Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
File: UZpqm-tS7_KWRGWblDKgpZI3MUw.mft (raw, json)
Hash identifier: YNdkeA2tnYPndmUMgdcihwMndmKapaSnHm9/vy6FZlc=
Subject key identifier: 67:BD:BF:2C:E5:DC:4B:B2:EE:49:D9:F4:2F:C9:FC:15:44:31:DC:6D
Authority key identifier: 51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
Certificate issuer: /CN=519a6a9beb52eff29644659b9432a0a59237314c
Certificate serial: 019D27DF6EC1101150E7D30DD3866120835F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
Manifest number: 15D2
Signing time: Thu 26 Mar 2026 02:00:47 +0000
Manifest this update: Thu 26 Mar 2026 02:00:47 +0000
Manifest next update: Fri 27 Mar 2026 02:00:47 +0000
Files and hashes: 1: UZpqm-tS7_KWRGWblDKgpZI3MUw.crl (hash: lljlsm/0UNOsoxq3YWpMogROoSw0N5v7rF1mdD7oIR8=)
2: gQeDlAB2b-yz40wa6y4f9jvVDIs.roa (hash: gxyp6+EX2f9gbDwhqzkUqdu0QE4bPoPhIRtQBnEAra0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:6e:c1:10:11:50:e7:d3:0d:d3:86:61:20:83:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519a6a9beb52eff29644659b9432a0a59237314c
Validity
Not Before: Mar 26 02:00:47 2026 GMT
Not After : Mar 27 02:00:47 2026 GMT
Subject: CN=67bdbf2ce5dc4bb2ee49d9f42fc9fc154431dc6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:26:d7:34:1e:1a:f8:48:fc:03:ed:64:d5:d6:
d1:a0:e0:b4:6d:4d:82:0c:99:fe:36:0f:43:08:5a:
db:9d:08:1e:1a:f9:87:3a:29:cd:6a:79:95:62:72:
36:1e:59:87:ae:cd:80:9b:19:9f:e9:e5:0d:f8:0f:
9f:ff:f0:ba:65:09:8d:0a:7e:5b:22:ba:92:8b:4e:
b3:eb:1b:27:3f:c9:e1:0b:18:f2:ee:48:15:db:cb:
77:ba:c2:b7:b1:79:3c:c7:0a:b4:60:a4:11:d3:c8:
d1:b1:40:28:9a:6c:4a:5b:04:60:1b:83:d3:7a:05:
b2:2f:f7:1f:44:e6:80:a4:9e:7b:bf:7c:4a:8a:f1:
46:ea:0f:9a:78:b7:7a:e8:5a:18:d3:0d:ee:b3:0c:
d5:03:1e:fb:92:08:9b:13:56:42:93:e4:bc:77:18:
6a:0e:36:ab:5e:43:35:94:a6:6f:e6:a6:f3:1e:13:
af:26:e4:66:2b:16:96:28:63:ea:4b:c7:8d:0f:07:
74:a4:f6:50:19:9a:f8:0f:a2:1d:2d:1a:c1:1e:75:
48:b4:d1:ee:97:00:88:17:ab:88:a9:97:3f:48:83:
e9:d5:94:ae:03:d4:b4:7d:8d:0f:0e:61:45:51:da:
8a:8f:0b:18:98:7c:ac:60:9f:21:07:ca:fa:14:f5:
3d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BD:BF:2C:E5:DC:4B:B2:EE:49:D9:F4:2F:C9:FC:15:44:31:DC:6D
X509v3 Authority Key Identifier:
keyid:51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:fb:ec:f5:29:2b:65:83:0a:2a:90:f1:c0:71:2d:ce:70:d6:
a8:aa:22:a3:06:95:93:52:5a:45:41:91:1f:a7:2b:a7:ad:21:
e9:89:15:42:ff:0e:55:64:d0:02:45:ea:ce:00:57:4a:ee:58:
7c:e1:7e:8b:86:34:4e:82:fa:9d:5e:14:6d:f0:ad:9a:f2:aa:
13:56:d2:ca:e6:11:78:14:f2:1e:a2:52:e9:c5:db:38:6e:d8:
51:e0:f7:91:09:a6:04:b2:3e:60:f5:05:e5:49:d1:59:fd:39:
fe:1f:8b:4a:8c:f1:91:eb:82:1f:de:ce:1d:05:c8:ea:ba:60:
ba:22:45:e1:6f:df:55:10:8d:55:d7:9c:a6:c3:5c:75:e3:26:
1b:df:88:b4:e3:ce:35:60:f6:5c:fc:f6:7a:96:5c:ec:16:16:
59:51:74:b5:19:47:68:bf:a7:f4:fc:32:11:b9:e3:96:db:23:
5f:fe:8a:26:78:4e:e6:8e:17:46:ac:c2:0a:d2:eb:58:29:87:
89:f0:fa:32:de:1a:6a:77:6e:1f:84:76:03:27:90:f2:24:ad:
3c:6a:f0:45:7d:76:a1:a9:35:97:bb:3a:20:a8:51:4e:68:9d:
4b:9b:6e:b9:03:f5:e0:bd:50:f4:4b:d2:b6:1b:9e:d9:ef:e0:
57:67:29:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n327BEBFQ59MN04ZhIINfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxOWE2YTliZWI1MmVmZjI5NjQ0NjU5Yjk0MzJhMGE1OTIz
NzMxNGMwHhcNMjYwMzI2MDIwMDQ3WhcNMjYwMzI3MDIwMDQ3WjAzMTEwLwYDVQQD
Eyg2N2JkYmYyY2U1ZGM0YmIyZWU0OWQ5ZjQyZmM5ZmMxNTQ0MzFkYzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ibXNB4a+Ej8A+1k1dbRoOC0bU2C
DJn+Ng9DCFrbnQgeGvmHOinNanmVYnI2HlmHrs2Amxmf6eUN+A+f//C6ZQmNCn5b
IrqSi06z6xsnP8nhCxjy7kgV28t3usK3sXk8xwq0YKQR08jRsUAommxKWwRgG4PT
egWyL/cfROaApJ57v3xKivFG6g+aeLd66FoY0w3uswzVAx77kgibE1ZCk+S8dxhq
DjarXkM1lKZv5qbzHhOvJuRmKxaWKGPqS8eNDwd0pPZQGZr4D6IdLRrBHnVItNHu
lwCIF6uIqZc/SIPp1ZSuA9S0fY0PDmFFUdqKjwsYmHysYJ8hB8r6FPU9+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGe9vyzl3Euy7knZ9C/J/BVEMdxtMB8GA1UdIwQY
MBaAFFGaapvrUu/ylkRlm5QyoKWSNzFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVpwcW0tdFM3X0tXUkdXYmxES2dwWkkzTVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84NmQyM2UtNDAwYS00YWRjLTgwZTQt
OTA1ZDlkY2Y1MGFlLzEvVVpwcW0tdFM3X0tXUkdXYmxES2dwWkkzTVV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS84NmQyM2UtNDAwYS00YWRjLTgwZTQtOTA1ZDlkY2Y1MGFl
LzEvVVpwcW0tdFM3X0tXUkdXYmxES2dwWkkzTVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfvs9Skr
ZYMKKpDxwHEtznDWqKoiowaVk1JaRUGRH6crp60h6YkVQv8OVWTQAkXqzgBXSu5Y
fOF+i4Y0ToL6nV4UbfCtmvKqE1bSyuYReBTyHqJS6cXbOG7YUeD3kQmmBLI+YPUF
5UnRWf05/h+LSozxkeuCH97OHQXI6rpguiJF4W/fVRCNVdecpsNcdeMmG9+ItOPO
NWD2XPz2epZc7BYWWVF0tRlHaL+n9PwyEbnjltsjX/6KJnhO5o4XRqzCCtLrWCmH
ifD6Mt4aanduH4R2AyeQ8iStPGrwRX12oak1l7s6IKhRTmidS5tuuQP14L1Q9EvS
thue2e/gV2cp6g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:29 2026 by rpki-client