Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
File: UCcYumg5OXxsV-ztbVCVcers7d8.mft (raw, json)
Hash identifier: Cz/7aq00TyJzjpsPQ4n7gAO/Wb/mQ28+3JHZvP7wsLY=
Subject key identifier: C5:ED:A3:91:4C:8D:36:5F:A0:AA:4A:55:56:69:A5:47:71:72:D0:C1
Authority key identifier: 50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF
Certificate issuer: /CN=502718ba6839397c6c57eced6d509571eaeceddf
Certificate serial: 019D26CD395C9A548644EE010DF8728A8C6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:01:16 +0000
Manifest this update: Wed 25 Mar 2026 21:01:16 +0000
Manifest next update: Thu 26 Mar 2026 21:01:16 +0000
Files and hashes: 1: 3z59xcVVHmOYTcMl6K7dwHoQcvw.roa (hash: sZKm/hLxXKVHvVjWgAeq8rY/zQIbmF5W3TZbsODWWdY=)
2: UCcYumg5OXxsV-ztbVCVcers7d8.crl (hash: PDiv3PZ0R2pTZlEM8+4j3NVPGfymOj7I3ATdPNIAyFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:39:5c:9a:54:86:44:ee:01:0d:f8:72:8a:8c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=502718ba6839397c6c57eced6d509571eaeceddf
Validity
Not Before: Mar 25 21:01:16 2026 GMT
Not After : Mar 26 21:01:16 2026 GMT
Subject: CN=c5eda3914c8d365fa0aa4a555669a5477172d0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9b:ee:34:e1:63:b6:86:9c:ef:58:12:30:90:
81:8f:96:d9:66:b5:58:d6:6a:ae:01:02:d1:47:25:
6e:21:1e:21:31:72:a3:88:32:6d:fe:68:07:48:b9:
31:64:d6:59:cd:4c:e6:b0:1a:26:c5:42:37:83:38:
b0:a4:98:b4:3d:9b:b4:da:d4:30:25:bb:a7:d1:73:
4c:df:c1:04:c4:64:84:bf:e2:7b:73:74:17:29:46:
dc:74:ae:c9:ea:7f:56:ab:5e:b9:d1:6b:5e:a1:55:
c5:0a:20:e2:af:42:43:c5:89:ce:8d:58:bb:99:18:
58:23:4a:db:60:65:4e:b8:87:28:50:9c:1f:5e:63:
43:97:e8:6c:2c:ed:52:fb:07:06:64:2a:5c:ae:85:
a5:66:36:81:d9:40:14:2a:b9:0b:f3:dc:d0:85:4a:
73:79:82:31:c0:e9:43:c4:9e:54:b3:29:48:31:4b:
11:57:98:ac:3f:07:4c:ab:fa:87:df:6d:18:8b:b0:
44:a1:0c:25:8c:a7:0b:18:90:26:ce:e8:c2:8f:bb:
00:73:b1:ea:6b:9e:27:be:7f:89:90:17:c2:4e:0f:
67:7e:23:94:88:a2:af:4a:a2:98:26:d2:0c:4b:91:
54:f0:72:2d:ba:e1:17:1d:ee:fe:d7:ad:fd:48:d7:
b8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:ED:A3:91:4C:8D:36:5F:A0:AA:4A:55:56:69:A5:47:71:72:D0:C1
X509v3 Authority Key Identifier:
keyid:50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5c:15:b6:7b:6f:80:cb:57:a8:0f:05:ae:be:28:3d:b5:a0:
78:7a:80:55:0c:c4:fa:1f:59:01:e5:82:d4:db:d9:f3:60:ec:
