Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
File: pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft (raw, json)
Hash identifier: h0J+G/S3rJ1BdZkyKKGVISRvVzr6OIpZ2SjYrLneYKQ=
Subject key identifier: D2:AC:05:85:86:B1:4C:D9:EF:08:0C:2D:92:E9:F3:7F:B0:C7:31:E4
Authority key identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
Certificate issuer: /CN=a5472b1473bc781b70440315c83d119c8abc86fc
Certificate serial: 019E1D914074AAE314C93F34D8F0168016B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
Manifest number: 1661
Signing time: Tue 12 May 2026 19:01:58 +0000
Manifest this update: Tue 12 May 2026 19:01:58 +0000
Manifest next update: Wed 13 May 2026 19:01:58 +0000
Files and hashes: 1: icGxSXDSLuf3bxPbnWFtv-JBVbs.roa (hash: J8P/ZDEioxw2f81tNOKgfIU5hZS6uHNCJdz89yqe1hg=)
2: pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl (hash: Z0v4ilwELD3xXTWKZ0c4m5/T0BGJGaUDFEmATcaAhOE=)
3: vjXtRIEiyB7erWPIwLI15XGZ10k.roa (hash: gnrNiqSgWNnIJJPCLHVFh0qVACCw6Qa1Bcb38Wxj/po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:40:74:aa:e3:14:c9:3f:34:d8:f0:16:80:16:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5472b1473bc781b70440315c83d119c8abc86fc
Validity
Not Before: May 12 19:01:58 2026 GMT
Not After : May 13 19:01:58 2026 GMT
Subject: CN=d2ac058586b14cd9ef080c2d92e9f37fb0c731e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b2:4f:b9:d3:c4:03:3b:87:14:03:d6:29:a0:
50:45:53:fd:68:e6:f3:de:89:b9:f4:e7:04:ec:56:
24:07:69:18:db:21:9a:0d:e6:69:9b:0a:33:a6:39:
43:52:c6:d0:ba:27:09:52:83:79:4a:d6:12:e4:32:
4d:fc:d4:b0:fb:78:66:55:cd:01:9d:a7:4a:dc:c1:
6c:70:04:2a:df:0a:53:7d:7a:35:9f:76:25:e8:43:
b1:6c:90:af:46:ff:50:98:6e:34:c5:19:38:c6:3c:
85:4d:10:64:bb:5d:89:10:29:33:c7:6f:23:d4:ba:
82:fb:db:8f:3d:62:d1:93:ef:ac:f4:02:2f:2a:2b:
e3:f5:a6:fa:75:6e:02:3d:d6:a7:1c:32:84:c7:ec:
a3:01:68:fe:fe:2d:68:19:92:4a:46:ac:fb:31:e8:
84:7d:bd:04:ae:06:e4:7f:22:e8:ff:a9:c5:6b:59:
29:bc:5e:31:e6:e8:d0:20:90:4a:68:5c:9a:93:34:
11:5c:83:eb:87:ab:90:a4:38:ef:89:a0:f7:ab:ee:
e9:8a:55:05:48:70:00:af:11:7a:6d:03:25:0c:a8:
ab:28:3b:00:62:47:68:c9:a5:97:fe:39:54:aa:9f:
3a:22:2a:a8:df:67:2a:cd:48:18:75:cc:52:eb:0a:
af:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AC:05:85:86:B1:4C:D9:EF:08:0C:2D:92:E9:F3:7F:B0:C7:31:E4
X509v3 Authority Key Identifier:
keyid:A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:4a:be:c8:72:1c:84:2e:6b:e6:ee:41:c4:99:1d:33:d7:54:
30:74:7c:11:21:1b:37:4d:61:bb:cf:2c:ac:a0:51:e2:c9:df:
11:ac:40:a2:be:65:64:89:a5:b4:be:8b:87:15:f8:ba:c3:95:
5e:11:70:a4:4e:e8:f4:db:d1:4a:e9:2f:fd:18:1e:21:61:b0:
e6:dd:fb:0b:2f:5d:7d:b9:0b:b1:fb:0a:30:52:2d:a3:ca:53:
ce:7d:4c:01:be:27:b7:a3:9c:9f:d9:d2:31:91:6e:4f:10:2c:
98:25:3d:fe:c1:95:5e:de:68:ab:95:4f:b3:4c:ef:99:bc:a6:
95:6c:77:1b:05:e6:0d:6b:bf:d8:02:de:ae:98:59:03:14:76:
b5:e5:b7:32:53:18:17:26:3c:57:e8:9b:d2:0f:33:51:1c:d1:
8c:46:ce:c6:29:82:d9:27:e5:bc:0a:d9:eb:91:35:ec:e6:3a:
c2:d2:2a:a0:ce:79:aa:1d:33:66:33:00:28:54:de:b3:f3:18:
f3:76:45:74:47:e2:ba:a8:03:14:77:b6:6a:63:d9:3d:ed:e6:
c4:82:48:8d:c7:b0:78:fb:09:36:0b:85:d7:01:57:d7:e6:ca:
3d:84:8b:52:00:70:78:9d:4d:aa:1a:d5:96:a9:cf:58:b2:6a:
46:b7:15:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkUB0quMUyT802PAWgBa2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NDcyYjE0NzNiYzc4MWI3MDQ0MDMxNWM4M2QxMTljOGFi
Yzg2ZmMwHhcNMjYwNTEyMTkwMTU4WhcNMjYwNTEzMTkwMTU4WjAzMTEwLwYDVQQD
EyhkMmFjMDU4NTg2YjE0Y2Q5ZWYwODBjMmQ5MmU5ZjM3ZmIwYzczMWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrJPudPEAzuHFAPWKaBQRVP9aObz
3om59OcE7FYkB2kY2yGaDeZpmwozpjlDUsbQuicJUoN5StYS5DJN/NSw+3hmVc0B
nadK3MFscAQq3wpTfXo1n3Yl6EOxbJCvRv9QmG40xRk4xjyFTRBku12JECkzx28j
1LqC+9uPPWLRk++s9AIvKivj9ab6dW4CPdanHDKEx+yjAWj+/i1oGZJKRqz7MeiE
fb0ErgbkfyLo/6nFa1kpvF4x5ujQIJBKaFyakzQRXIPrh6uQpDjviaD3q+7pilUF
SHAArxF6bQMlDKirKDsAYkdoyaWX/jlUqp86Iiqo32cqzUgYdcxS6wqvoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKsBYWGsUzZ7wgMLZLp83+wxzHkMB8GA1UdIwQY
MBaAFKVHKxRzvHgbcEQDFcg9EZyKvIb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFVjckZITzhlQnR3UkFNVnlEMFJuSXE4aHZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zMDExMmYtMGU5ZC00ZmM4LWI4NTQt
YjE1NjViMjU1ODU0LzEvcFVjckZITzhlQnR3UkFNVnlEMFJuSXE4aHZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8zMDExMmYtMGU5ZC00ZmM4LWI4NTQtYjE1NjViMjU1ODU0
LzEvcFVjckZITzhlQnR3UkFNVnlEMFJuSXE4aHZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUq+yHIc
hC5r5u5BxJkdM9dUMHR8ESEbN01hu88srKBR4snfEaxAor5lZImltL6LhxX4usOV
XhFwpE7o9NvRSukv/RgeIWGw5t37Cy9dfbkLsfsKMFIto8pTzn1MAb4nt6Ocn9nS
MZFuTxAsmCU9/sGVXt5oq5VPs0zvmbymlWx3GwXmDWu/2ALerphZAxR2teW3MlMY
FyY8V+ib0g8zURzRjEbOximC2SflvArZ65E17OY6wtIqoM55qh0zZjMAKFTes/MY
83ZFdEfiuqgDFHe2amPZPe3mxIJIjcewePsJNguF1wFX1+bKPYSLUgBweJ1NqhrV
lqnPWLJqRrcVdw==
-----END CERTIFICATE-----
Generated at Wed May 13 07:27:54 2026 by rpki-client