8nXAyxEt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:3e:b9:28:f4:80:ad:00:76:f5:21:7f:87:f8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f17452b5f1bf2ff7076ee059ff275c0cb112de
Validity
Not Before: Mar 26 06:00:53 2026 GMT
Not After : Mar 27 06:00:53 2026 GMT
Subject: CN=f7d36338b2ee648d573be8cb88fdd84284f8485e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:93:04:f7:a0:f4:43:46:11:b5:94:50:65:c0:
50:cb:5c:ca:16:36:c3:4b:5a:24:36:6f:28:4d:dd:
10:8d:e8:08:eb:77:59:8a:40:ed:3f:75:98:69:c8:
92:a1:17:dc:ff:1b:95:c4:e9:83:ca:26:ab:a8:3b:
75:37:01:33:a9:cc:4a:28:61:e0:d1:71:10:9d:60:
42:17:9a:68:98:60:ec:2b:9c:3c:d0:86:53:f7:9f:
82:6c:94:cf:bc:49:37:31:f6:6e:fb:8d:61:d8:bb:
b0:a7:3a:e7:2b:42:34:dc:f4:27:79:8c:53:96:ba:
c2:b3:41:93:e6:5b:f0:ab:0a:70:fa:44:a4:24:f7:
7d:53:f2:88:62:11:d0:ff:31:41:d9:dc:2e:4b:55:
f5:5f:c8:1b:3a:d8:80:49:34:5b:69:bb:cf:23:d4:
c7:19:81:e0:4e:05:db:29:e5:3e:e4:dd:8a:64:ce:
26:67:56:76:42:2e:a4:9e:ca:d0:a8:ff:13:6c:53:
69:6a:17:a6:c6:3d:17:30:c4:95:91:93:76:3f:e1:
8e:97:f7:43:c9:2e:b8:a2:51:e3:45:21:6d:87:36:
51:49:5b:f2:e5:58:7e:68:bf:7f:c1:36:27:69:b8:
ce:e5:a6:4e:ae:95:42:cb:f7:ed:c2:a0:93:bd:24:
a5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D3:63:38:B2:EE:64:8D:57:3B:E8:CB:88:FD:D8:42:84:F8:48:5E
X509v3 Authority Key Identifier:
keyid:51:F1:74:52:B5:F1:BF:2F:F7:07:6E:E0:59:FF:27:5C:0C:B1:12:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfF0UrXxvy_3B27gWf8nXAyxEt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5358eb-1d43-44f4-bc00-07abff67202c/1/UfF0UrXxvy_3B27gWf8nXAyxEt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5358eb-1d43-44f4-bc00-07abff67202c/1/UfF0UrXxvy_3B27gWf8nXAyxEt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:af:a4:a2:eb:3b:6d:91:37:52:5f:f5:a4:3a:38:5a:8e:4c:
55:9d:11:21:18:d1:77:23:50:2a:d0:b9:8b:04:d5:52:85:71:
6f:bc:d1:e4:d7:ab:f7:e7:52:c5:ba:07:aa:3a:d2:7f:8e:5d:
cf:87:8f:f5:79:02:6c:c8:1e:37:d3:a7:76:6b:52:ca:40:79:
f6:ae:db:db:3a:fe:9f:4c:09:ec:fb:ba:e3:06:64:8d:89:12:
7c:e8:39:d3:01:87:96:9b:f3:4f:d4:e8:fe:bf:59:8f:d2:b8:
cc:17:4d:51:d3:35:f1:48:8d:e0:51:54:38:99:a2:ee:0f:f5:
9c:0f:d4:28:dc:9d:d5:36:02:e4:9c:6e:ad:f6:84:9c:a5:b4:
55:f3:f1:d6:ce:d9:54:81:82:ab:9e:3a:36:25:4d:82:65:98:
f8:f5:b2:c1:85:e1:fe:29:71:37:8b:23:f1:47:aa:9b:c0:6e:
5d:48:c7:c5:97:f5:bb:18:96:fa:b8:44:35:95:fa:89:e5:46:
34:d1:73:4e:b5:55:d4:2e:e9:53:78:20:ca:a2:ab:dc:0f:b4:
45:ae:ae:ee:58:36:e1:4f:0a:9d:13:22:79:ee:3e:ca:91:38:
6f:fa:f8:d2:6a:b2:7e:4e:ae:27:57:22:98:a9:73:d6:19:b4:
42:de:ae:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ouz65KPSArQB29SF/h/icMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZjE3NDUyYjVmMWJmMmZmNzA3NmVlMDU5ZmYyNzVjMGNi
MTEyZGUwHhcNMjYwMzI2MDYwMDUzWhcNMjYwMzI3MDYwMDUzWjAzMTEwLwYDVQQD
EyhmN2QzNjMzOGIyZWU2NDhkNTczYmU4Y2I4OGZkZDg0Mjg0Zjg0ODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pME96D0Q0YRtZRQZcBQy1zKFjbD
S1okNm8oTd0QjegI63dZikDtP3WYaciSoRfc/xuVxOmDyiarqDt1NwEzqcxKKGHg
0XEQnWBCF5pomGDsK5w80IZT95+CbJTPvEk3MfZu+41h2LuwpzrnK0I03PQneYxT
lrrCs0GT5lvwqwpw+kSkJPd9U/KIYhHQ/zFB2dwuS1X1X8gbOtiASTRbabvPI9TH
GYHgTgXbKeU+5N2KZM4mZ1Z2Qi6knsrQqP8TbFNpahemxj0XMMSVkZN2P+GOl/dD
yS64olHjRSFthzZRSVvy5Vh+aL9/wTYnabjO5aZOrpVCy/ftwqCTvSSl3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfTYziy7mSNVzvoy4j92EKE+EheMB8GA1UdIwQY
MBaAFFHxdFK18b8v9wdu4Fn/J1wMsRLeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWZGMFVyWHh2eV8zQjI3Z1dmOG5YQXl4RXQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81MzU4ZWItMWQ0My00NGY0LWJjMDAt
MDdhYmZmNjcyMDJjLzEvVWZGMFVyWHh2eV8zQjI3Z1dmOG5YQXl4RXQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81MzU4ZWItMWQ0My00NGY0LWJjMDAtMDdhYmZmNjcyMDJj
LzEvVWZGMFVyWHh2eV8zQjI3Z1dmOG5YQXl4RXQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6+kous7
bZE3Ul/1pDo4Wo5MVZ0RIRjRdyNQKtC5iwTVUoVxb7zR5Ner9+dSxboHqjrSf45d
z4eP9XkCbMgeN9OndmtSykB59q7b2zr+n0wJ7Pu64wZkjYkSfOg50wGHlpvzT9To
/r9Zj9K4zBdNUdM18UiN4FFUOJmi7g/1nA/UKNyd1TYC5JxurfaEnKW0VfPx1s7Z
VIGCq546NiVNgmWY+PWywYXh/ilxN4sj8Ueqm8BuXUjHxZf1uxiW+rhENZX6ieVG
NNFzTrVV1C7pU3ggyqKr3A+0Ra6u7lg24U8KnRMiee4+ypE4b/r40mqyfk6uJ1ci
mKlz1hm0Qt6u3A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:09 2026 by rpki-client