20:9f:13:3b:12:0f:11:e5:63:0e:89:f1:c6:32:62:3d:84:38:
d5:f8:e9:50:fc:bd:bb:e5:5b:09:9b:33:f4:2d:a8:22:76:84:
1e:06:cb:48:71:d5:81:e7:5d:71:63:82:d4:c3:dd:a7:0b:d0:
54:26:ad:01:09:83:de:d6:2f:33:55:1a:cf:7b:49:17:3c:a3:
42:30:c1:59:e2:b1:5f:06:33:40:6d:11:46:eb:df:83:6b:b7:
d9:5a:2b:5f:a1:6e:4e:07:5b:0d:41:47:5f:74:fc:6c:0a:e2:
36:94:d0:1b:26:61:6c:de:a6:fe:94:de:af:57:78:f9:9f:ca:
e3:0b:ce:21:df:c4:a3:a1:d9:ac:c8:f7:18:1d:95:06:a4:ae:
c5:8e:da:5b:33:4b:fe:36:bc:0e:a8:2e:0c:40:6c:84:4a:9e:
36:aa:fd:78:35:46:98:f1:d0:40:2b:10:fd:8b:d0:8d:11:88:
5b:e4:f5:6f:ae:d5:5f:51:fd:a0:48:2b:97:08:55:4c:d8:da:
9d:8d:07:7a:b0:02:35:d7:4e:c4:e2:8e:aa:3e:d0:a9:9b:cc:
17:a5:64:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzTlcmlSGRO4BDfhyioxtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMjcxOGJhNjgzOTM5N2M2YzU3ZWNlZDZkNTA5NTcxZWFl
Y2VkZGYwHhcNMjYwMzI1MjEwMTE2WhcNMjYwMzI2MjEwMTE2WjAzMTEwLwYDVQQD
EyhjNWVkYTM5MTRjOGQzNjVmYTBhYTRhNTU1NjY5YTU0NzcxNzJkMGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45vuNOFjtoac71gSMJCBj5bZZrVY
1mquAQLRRyVuIR4hMXKjiDJt/mgHSLkxZNZZzUzmsBomxUI3gziwpJi0PZu02tQw
Jbun0XNM38EExGSEv+J7c3QXKUbcdK7J6n9Wq1650WteoVXFCiDir0JDxYnOjVi7
mRhYI0rbYGVOuIcoUJwfXmNDl+hsLO1S+wcGZCpcroWlZjaB2UAUKrkL89zQhUpz
eYIxwOlDxJ5UsylIMUsRV5isPwdMq/qH320Yi7BEoQwljKcLGJAmzujCj7sAc7Hq
a54nvn+JkBfCTg9nfiOUiKKvSqKYJtIMS5FU8HItuuEXHe7+1639SNe4jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXto5FMjTZfoKpKVVZppUdxctDBMB8GA1UdIwQY
MBaAFFAnGLpoOTl8bFfs7W1QlXHq7O3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUNjWXVtZzVPWHhzVi16dGJWQ1ZjZXJzN2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wMDA1YjItZDI4Yi00YmY5LTliY2Ut
Y2Q4MWZjNTgwZjQ3LzEvVUNjWXVtZzVPWHhzVi16dGJWQ1ZjZXJzN2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8wMDA1YjItZDI4Yi00YmY5LTliY2UtY2Q4MWZjNTgwZjQ3
LzEvVUNjWXVtZzVPWHhzVi16dGJWQ1ZjZXJzN2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFwVtntv
gMtXqA8Frr4oPbWgeHqAVQzE+h9ZAeWC1NvZ82DsIJ8TOxIPEeVjDonxxjJiPYQ4
1fjpUPy9u+VbCZsz9C2oInaEHgbLSHHVgeddcWOC1MPdpwvQVCatAQmD3tYvM1Ua
z3tJFzyjQjDBWeKxXwYzQG0RRuvfg2u32VorX6FuTgdbDUFHX3T8bAriNpTQGyZh
bN6m/pTer1d4+Z/K4wvOId/Eo6HZrMj3GB2VBqSuxY7aWzNL/ja8DqguDEBshEqe
Nqr9eDVGmPHQQCsQ/YvQjRGIW+T1b67VX1H9oEgrlwhVTNjanY0HerACNddOxOKO
qj7QqZvMF6Vk1w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:34 2026 by rpki-client