Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
File: UZ5x0bhgWjO53WVLo43fq8HO9es.mft (raw, json)
Hash identifier: UW5ZHdlqt7HCidIAbo9T3oJ0xDgq+PWDFUzsCHeF5jk=
Subject key identifier: 94:1B:4B:72:EC:62:5E:2E:16:0C:14:15:EB:71:57:DB:00:B8:5E:6B
Authority key identifier: 51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
Certificate issuer: /CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Certificate serial: 019D2A04C746E2FDD9AA8E28A448567BEFE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
Manifest number: 0841
Signing time: Thu 26 Mar 2026 12:00:49 +0000
Manifest this update: Thu 26 Mar 2026 12:00:49 +0000
Manifest next update: Fri 27 Mar 2026 12:00:49 +0000
Files and hashes: 1: UZ5x0bhgWjO53WVLo43fq8HO9es.crl (hash: x1z5f0g+a0xkqRuUJVLwsw0zzeaKGAc3gxzfVkpNKxQ=)
2: _G4ib8y2Mhp9fmW-zDcRMp9FTNQ.roa (hash: QsL4Z9FiJsXvXIFlxM7RbhEJzgQ69Cb/qKd+bhG5xng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:c7:46:e2:fd:d9:aa:8e:28:a4:48:56:7b:ef:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Validity
Not Before: Mar 26 12:00:49 2026 GMT
Not After : Mar 27 12:00:49 2026 GMT
Subject: CN=941b4b72ec625e2e160c1415eb7157db00b85e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dc:ca:1f:ad:f3:3c:12:db:6a:62:cf:51:28:
4b:16:b9:c3:1d:91:28:cd:b8:45:a8:5f:28:ce:47:
4a:79:32:19:84:d0:af:aa:0e:72:db:ff:73:ad:a4:
8c:5f:30:39:ca:46:22:6b:58:3f:f9:fe:0d:32:bb:
a9:4f:5a:ac:c5:b3:55:e0:9c:c4:ab:77:fe:f6:16:
32:35:70:01:a3:1e:cc:0f:7e:9a:b4:e1:7f:3c:1b:
ac:ab:a9:cf:ae:3b:57:88:54:17:15:fb:0e:c5:b6:
57:15:da:d9:ff:57:70:10:96:5c:fe:45:bd:43:a4:
f7:3e:20:62:16:8b:f8:89:fe:b2:72:03:7b:cd:3a:
31:6e:1a:83:15:a8:64:f4:85:63:73:15:38:02:53:
df:2d:c5:92:6d:11:2b:14:b7:9b:ad:94:bd:7e:4b:
d0:09:d0:16:bf:ec:de:00:bc:72:27:cb:3b:00:9d:
36:9d:35:8b:6f:4c:82:d2:26:f3:1f:ae:ee:07:63:
e3:16:95:5e:95:97:85:b5:8f:35:17:aa:47:e2:57:
dc:3a:f3:da:7e:58:f5:93:4f:b5:ac:11:53:65:c1:
d8:89:40:a3:ec:d1:08:a7:07:a1:c9:98:70:1e:0b:
13:49:41:19:5a:0a:ab:04:99:76:32:16:86:40:e8:
66:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1B:4B:72:EC:62:5E:2E:16:0C:14:15:EB:71:57:DB:00:B8:5E:6B
X509v3 Authority Key Identifier:
keyid:51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6f:36:19:6b:7d:1d:8f:b4:28:b9:88:06:86:56:3a:c9:86:
df:c6:aa:f0:89:21:69:bf:d8:d7:66:33:ca:2c:61:ed:e8:27:
01:01:73:26:ea:cc:9a:ea:e2:39:50:d1:d6:d5:bb:93:12:25:
17:95:7c:a8:66:58:98:fb:ff:52:3e:fd:76:e1:c8:80:b1:86:
ef:90:58:d2:22:b2:62:99:3b:f0:e3:fa:1a:1c:e8:b1:d6:14:
13:ab:a7:0e:d6:da:26:8c:0c:d9:ad:4b:5f:e6:9b:76:78:b9:
84:7d:57:af:bd:12:cc:16:e9:e7:1e:63:23:42:88:5c:f4:8f:
eb:29:04:2e:8b:77:3e:33:05:88:97:08:6d:7f:ea:eb:26:d4:
83:10:46:8a:4f:e1:9e:43:84:41:86:39:a7:fb:89:de:83:d0:
b9:9d:3c:9f:b6:97:10:34:dd:34:87:43:c0:71:68:3e:68:f7:
aa:b4:ae:a8:2c:d7:06:96:27:4f:0d:ed:98:a2:91:f4:f7:c1:
94:ec:3d:84:ec:fc:31:6b:6d:39:ed:90:6a:e6:0c:09:31:db:
18:18:3b:72:3d:3c:a9:0e:dc:5a:38:e4:ce:d2:91:ab:1e:40:
1e:f5:d0:9e:74:4b:09:45:f2:d5:4c:ce:58:cd:e7:e1:02:47:
ca:a3:cd:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBMdG4v3Zqo4opEhWe+/hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxOWU3MWQxYjg2MDVhMzNiOWRkNjU0YmEzOGRkZmFiYzFj
ZWY1ZWIwHhcNMjYwMzI2MTIwMDQ5WhcNMjYwMzI3MTIwMDQ5WjAzMTEwLwYDVQQD
Eyg5NDFiNGI3MmVjNjI1ZTJlMTYwYzE0MTVlYjcxNTdkYjAwYjg1ZTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtzKH63zPBLbamLPUShLFrnDHZEo
zbhFqF8ozkdKeTIZhNCvqg5y2/9zraSMXzA5ykYia1g/+f4NMrupT1qsxbNV4JzE
q3f+9hYyNXABox7MD36atOF/PBusq6nPrjtXiFQXFfsOxbZXFdrZ/1dwEJZc/kW9
Q6T3PiBiFov4if6ycgN7zToxbhqDFahk9IVjcxU4AlPfLcWSbRErFLebrZS9fkvQ
CdAWv+zeALxyJ8s7AJ02nTWLb0yC0ibzH67uB2PjFpVelZeFtY81F6pH4lfcOvPa
flj1k0+1rBFTZcHYiUCj7NEIpwehyZhwHgsTSUEZWgqrBJl2MhaGQOhmlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQbS3LsYl4uFgwUFetxV9sAuF5rMB8GA1UdIwQY
MBaAFFGecdG4YFozud1lS6ON36vBzvXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVo1eDBiaGdXak81M1dWTG80M2ZxOEhPOWVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9mMzVmYjUtMGY2Ny00NGU0LTlhNTQt
ZmQ2ZjIzNWRhZjBiLzEvVVo1eDBiaGdXak81M1dWTG80M2ZxOEhPOWVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9mMzVmYjUtMGY2Ny00NGU0LTlhNTQtZmQ2ZjIzNWRhZjBi
LzEvVVo1eDBiaGdXak81M1dWTG80M2ZxOEhPOWVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA282GWt9
HY+0KLmIBoZWOsmG38aq8Ikhab/Y12Yzyixh7egnAQFzJurMmuriOVDR1tW7kxIl
F5V8qGZYmPv/Uj79duHIgLGG75BY0iKyYpk78OP6GhzosdYUE6unDtbaJowM2a1L
X+abdni5hH1Xr70SzBbp5x5jI0KIXPSP6ykELot3PjMFiJcIbX/q6ybUgxBGik/h
nkOEQYY5p/uJ3oPQuZ08n7aXEDTdNIdDwHFoPmj3qrSuqCzXBpYnTw3tmKKR9PfB
lOw9hOz8MWttOe2QauYMCTHbGBg7cj08qQ7cWjjkztKRqx5AHvXQnnRLCUXy1UzO
WM3n4QJHyqPNdA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:41:28 2026 by rpki-client