Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft
File: UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft (raw, json)
Hash identifier: 3NHKAfiiY+x87XKQyvTb0GqpSFdTXcilGI0AzAGGcWA=
Subject key identifier: 06:2C:1B:11:59:57:9F:28:C8:70:C2:94:7A:74:E1:A2:FC:37:32:30
Authority key identifier: 51:40:B5:CB:59:86:08:41:26:F6:8D:60:32:31:6D:3B:1B:57:69:6E
Certificate issuer: /CN=5140b5cb5986084126f68d6032316d3b1b57696e
Certificate serial: 019D284D8EA8CF5C9CEE08A810C22F125789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 04:01:04 +0000
Manifest this update: Thu 26 Mar 2026 04:01:04 +0000
Manifest next update: Fri 27 Mar 2026 04:01:04 +0000
Files and hashes: 1: BU-lqOTzhTE1FvYIzC5QIIuVdd4.roa (hash: URaXV7GxrC/TlLgNF/7cDgKoz0MGZy0H3auR+9Eshag=)
2: UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl (hash: hAGs3wl/8CWbpFlMSBxLhQ/xh0PfN7OHO/exdjZCQys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:8e:a8:cf:5c:9c:ee:08:a8:10:c2:2f:12:57:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5140b5cb5986084126f68d6032316d3b1b57696e
Validity
Not Before: Mar 26 04:01:04 2026 GMT
Not After : Mar 27 04:01:04 2026 GMT
Subject: CN=062c1b1159579f28c870c2947a74e1a2fc373230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ae:ab:92:41:26:b4:0f:d3:c0:7c:24:02:03:
c4:20:e4:78:e3:d2:89:03:4e:f0:82:06:91:b6:bd:
c7:91:f4:d2:34:7e:8c:30:8b:72:8f:84:ee:81:09:
45:da:47:30:fe:41:7b:90:75:a8:f6:2a:6c:51:73:
b3:47:c0:b0:df:75:31:d4:6d:d3:6a:e8:79:96:8c:
47:5f:ed:f9:d0:fa:aa:9b:18:f1:cf:8e:4f:f9:56:
05:44:f5:d8:66:c0:51:b5:a4:92:33:68:37:84:b0:
60:5e:18:4b:22:70:e2:51:b3:c9:eb:97:b7:2f:60:
8b:6e:c0:89:03:10:75:3d:9a:cc:55:10:4d:bc:20:
26:ff:8c:89:91:78:57:43:be:25:be:34:4b:29:73:
48:ab:0b:97:44:6b:4b:93:0e:cb:5b:b7:49:0d:34:
5b:e9:f2:a1:7f:95:a5:0b:55:65:48:14:c0:75:a2:
fc:8a:19:29:91:09:15:2a:9e:a3:84:be:5f:10:9f:
9b:46:22:85:85:02:3b:42:0a:ee:81:b4:ed:da:9f:
53:a4:ec:c2:19:2d:16:7b:1f:ec:35:cb:0a:28:af:
2a:1f:df:46:ca:78:fa:e5:b3:64:05:c2:f9:b2:f2:
15:e0:bc:dd:f6:4e:1a:97:4a:1e:3f:08:53:7d:db:
52:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2C:1B:11:59:57:9F:28:C8:70:C2:94:7A:74:E1:A2:FC:37:32:30
X509v3 Authority Key Identifier:
keyid:51:40:B5:CB:59:86:08:41:26:F6:8D:60:32:31:6D:3B:1B:57:69:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:86:8b:d3:a2:a7:f3:2a:e7:86:cf:88:46:75:ee:48:25:a6:
50:9d:11:93:06:e8:de:f7:96:df:9b:08:a8:fd:df:29:fe:a9:
a5:2e:8d:81:6b:17:02:13:9e:27:98:73:71:1f:2c:b4:31:3d:
2e:d8:7a:55:45:ca:09:4e:1b:2c:f2:d3:3b:b6:73:be:d2:5d:
37:1e:4e:1c:7b:76:ea:5e:66:27:fd:91:d5:0f:99:38:25:95:
56:e8:e6:f4:98:3e:f9:df:91:7d:bd:df:c0:ba:4a:5f:af:80:
68:39:92:24:5b:3d:a7:0c:23:90:63:10:90:85:c8:8a:a9:03:
e5:a6:7b:1c:e0:a3:31:75:65:97:ee:ca:bf:93:e3:75:00:9b:
45:32:f6:2c:1d:38:33:a4:1e:3a:e6:3b:f8:c6:52:04:34:76:
2a:b4:e2:c3:79:d7:12:e7:96:9b:f7:5c:0f:d7:cc:ca:91:be:
cc:83:bd:d9:cb:02:97:49:26:b5:86:9f:8e:2b:93:a7:9e:cc:
41:1c:4c:5b:ee:95:3e:84:1e:27:e4:03:ed:cf:72:c6:fa:56:
e7:ef:b5:9b:08:e2:dc:44:d4:8b:f7:72:4a:62:89:46:f8:d2:
53:7e:28:2a:1b:71:81:1e:c9:24:6f:ef:db:6f:2f:e1:ae:4c:
42:d8:24:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTY6oz1yc7gioEMIvEleJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNDBiNWNiNTk4NjA4NDEyNmY2OGQ2MDMyMzE2ZDNiMWI1
NzY5NmUwHhcNMjYwMzI2MDQwMTA0WhcNMjYwMzI3MDQwMTA0WjAzMTEwLwYDVQQD
EygwNjJjMWIxMTU5NTc5ZjI4Yzg3MGMyOTQ3YTc0ZTFhMmZjMzczMjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv66rkkEmtA/TwHwkAgPEIOR449KJ
A07wggaRtr3HkfTSNH6MMItyj4TugQlF2kcw/kF7kHWo9ipsUXOzR8Cw33Ux1G3T
auh5loxHX+350Pqqmxjxz45P+VYFRPXYZsBRtaSSM2g3hLBgXhhLInDiUbPJ65e3
L2CLbsCJAxB1PZrMVRBNvCAm/4yJkXhXQ74lvjRLKXNIqwuXRGtLkw7LW7dJDTRb
6fKhf5WlC1VlSBTAdaL8ihkpkQkVKp6jhL5fEJ+bRiKFhQI7QgrugbTt2p9TpOzC
GS0Wex/sNcsKKK8qH99Gynj65bNkBcL5svIV4Lzd9k4al0oePwhTfdtSOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYsGxFZV58oyHDClHp04aL8NzIwMB8GA1UdIwQY
MBaAFFFAtctZhghBJvaNYDIxbTsbV2luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVVDMXkxbUdDRUVtOW8xZ01qRnRPeHRYYVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9kMTlmMmQtOTY1OS00OGIxLWIxZTgt
ZGUxM2E1NTJkZjYzLzEvVVVDMXkxbUdDRUVtOW8xZ01qRnRPeHRYYVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9kMTlmMmQtOTY1OS00OGIxLWIxZTgtZGUxM2E1NTJkZjYz
LzEvVVVDMXkxbUdDRUVtOW8xZ01qRnRPeHRYYVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4aL06Kn
8yrnhs+IRnXuSCWmUJ0Rkwbo3veW35sIqP3fKf6ppS6NgWsXAhOeJ5hzcR8stDE9
Lth6VUXKCU4bLPLTO7ZzvtJdNx5OHHt26l5mJ/2R1Q+ZOCWVVujm9Jg++d+Rfb3f
wLpKX6+AaDmSJFs9pwwjkGMQkIXIiqkD5aZ7HOCjMXVll+7Kv5PjdQCbRTL2LB04
M6QeOuY7+MZSBDR2KrTiw3nXEueWm/dcD9fMypG+zIO92csCl0kmtYafjiuTp57M
QRxMW+6VPoQeJ+QD7c9yxvpW5++1mwji3ETUi/dySmKJRvjSU34oKhtxgR7JJG/v
228v4a5MQtgksg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:30 2026 by rpki-client