Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/UgU2_ndmkYN3KKf-RVpzJVW5ESU.mft
File: UgU2_ndmkYN3KKf-RVpzJVW5ESU.mft (raw, json)
Hash identifier: pwMr+1ZA22zMeeYVea0pB/DP9fjfeRq9MdOpJGjBvRE=
Subject key identifier: D1:23:73:78:D1:9D:64:81:87:2F:98:61:01:76:33:8C:0D:2A:C3:76
Authority key identifier: 52:05:36:FE:77:66:91:83:77:28:A7:FE:45:5A:73:25:55:B9:11:25
Certificate issuer: /CN=520536fe776691837728a7fe455a732555b91125
Certificate serial: 019D25BA14A91FD1611D04F8031962DA7D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgU2_ndmkYN3KKf-RVpzJVW5ESU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/UgU2_ndmkYN3KKf-RVpzJVW5ESU.mft
Manifest number: 01D1
Signing time: Wed 25 Mar 2026 16:00:45 +0000
Manifest this update: Wed 25 Mar 2026 16:00:45 +0000
Manifest next update: Thu 26 Mar 2026 16:00:45 +0000
Files and hashes: 1: 5Uf_d--u73R95XUGfW29utn5B6s.roa (hash: YAUOI68RjuBmOz4UKHfWyMXQWqCSPsvnMhP3+LZ2/C0=)
2: UgU2_ndmkYN3KKf-RVpzJVW5ESU.crl (hash: nZaUOrKtto44RPEGNtreUBtniqfDj0oKIOEnLZgZx2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/UgU2_ndmkYN3KKf-RVpzJVW5ESU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/UgU2_ndmkYN3KKf-RVpzJVW5ESU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UgU2_ndmkYN3KKf-RVpzJVW5ESU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:14:a9:1f:d1:61:1d:04:f8:03:19:62:da:7d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=520536fe776691837728a7fe455a732555b91125
Validity
Not Before: Mar 25 16:00:45 2026 GMT
Not After : Mar 26 16:00:45 2026 GMT
Subject: CN=d1237378d19d6481872f98610176338c0d2ac376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fd:f2:c4:a8:7a:e5:49:a0:fe:04:0c:f9:96:
50:34:a4:b6:fa:e6:c3:d5:4e:9a:7b:e7:c2:bf:8e:
d8:fc:c6:cf:c3:76:88:85:0b:b0:8f:5c:83:4c:17:
f5:ee:10:80:d6:9f:d1:3d:30:df:65:af:be:73:19:
4d:65:90:84:0d:e9:c3:14:10:b3:47:31:17:ac:9b:
7d:5d:b1:3d:56:f4:c7:ea:1d:d5:4b:13:25:a5:de:
e3:4f:ad:7e:df:3e:10:68:e7:ab:33:50:93:8f:e8:
f7:73:f1:7c:84:37:3f:bd:60:cf:f9:6c:4a:be:b4:
b9:d1:2a:98:fb:f2:c9:16:50:d1:11:21:48:e5:b1:
c3:75:ec:e4:65:7a:88:1a:7f:83:54:6f:03:60:22:
c5:82:6e:f3:69:27:49:d4:f1:b2:6d:81:30:35:33:
92:d7:a9:15:ba:62:b1:2b:a4:dd:1a:f0:38:05:e2:
57:c1:e9:91:e9:55:94:53:00:76:f8:08:0b:3d:a6:
e1:14:e3:bc:a3:bf:61:4d:fc:20:e3:52:d3:09:61:
73:ab:6a:8b:a2:3c:b6:a3:48:fa:45:f7:64:99:f5:
64:5f:4a:06:0b:a6:a8:94:9f:bd:3f:ab:a2:33:ff:
64:a1:fb:21:e2:36:27:2c:65:09:79:3e:90:26:df:
30:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:23:73:78:D1:9D:64:81:87:2F:98:61:01:76:33:8C:0D:2A:C3:76
X509v3 Authority Key Identifier:
keyid:52:05:36:FE:77:66:91:83:77:28:A7:FE:45:5A:73:25:55:B9:11:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgU2_ndmkYN3KKf-RVpzJVW5ESU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/UgU2_ndmkYN3KKf-RVpzJVW5ESU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/UgU2_ndmkYN3KKf-RVpzJVW5ESU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4b:ac:fa:59:db:d9:9e:d1:4f:84:e2:ad:15:53:e1:54:a4:
46:78:12:70:e7:d7:bf:fa:dd:e7:70:d7:1a:cc:50:d7:4e:f4:
37:2a:d9:e0:a7:4e:24:12:47:5d:0c:a6:09:69:23:e5:ab:56:
ff:84:d9:b4:df:f2:5f:9e:06:25:06:7e:d9:48:9b:28:49:82:
20:56:3c:fa:da:2a:d0:db:27:52:ab:4d:3e:43:bc:13:a7:0c:
3e:ac:bb:82:7e:d6:b7:f7:89:bb:5b:e3:50:b8:91:de:c9:de:
7a:84:7d:de:cd:68:f8:a0:76:ae:15:58:a2:55:f8:19:c0:1c:
41:67:1b:ee:23:98:29:24:be:2a:cd:f2:e9:be:58:ca:f0:93:
b6:c5:a6:76:a0:bd:1d:91:3a:3b:59:32:40:92:36:be:fa:52:
4d:1e:b1:e9:74:b2:75:9a:b6:13:cf:f6:60:03:57:7e:d9:7c:
dd:d4:85:02:d9:d8:61:7b:8e:0d:8f:4e:33:3e:69:db:9a:b7:
32:a9:b7:50:c4:30:ad:07:b0:38:d7:80:5b:2c:36:77:66:2a:
35:75:91:02:37:f9:a4:61:f4:bc:ed:f5:d8:3f:ad:72:33:75:
0c:f5:a2:bf:31:bb:a7:ff:0c:f6:d7:cc:c8:89:47:b8:5f:9c:
6e:17:ae:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0luhSpH9FhHQT4Axli2n0CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMDUzNmZlNzc2NjkxODM3NzI4YTdmZTQ1NWE3MzI1NTVi
OTExMjUwHhcNMjYwMzI1MTYwMDQ1WhcNMjYwMzI2MTYwMDQ1WjAzMTEwLwYDVQQD
EyhkMTIzNzM3OGQxOWQ2NDgxODcyZjk4NjEwMTc2MzM4YzBkMmFjMzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv3yxKh65Umg/gQM+ZZQNKS2+ubD
1U6ae+fCv47Y/MbPw3aIhQuwj1yDTBf17hCA1p/RPTDfZa++cxlNZZCEDenDFBCz
RzEXrJt9XbE9VvTH6h3VSxMlpd7jT61+3z4QaOerM1CTj+j3c/F8hDc/vWDP+WxK
vrS50SqY+/LJFlDRESFI5bHDdezkZXqIGn+DVG8DYCLFgm7zaSdJ1PGybYEwNTOS
16kVumKxK6TdGvA4BeJXwemR6VWUUwB2+AgLPabhFOO8o79hTfwg41LTCWFzq2qL
ojy2o0j6RfdkmfVkX0oGC6aolJ+9P6uiM/9kofsh4jYnLGUJeT6QJt8wGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEjc3jRnWSBhy+YYQF2M4wNKsN2MB8GA1UdIwQY
MBaAFFIFNv53ZpGDdyin/kVacyVVuRElMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWdVMl9uZG1rWU4zS0tmLVJWcHpKVlc1RVNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8yMzg1NDgtOGQ3NC00ZmE0LWFkNTkt
NTgzOTk2NTg3ODRlLzEvVWdVMl9uZG1rWU4zS0tmLVJWcHpKVlc1RVNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8yMzg1NDgtOGQ3NC00ZmE0LWFkNTktNTgzOTk2NTg3ODRl
LzEvVWdVMl9uZG1rWU4zS0tmLVJWcHpKVlc1RVNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0us+lnb
2Z7RT4TirRVT4VSkRngScOfXv/rd53DXGsxQ1070NyrZ4KdOJBJHXQymCWkj5atW
/4TZtN/yX54GJQZ+2UibKEmCIFY8+toq0NsnUqtNPkO8E6cMPqy7gn7Wt/eJu1vj
ULiR3sneeoR93s1o+KB2rhVYolX4GcAcQWcb7iOYKSS+Ks3y6b5YyvCTtsWmdqC9
HZE6O1kyQJI2vvpSTR6x6XSydZq2E8/2YANXftl83dSFAtnYYXuODY9OMz5p25q3
Mqm3UMQwrQewONeAWyw2d2YqNXWRAjf5pGH0vO312D+tcjN1DPWivzG7p/8M9tfM
yIlHuF+cbheuZA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:07:12 2026 by rpki-client