Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
File: uGWF0IuX5nnwgovxAr6rUdza-oc.mft (raw, json)
Hash identifier: Cf3yco2Fm4R1AKOy+EvPmJ9iE2nQ8iFWetCid3gXYe0=
Subject key identifier: A4:9A:78:A5:0C:B1:3B:0F:DB:86:35:E8:5A:BF:B6:3F:54:CA:9A:F9
Authority key identifier: B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87
Certificate issuer: /CN=b86585d08b97e679f0828bf102beab51dcdafa87
Certificate serial: 019D2B4DF664D02CB741347DD6C79E5D7FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
Manifest number: 0243
Signing time: Thu 26 Mar 2026 18:00:22 +0000
Manifest this update: Thu 26 Mar 2026 18:00:22 +0000
Manifest next update: Fri 27 Mar 2026 18:00:22 +0000
Files and hashes: 1: Ga14DKlkNtPaU4_WDklMXTBEZd0.roa (hash: 51BV+zXQbnh+NfWZphUfXu97WrA83bdxjQhGkdY1730=)
2: uGWF0IuX5nnwgovxAr6rUdza-oc.crl (hash: onq+MGxRbpHubbcKIZrL8rG4W682yQx6aP+0TBXb1no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4d:f6:64:d0:2c:b7:41:34:7d:d6:c7:9e:5d:7f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86585d08b97e679f0828bf102beab51dcdafa87
Validity
Not Before: Mar 26 18:00:22 2026 GMT
Not After : Mar 27 18:00:22 2026 GMT
Subject: CN=a49a78a50cb13b0fdb8635e85abfb63f54ca9af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:40:b7:50:09:47:9a:98:80:37:ad:a3:60:
02:3d:2b:70:d9:11:17:2f:bf:c0:d3:9b:b5:46:ab:
85:43:7e:2b:09:34:b7:d4:54:33:ca:ef:09:0b:33:
eb:20:ac:bf:9a:7a:19:62:b3:bc:37:bc:56:c4:3e:
30:7f:7d:32:25:2a:6b:0d:94:a8:94:69:ef:f3:ce:
d2:1c:2a:c1:87:e8:8d:05:b1:7e:0f:4f:63:86:f9:
15:a4:75:7d:9a:47:69:36:61:ff:e0:20:86:7d:df:
57:20:15:d5:48:03:bd:70:68:1e:a7:2d:1e:4c:a1:
9b:3d:85:b7:f0:8c:6c:e5:81:31:ea:13:91:58:8f:
b5:cf:92:0b:3f:50:a3:01:62:b3:d4:be:de:28:9b:
77:5b:b4:1a:19:3e:48:93:3f:c7:ea:69:7d:02:0f:
1c:71:32:22:a2:74:c6:ff:91:16:8e:7f:a5:c5:de:
f6:b5:7e:ea:99:f0:4a:cd:c3:e5:bf:46:51:63:33:
9b:d1:5b:71:bf:52:13:0f:02:60:a7:af:71:09:f0:
03:cc:02:ab:bd:84:1d:f4:b2:7c:99:17:9d:84:b1:
68:50:d3:3a:cc:ab:df:df:32:d9:64:2c:4c:6d:2d:
f7:f5:24:73:db:07:8c:59:05:79:65:6f:90:c8:30:
21:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9A:78:A5:0C:B1:3B:0F:DB:86:35:E8:5A:BF:B6:3F:54:CA:9A:F9
X509v3 Authority Key Identifier:
keyid:B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e3:0c:18:ff:d1:61:0f:90:05:3a:3b:3f:51:e1:32:08:09:
b9:f6:9f:2a:4f:93:e6:36:c6:4c:ea:0c:30:18:58:4c:09:83:
d8:5a:b9:b0:49:65:81:42:74:08:8b:8e:c9:ba:9a:b5:a2:8c:
5a:b4:c9:6c:91:39:f1:90:d8:e5:11:1a:9f:cd:87:b8:bb:b1:
c3:c3:02:45:50:f5:60:6a:01:c8:4c:c0:fe:be:2f:0e:91:69:
37:65:1f:dc:09:1b:e0:b5:ea:4a:8b:3c:47:88:c8:bb:08:cf:
ce:fa:64:b5:d6:f1:2a:0f:71:92:b3:62:37:3e:60:e8:9c:ab:
00:c1:84:ca:73:36:f6:7c:e9:b0:3c:7d:df:ed:28:1b:43:22:
4a:d3:da:3e:90:a1:6d:fa:1f:7c:ad:bb:22:c8:6b:27:80:a0:
6a:ed:b1:2c:c4:e0:3f:cb:34:6c:df:b6:26:57:dc:32:8b:41:
07:57:9a:5c:ac:c8:3b:ae:89:af:0c:ce:6c:56:d7:8c:1e:54:
09:5a:bf:cd:82:ce:dc:e7:96:59:1d:46:5d:57:d0:b9:04:92:
91:42:87:3f:8f:54:24:05:69:b7:12:f6:30:41:15:2a:b9:ba:
b9:c4:5d:bf:2d:f4:93:ec:54:eb:58:09:da:4f:c1:4b:b8:89:
1d:98:ca:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rTfZk0Cy3QTR91seeXX+9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NjU4NWQwOGI5N2U2NzlmMDgyOGJmMTAyYmVhYjUxZGNk
YWZhODcwHhcNMjYwMzI2MTgwMDIyWhcNMjYwMzI3MTgwMDIyWjAzMTEwLwYDVQQD
EyhhNDlhNzhhNTBjYjEzYjBmZGI4NjM1ZTg1YWJmYjYzZjU0Y2E5YWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW9At1AJR5qYgDeto2ACPStw2REX
L7/A05u1RquFQ34rCTS31FQzyu8JCzPrIKy/mnoZYrO8N7xWxD4wf30yJSprDZSo
lGnv887SHCrBh+iNBbF+D09jhvkVpHV9mkdpNmH/4CCGfd9XIBXVSAO9cGgepy0e
TKGbPYW38Ixs5YEx6hORWI+1z5ILP1CjAWKz1L7eKJt3W7QaGT5Ikz/H6ml9Ag8c
cTIionTG/5EWjn+lxd72tX7qmfBKzcPlv0ZRYzOb0Vtxv1ITDwJgp69xCfADzAKr
vYQd9LJ8mRedhLFoUNM6zKvf3zLZZCxMbS339SRz2weMWQV5ZW+QyDAh+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSaeKUMsTsP24Y16Fq/tj9Uypr5MB8GA1UdIwQY
MBaAFLhlhdCLl+Z58IKL8QK+q1Hc2vqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUdXRjBJdVg1bm53Z292eEFyNnJVZHphLW9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC84OTM2ZGEtZjIwYi00NWU3LTk5NDgt
NGZhZGNiMTgyYzVhLzEvdUdXRjBJdVg1bm53Z292eEFyNnJVZHphLW9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC84OTM2ZGEtZjIwYi00NWU3LTk5NDgtNGZhZGNiMTgyYzVh
LzEvdUdXRjBJdVg1bm53Z292eEFyNnJVZHphLW9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHeMMGP/R
YQ+QBTo7P1HhMggJufafKk+T5jbGTOoMMBhYTAmD2Fq5sEllgUJ0CIuOybqataKM
WrTJbJE58ZDY5REan82HuLuxw8MCRVD1YGoByEzA/r4vDpFpN2Uf3Akb4LXqSos8
R4jIuwjPzvpktdbxKg9xkrNiNz5g6JyrAMGEynM29nzpsDx93+0oG0MiStPaPpCh
bfoffK27IshrJ4Cgau2xLMTgP8s0bN+2JlfcMotBB1eaXKzIO66JrwzObFbXjB5U
CVq/zYLO3OeWWR1GXVfQuQSSkUKHP49UJAVptxL2MEEVKrm6ucRdvy30k+xU61gJ
2k/BS7iJHZjK3Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:27:30 2026 by rpki-client