Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
File: UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft (raw, json)
Hash identifier: f3vTW97vxqAfD/bql984fUePrqPyqEOJwTKxUoqw0IE=
Subject key identifier: 89:3B:52:B0:79:88:ED:E2:25:5B:35:E1:D3:B1:17:ED:53:19:16:AD
Authority key identifier: 51:3B:DF:EC:55:B0:48:B0:D2:F0:3B:43:BF:66:E3:E6:7E:86:55:3F
Certificate issuer: /CN=513bdfec55b048b0d2f03b43bf66e3e67e86553f
Certificate serial: 019D25BA3A30FAA7062BA4E4077845127146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
Manifest number: 1628
Signing time: Wed 25 Mar 2026 16:00:54 +0000
Manifest this update: Wed 25 Mar 2026 16:00:54 +0000
Manifest next update: Thu 26 Mar 2026 16:00:54 +0000
Files and hashes: 1: UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl (hash: cceWZs3GwNPd9kdTjdlt2yjxNmbA/JHtnwtNccipNEI=)
2: xhHlMs8V-oVtGZTag2-dr0XM40o.roa (hash: 7w/XbPL00KDOhcqVYw/WDbhjmiBSuWyGqB7xgQc6Wmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:3a:30:fa:a7:06:2b:a4:e4:07:78:45:12:71:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=513bdfec55b048b0d2f03b43bf66e3e67e86553f
Validity
Not Before: Mar 25 16:00:54 2026 GMT
Not After : Mar 26 16:00:54 2026 GMT
Subject: CN=893b52b07988ede2255b35e1d3b117ed531916ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e7:02:f2:ea:6f:ae:63:ca:f3:a4:13:4a:92:
56:43:9d:e0:71:08:a7:81:fd:8b:42:2c:01:3e:f0:
59:2a:70:3c:b6:b6:d1:b0:35:49:fc:bb:69:b0:97:
11:0c:b4:50:1a:61:e6:fc:82:1c:4d:16:0e:a8:d1:
92:9e:a6:2c:7c:05:64:df:cd:98:ee:1e:ce:1a:13:
ca:80:9c:f3:0b:a5:ad:fd:73:fb:4a:c5:fa:0f:d3:
cb:b0:11:40:4a:a6:78:54:e8:a2:31:9b:cc:7d:ea:
8d:9d:97:8c:9f:68:43:36:28:ec:b0:c9:26:2f:5d:
55:9e:68:48:a9:83:bb:41:95:36:6f:61:4b:f6:bd:
bb:b8:4d:fc:09:39:72:96:2a:90:0d:55:06:95:1f:
14:ae:b8:0d:4b:eb:45:7f:9f:b2:2b:a8:b8:66:6d:
79:73:4f:ec:99:87:55:df:df:a8:a3:56:eb:07:74:
e6:67:8a:f4:1e:10:0d:50:53:da:f8:c5:ed:d1:55:
a9:3e:68:e1:9c:d9:e2:b3:2c:b1:21:73:0f:ae:e9:
71:e5:44:33:a9:3a:49:40:d2:98:f7:97:d0:c5:ff:
36:37:4e:59:74:ae:d9:62:5a:2a:8c:a2:c6:e7:00:
93:d5:a1:c6:1b:87:29:23:06:ac:35:a2:e5:0d:b7:
08:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3B:52:B0:79:88:ED:E2:25:5B:35:E1:D3:B1:17:ED:53:19:16:AD
X509v3 Authority Key Identifier:
keyid:51:3B:DF:EC:55:B0:48:B0:D2:F0:3B:43:BF:66:E3:E6:7E:86:55:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b0:ff:fe:1a:4c:21:ed:9d:e6:17:00:86:e1:fb:b8:d3:e4:
