Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
File: uFIT35cylVbWCLFQ8DxO51-9mME.mft (raw, json)
Hash identifier: MUwqMhxoaMFdnCxobRunSPaIMOxQIy0ZlBgsPd/G1pM=
Subject key identifier: E6:71:B2:A6:C8:3A:B9:EA:0B:65:8E:CA:AE:30:C4:FA:0E:D0:09:CF
Authority key identifier: B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
Certificate issuer: /CN=b85213df97329556d608b150f03c4ee75fbd98c1
Certificate serial: 019D281670F67DF78DABE6DA730FAF71B5D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
Manifest number: 1092
Signing time: Thu 26 Mar 2026 03:00:52 +0000
Manifest this update: Thu 26 Mar 2026 03:00:52 +0000
Manifest next update: Fri 27 Mar 2026 03:00:52 +0000
Files and hashes: 1: KLsDN9QMzfxMvUSuh7NfomxLa3w.roa (hash: 4IvAbXAU0XecGx56bdqz6414molY8HrQxbFV1Syz69M=)
2: rKe-qU86sx7z_-wI2lykyZb70MI.roa (hash: VQ9NSMubDnrlXOxOJ6bt8ANdIsUd6R8dQJQbwjAypQo=)
3: uFIT35cylVbWCLFQ8DxO51-9mME.crl (hash: j/S5xhiJlv0nFqu9eLzYIqML77dgmxKfEJw0VrVkThM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:70:f6:7d:f7:8d:ab:e6:da:73:0f:af:71:b5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85213df97329556d608b150f03c4ee75fbd98c1
Validity
Not Before: Mar 26 03:00:52 2026 GMT
Not After : Mar 27 03:00:52 2026 GMT
Subject: CN=e671b2a6c83ab9ea0b658ecaae30c4fa0ed009cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a7:c1:22:92:e1:68:6f:79:c2:74:4a:78:61:
42:88:d4:45:ac:e3:9f:bd:ec:88:06:39:8a:3e:60:
2e:0a:ec:63:65:26:5a:f2:8c:96:af:81:d7:f6:ac:
df:13:ae:ef:14:5e:09:52:b7:73:3f:8c:5b:3a:7a:
7e:1f:ff:5b:10:d6:5f:cf:7e:f3:5d:6a:c1:b8:ef:
b6:c8:8b:c7:69:72:f3:62:ae:cc:52:2a:66:8b:60:
25:e4:28:c1:3d:fe:c5:3d:f3:82:98:86:b0:3b:b1:
aa:40:c0:73:52:82:5a:14:35:33:10:b8:c3:2d:8c:
16:a6:85:5a:53:7c:7e:05:66:b7:cb:20:de:ad:e3:
0b:44:a8:9c:24:78:77:98:63:ae:04:26:6a:94:f4:
41:9a:85:0a:7a:1a:b6:45:78:ab:d2:9a:df:dd:e4:
ad:2a:38:e5:c7:a4:b2:27:b7:be:03:a1:f0:28:bf:
cc:02:54:0f:68:55:18:73:62:fb:32:5d:f4:75:8e:
9f:ac:78:4e:50:c8:57:d7:92:34:8c:c7:8a:fc:a5:
a3:cb:15:6e:b5:13:ec:62:4d:9d:38:8d:42:35:bd:
d1:65:7c:0a:ee:29:b8:05:be:0b:85:d3:0a:ee:79:
5e:19:0e:9b:dc:0e:12:2d:c3:cc:4d:c6:9c:1a:a9:
0f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:71:B2:A6:C8:3A:B9:EA:0B:65:8E:CA:AE:30:C4:FA:0E:D0:09:CF
X509v3 Authority Key Identifier:
keyid:B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:6a:21:0b:25:e5:b3:aa:03:e5:ee:3f:55:fb:65:0d:8d:31:
cc:93:a0:0e:ef:da:3b:f1:f2:c5:a8:fa:63:a6:7d:81:78:af:
e4:04:d1:cc:1b:07:d7:a1:51:54:8e:aa:ef:bf:11:66:c0:72:
9b:bf:8c:41:c2:d0:bd:5a:cb:97:6b:8f:f6:ce:8d:ec:5d:f3:
3c:c1:23:aa:d7:7f:05:58:8d:73:d3:53:08:05:ed:dc:15:bb:
8a:85:e0:d8:b9:10:c7:2a:e3:3b:1b:14:43:5f:f0:7d:07:74:
75:83:3e:79:da:75:8e:a8:68:e0:d1:c6:d2:46:b0:b7:9d:27:
c9:bf:4d:58:17:78:c4:ae:cd:5c:84:7a:67:16:07:9d:9c:af:
1d:e1:3a:60:ca:78:a3:d5:1d:9b:8f:fa:a9:54:2e:f5:73:31:
c7:31:09:c3:fe:6c:a0:bc:a9:a6:6b:c2:64:25:fe:76:f6:5c:
5f:19:0c:bd:1d:41:d5:ea:74:d9:b7:31:ed:fd:7e:fe:eb:e5:
06:c7:14:99:6c:8f:58:ff:f9:3d:cc:6f:b5:e9:92:e2:ff:37:
c5:89:92:94:26:8a:92:23:ee:b8:64:d8:cc:0c:3c:4d:31:80:
9d:b3:12:eb:e5:0d:44:71:d2:1d:1f:30:d3:2a:87:3a:3c:6c:
06:d2:b9:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFnD2ffeNq+bacw+vcbXWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NTIxM2RmOTczMjk1NTZkNjA4YjE1MGYwM2M0ZWU3NWZi
ZDk4YzEwHhcNMjYwMzI2MDMwMDUyWhcNMjYwMzI3MDMwMDUyWjAzMTEwLwYDVQQD
EyhlNjcxYjJhNmM4M2FiOWVhMGI2NThlY2FhZTMwYzRmYTBlZDAwOWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqfBIpLhaG95wnRKeGFCiNRFrOOf
veyIBjmKPmAuCuxjZSZa8oyWr4HX9qzfE67vFF4JUrdzP4xbOnp+H/9bENZfz37z
XWrBuO+2yIvHaXLzYq7MUipmi2Al5CjBPf7FPfOCmIawO7GqQMBzUoJaFDUzELjD
LYwWpoVaU3x+BWa3yyDereMLRKicJHh3mGOuBCZqlPRBmoUKehq2RXir0prf3eSt
Kjjlx6SyJ7e+A6HwKL/MAlQPaFUYc2L7Ml30dY6frHhOUMhX15I0jMeK/KWjyxVu
tRPsYk2dOI1CNb3RZXwK7im4Bb4LhdMK7nleGQ6b3A4SLcPMTcacGqkPcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZxsqbIOrnqC2WOyq4wxPoO0AnPMB8GA1UdIwQY
MBaAFLhSE9+XMpVW1gixUPA8TudfvZjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUZJVDM1Y3lsVmJXQ0xGUThEeE81MS05bU1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9kZDgwOTgtN2ZlMC00MjJmLTkyZTkt
MWZiMWU5Yzg2YjUzLzEvdUZJVDM1Y3lsVmJXQ0xGUThEeE81MS05bU1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9kZDgwOTgtN2ZlMC00MjJmLTkyZTktMWZiMWU5Yzg2YjUz
LzEvdUZJVDM1Y3lsVmJXQ0xGUThEeE81MS05bU1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq2ohCyXl
s6oD5e4/VftlDY0xzJOgDu/aO/Hyxaj6Y6Z9gXiv5ATRzBsH16FRVI6q778RZsBy
m7+MQcLQvVrLl2uP9s6N7F3zPMEjqtd/BViNc9NTCAXt3BW7ioXg2LkQxyrjOxsU
Q1/wfQd0dYM+edp1jqho4NHG0kawt50nyb9NWBd4xK7NXIR6ZxYHnZyvHeE6YMp4
o9Udm4/6qVQu9XMxxzEJw/5soLyppmvCZCX+dvZcXxkMvR1B1ep02bcx7f1+/uvl
BscUmWyPWP/5PcxvtemS4v83xYmSlCaKkiPuuGTYzAw8TTGAnbMS6+UNRHHSHR8w
0yqHOjxsBtK5Hw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:48 2026 by rpki-client