Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
File: xUUK-nPwuHpCACjCsqSMzg_pKwo.mft (raw, json)
Hash identifier: /RyaTqOBJ7IJXXhiyai4sJIRFSkYij19+aMMX7VZ08Q=
Subject key identifier: C9:5F:BA:03:49:B8:DE:DF:2A:84:F7:BA:CA:33:7F:4A:A9:A0:7B:C5
Authority key identifier: C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
Certificate issuer: /CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Certificate serial: 019D26CDA97F5CCC9928B98F8BB8DBBB1B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 21:01:45 +0000
Manifest this update: Wed 25 Mar 2026 21:01:45 +0000
Manifest next update: Thu 26 Mar 2026 21:01:45 +0000
Files and hashes: 1: SU9PYRAM665DV-tMHEvPHcVEgsI.roa (hash: jeXeTXBC5h2fT2fI75NdT9H4uSbQgepZnNzAOw/Te8I=)
2: rXw-nLWuLOJA5VYfraArb8rhBxg.roa (hash: aX5SC+qo7NJeSmp0QxRgYljkusSGS9FEUNCHyn6SxQM=)
3: xUUK-nPwuHpCACjCsqSMzg_pKwo.crl (hash: BCJAN9nR40MyhdifeznmRRTNtqinaywRKpEXYUSSDTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:a9:7f:5c:cc:99:28:b9:8f:8b:b8:db:bb:1b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Validity
Not Before: Mar 25 21:01:45 2026 GMT
Not After : Mar 26 21:01:45 2026 GMT
Subject: CN=c95fba0349b8dedf2a84f7baca337f4aa9a07bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2d:30:8f:cf:e3:05:4b:d5:69:0c:08:12:65:
17:f3:01:d8:ed:64:e4:d5:70:9f:d5:2e:75:5b:22:
9f:94:28:41:3a:c8:09:8d:31:46:e6:cf:38:d9:8e:
c1:60:9f:d6:d8:5e:36:61:fa:e0:0e:f6:55:7b:a6:
20:f3:2f:44:32:a8:54:de:1d:60:47:86:19:db:ea:
24:46:be:d6:8f:c8:4d:41:a9:2e:ce:6a:71:d2:29:
71:91:a9:9c:0d:14:59:22:e6:51:8e:b8:98:dc:46:
3e:0f:ab:36:05:ca:80:0c:80:95:44:15:e3:20:59:
70:b7:84:67:56:42:fd:85:bc:8b:e7:eb:32:0b:aa:
0b:1f:45:c0:81:8d:6b:ac:2a:6d:2f:e9:b1:a7:ca:
23:86:03:c2:23:1c:2d:73:b6:50:c4:0c:66:a4:3e:
ab:55:6f:06:27:38:81:a1:df:96:76:dc:cf:bb:3a:
4e:76:cd:3e:b1:71:95:71:e6:f8:77:55:8b:e3:50:
dc:49:e2:44:c7:f7:39:b3:b6:a7:24:46:4f:61:b0:
a9:25:5e:06:ea:c5:42:1d:09:3d:1c:f6:ea:0c:36:
a1:89:41:94:e2:8b:af:13:6a:4b:12:8a:5b:96:df:
1e:54:be:2d:f8:52:7a:2b:c4:51:57:0f:5c:7d:c0:
f2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5F:BA:03:49:B8:DE:DF:2A:84:F7:BA:CA:33:7F:4A:A9:A0:7B:C5
X509v3 Authority Key Identifier:
keyid:C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:91:d0:da:20:30:eb:d0:23:e3:6e:b2:f1:f2:18:90:e9:09:
ee:80:7b:26:d8:36:6f:3b:d4:56:8a:2c:7b:bc:2b:40:85:d4:
05:33:ba:a8:fc:3c:31:9d:49:5a:6f:2b:dc:ce:55:e3:d9:ba:
7c:20:1f:fd:9e:12:b1:3c:c9:fd:bb:8a:65:49:90:37:49:3c:
3a:ae:de:c7:97:42:d9:0b:78:2c:5f:a5:2b:df:d1:1d:81:35:
16:a8:86:89:99:67:7c:dd:69:57:3a:9b:60:8a:1c:e2:37:4a:
2a:82:c6:12:1f:57:8c:46:95:50:68:6f:16:3c:2d:a8:79:7f:
2e:99:28:f2:dd:cc:b8:d5:7e:c5:f4:76:3a:93:21:72:8d:d3:
8a:86:09:a4:28:d2:2c:08:d6:13:ac:47:e4:f3:5a:7d:e6:05:
9c:a7:f4:d9:b3:05:5a:1e:ae:53:eb:35:ff:8b:83:78:db:1d:
c7:59:04:cb:23:f6:3a:b1:cc:c5:ea:e2:2e:91:79:30:87:f0:
b9:5b:ff:8c:c1:ee:6f:d5:52:35:3f:f8:95:04:ef:5c:af:65:
6c:64:d6:aa:55:77:ce:c5:8e:de:b2:12:ef:a0:a4:63:49:3c:
34:dd:1e:2d:fb:4b:31:ec:0a:a5:dd:56:02:2e:02:75:4c:39:
c6:9b:75:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzal/XMyZKLmPi7jbuxtiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NDUwYWZhNzNmMGI4N2E0MjAwMjhjMmIyYTQ4Y2NlMGZl
OTJiMGEwHhcNMjYwMzI1MjEwMTQ1WhcNMjYwMzI2MjEwMTQ1WjAzMTEwLwYDVQQD
EyhjOTVmYmEwMzQ5YjhkZWRmMmE4NGY3YmFjYTMzN2Y0YWE5YTA3YmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS0wj8/jBUvVaQwIEmUX8wHY7WTk
1XCf1S51WyKflChBOsgJjTFG5s842Y7BYJ/W2F42YfrgDvZVe6Yg8y9EMqhU3h1g
R4YZ2+okRr7Wj8hNQakuzmpx0ilxkamcDRRZIuZRjriY3EY+D6s2BcqADICVRBXj
IFlwt4RnVkL9hbyL5+syC6oLH0XAgY1rrCptL+mxp8ojhgPCIxwtc7ZQxAxmpD6r
VW8GJziBod+WdtzPuzpOds0+sXGVceb4d1WL41DcSeJEx/c5s7anJEZPYbCpJV4G
6sVCHQk9HPbqDDahiUGU4ouvE2pLEopblt8eVL4t+FJ6K8RRVw9cfcDy1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlfugNJuN7fKoT3usozf0qpoHvFMB8GA1UdIwQY
MBaAFMVFCvpz8Lh6QgAowrKkjM4P6SsKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFVVSy1uUHd1SHBDQUNqQ3NxU016Z19wS3dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hMmE2YWQtYjE1Zi00NzM0LWI1OWUt
NjY0YTk5MjZmMzMzLzEveFVVSy1uUHd1SHBDQUNqQ3NxU016Z19wS3dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9hMmE2YWQtYjE1Zi00NzM0LWI1OWUtNjY0YTk5MjZmMzMz
LzEveFVVSy1uUHd1SHBDQUNqQ3NxU016Z19wS3dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5HQ2iAw
69Aj426y8fIYkOkJ7oB7Jtg2bzvUVoose7wrQIXUBTO6qPw8MZ1JWm8r3M5V49m6
fCAf/Z4SsTzJ/buKZUmQN0k8Oq7ex5dC2Qt4LF+lK9/RHYE1FqiGiZlnfN1pVzqb
YIoc4jdKKoLGEh9XjEaVUGhvFjwtqHl/Lpko8t3MuNV+xfR2OpMhco3TioYJpCjS
LAjWE6xH5PNafeYFnKf02bMFWh6uU+s1/4uDeNsdx1kEyyP2OrHMxeriLpF5MIfw
uVv/jMHub9VSNT/4lQTvXK9lbGTWqlV3zsWO3rIS76CkY0k8NN0eLftLMewKpd1W
Ai4CdUw5xpt1SQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:32 2026 by rpki-client