d3:aa:92:59:64:c7:f2:be:46:0f:56:c7:e4:fe:9d:49:37:90:
fe:18:15:22:77:33:98:aa:49:46:63:ad:ba:be:d8:b4:48:09:
50:c9:1d:ff:4b:50:2e:d3:d4:90:29:9f:cb:14:87:e2:c6:06:
0d:13:d1:0c:e4:43:50:2d:b5:88:ea:83:d4:00:3e:60:6d:f6:
a9:d6:69:39:3f:b2:fc:62:8e:c1:53:d3:2a:f2:18:eb:2f:1d:
07:5d:b7:c8:72:af:bc:42:f0:be:80:e2:ea:f9:09:8f:44:e5:
95:30:3f:1d:2b:fd:61:21:cb:88:02:e9:49:cf:b8:c3:73:37:
ab:8c:17:c5:f4:04:ca:89:ec:c6:79:45:e8:b7:3b:54:66:1d:
bd:cb:d6:08:ab:59:f1:d5:80:38:f2:b6:a9:58:88:cc:d9:59:
c4:3b:72:99:f6:e3:fd:6d:5e:dd:a5:4e:92:76:97:9e:5e:24:
2b:a2:73:e1:ad:0d:fc:05:93:0c:61:f2:74:94:e2:4b:6d:ca:
72:b3:7e:d6:31:2e:2e:56:16:7e:21:8b:9e:08:a5:fc:14:1b:
55:46:1e:2c:f1:92:57:40:02:5c:e0:79:7f:88:4a:29:cc:44:
26:86:7d:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lujow+qcGK6TkB3hFEnFGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxM2JkZmVjNTViMDQ4YjBkMmYwM2I0M2JmNjZlM2U2N2U4
NjU1M2YwHhcNMjYwMzI1MTYwMDU0WhcNMjYwMzI2MTYwMDU0WjAzMTEwLwYDVQQD
Eyg4OTNiNTJiMDc5ODhlZGUyMjU1YjM1ZTFkM2IxMTdlZDUzMTkxNmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuucC8upvrmPK86QTSpJWQ53gcQin
gf2LQiwBPvBZKnA8trbRsDVJ/LtpsJcRDLRQGmHm/IIcTRYOqNGSnqYsfAVk382Y
7h7OGhPKgJzzC6Wt/XP7SsX6D9PLsBFASqZ4VOiiMZvMfeqNnZeMn2hDNijssMkm
L11VnmhIqYO7QZU2b2FL9r27uE38CTlyliqQDVUGlR8UrrgNS+tFf5+yK6i4Zm15
c0/smYdV39+oo1brB3TmZ4r0HhANUFPa+MXt0VWpPmjhnNnisyyxIXMPrulx5UQz
qTpJQNKY95fQxf82N05ZdK7ZYloqjKLG5wCT1aHGG4cpIwasNaLlDbcIJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIk7UrB5iO3iJVs14dOxF+1TGRatMB8GA1UdIwQY
MBaAFFE73+xVsEiw0vA7Q79m4+Z+hlU/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVR2ZjdGV3dTTERTOER0RHYyYmo1bjZHVlQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jYmU2OTUtZDJkOS00ZDZmLTg3ZTIt
YTFjY2U2ZjgwY2EzLzEvVVR2ZjdGV3dTTERTOER0RHYyYmo1bjZHVlQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9jYmU2OTUtZDJkOS00ZDZmLTg3ZTItYTFjY2U2ZjgwY2Ez
LzEvVVR2ZjdGV3dTTERTOER0RHYyYmo1bjZHVlQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApbD//hpM
Ie2d5hcAhuH7uNPk06qSWWTH8r5GD1bH5P6dSTeQ/hgVInczmKpJRmOtur7YtEgJ
UMkd/0tQLtPUkCmfyxSH4sYGDRPRDORDUC21iOqD1AA+YG32qdZpOT+y/GKOwVPT
KvIY6y8dB123yHKvvELwvoDi6vkJj0TllTA/HSv9YSHLiALpSc+4w3M3q4wXxfQE
yonsxnlF6Lc7VGYdvcvWCKtZ8dWAOPK2qViIzNlZxDtymfbj/W1e3aVOknaXnl4k
K6Jz4a0N/AWTDGHydJTiS23KcrN+1jEuLlYWfiGLngil/BQbVUYeLPGSV0ACXOB5
f4hKKcxEJoZ9bA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:49:41 2026 by rpki-client