Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
File: UAm8siUutkaQLMv9TJhssMK5E5g.mft (raw, json)
Hash identifier: eWqfwNGGZ2tDWT+RKtUjYmQWq1/nuT+FzvIt495ZZkE=
Subject key identifier: F5:6B:F3:50:D0:43:4A:0C:FF:5A:C1:90:6B:EC:CE:14:E6:E9:96:61
Authority key identifier: 50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98
Certificate issuer: /CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398
Certificate serial: 019D29CE6BDD3D93E56C97B1B3E76D403007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
Manifest number: 0395
Signing time: Thu 26 Mar 2026 11:01:26 +0000
Manifest this update: Thu 26 Mar 2026 11:01:26 +0000
Manifest next update: Fri 27 Mar 2026 11:01:26 +0000
Files and hashes: 1: UAm8siUutkaQLMv9TJhssMK5E5g.crl (hash: OL2d9VOcIUQVwnf+D0YxlNuPptVNZ/MwY0dUQuRtQdo=)
2: s2NzqhDpn_MIzIu3sU4Nnz5OdmI.roa (hash: gFIZdnfNAaCxSgU4XX/5DvqZKxy3vUU3BhECHFZPGJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:6b:dd:3d:93:e5:6c:97:b1:b3:e7:6d:40:30:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398
Validity
Not Before: Mar 26 11:01:26 2026 GMT
Not After : Mar 27 11:01:26 2026 GMT
Subject: CN=f56bf350d0434a0cff5ac1906becce14e6e99661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:61:65:48:9d:cd:8d:16:fa:cc:9b:73:d8:57:
69:94:4d:52:35:f1:56:a4:38:80:e9:1c:b6:45:da:
e7:c7:b0:c6:7c:6d:80:67:7d:92:ed:a4:e1:ae:df:
88:5d:26:05:28:98:ee:74:bb:78:26:49:69:f3:0d:
63:44:1f:38:31:b3:4f:bb:3a:ec:9f:cd:20:86:d4:
87:57:2e:49:b3:a9:3d:d9:36:23:1b:66:bc:17:c5:
be:e2:a8:b4:e4:fb:4d:28:9f:f2:b1:41:72:dd:9c:
5c:19:b0:a5:99:5c:3b:0d:39:65:6d:8c:cd:b3:ad:
6f:30:c4:6e:34:44:1e:8e:d5:ac:5f:ce:ae:86:01:
08:c9:40:54:b2:35:85:62:6c:3b:61:bd:0c:3b:71:
f9:41:4e:21:71:f8:4c:cd:d5:15:c9:6d:fd:43:b4:
79:59:a5:a6:27:f4:a0:37:a2:30:e1:f0:fb:59:79:
72:4d:74:d3:8f:bc:e3:aa:85:e2:77:4b:20:38:e2:
d4:6a:4a:cf:a0:75:df:d3:c6:aa:ec:ff:ec:12:4f:
d5:be:1a:54:d2:52:42:a4:6a:bb:2b:85:da:2b:8e:
2d:85:7d:63:1b:da:87:e6:78:ca:45:4b:6e:da:c9:
4b:65:4b:ef:03:de:2c:74:19:a2:cf:76:ec:c3:9d:
55:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6B:F3:50:D0:43:4A:0C:FF:5A:C1:90:6B:EC:CE:14:E6:E9:96:61
X509v3 Authority Key Identifier:
keyid:50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:11:56:0c:b7:3f:0a:a3:f1:fb:db:d1:df:b3:56:ca:03:9b:
6b:e4:6c:da:e9:24:9f:1b:e1:d5:a6:46:a7:9b:04:a2:3c:50:
ed:2f:be:0e:53:99:80:a5:f2:da:a3:0a:9f:8c:cf:14:83:09:
fa:25:48:56:79:96:42:a0:d9:12:a9:8e:d9:66:3e:4b:83:06:
a0:f9:64:5c:db:a1:d7:db:1e:d2:41:8b:d7:c9:88:d3:38:81:
ef:d2:f9:d3:55:04:28:ea:51:86:c5:a3:85:e1:46:67:d1:5c:
4b:e9:4c:a3:eb:f5:0d:90:24:96:94:f8:56:3b:4c:ed:e3:db:
d5:0c:31:4a:c9:ed:48:7b:c1:99:2e:90:a2:e5:55:5f:c2:e7:
7e:35:c8:15:0a:13:ea:f5:22:b1:6a:97:7b:cd:f3:fd:7e:28:
56:ca:31:b7:48:e7:f5:b0:bb:05:bb:6c:92:86:fc:24:da:ac:
8b:08:3f:47:34:15:02:a4:48:54:fd:08:fb:18:1f:7d:86:d1:
17:59:f4:6b:a5:d1:6f:3c:d9:e0:55:9a:a9:57:18:21:47:27:
9b:37:89:9a:ba:cd:a3:71:7e:db:29:ed:b5:c6:ca:f6:13:e2:
49:d0:e3:ae:b7:08:8d:e7:d8:93:82:d1:64:dd:20:c0:13:34:
c8:b2:10:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzmvdPZPlbJexs+dtQDAHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMDliY2IyMjUyZWI2NDY5MDJjY2JmZDRjOTg2Y2IwYzJi
OTEzOTgwHhcNMjYwMzI2MTEwMTI2WhcNMjYwMzI3MTEwMTI2WjAzMTEwLwYDVQQD
EyhmNTZiZjM1MGQwNDM0YTBjZmY1YWMxOTA2YmVjY2UxNGU2ZTk5NjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWFlSJ3NjRb6zJtz2FdplE1SNfFW
pDiA6Ry2Rdrnx7DGfG2AZ32S7aThrt+IXSYFKJjudLt4Jklp8w1jRB84MbNPuzrs
n80ghtSHVy5Js6k92TYjG2a8F8W+4qi05PtNKJ/ysUFy3ZxcGbClmVw7DTllbYzN
s61vMMRuNEQejtWsX86uhgEIyUBUsjWFYmw7Yb0MO3H5QU4hcfhMzdUVyW39Q7R5
WaWmJ/SgN6Iw4fD7WXlyTXTTj7zjqoXid0sgOOLUakrPoHXf08aq7P/sEk/VvhpU
0lJCpGq7K4XaK44thX1jG9qH5njKRUtu2slLZUvvA94sdBmiz3bsw51VoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVr81DQQ0oM/1rBkGvszhTm6ZZhMB8GA1UdIwQY
MBaAFFAJvLIlLrZGkCzL/UyYbLDCuROYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9mMTJkODAtZGViNi00YmY1LTg1M2Mt
ZDVkYTg1OGUxNWZiLzEvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9mMTJkODAtZGViNi00YmY1LTg1M2MtZDVkYTg1OGUxNWZi
LzEvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRFWDLc/
CqPx+9vR37NWygOba+Rs2ukknxvh1aZGp5sEojxQ7S++DlOZgKXy2qMKn4zPFIMJ
+iVIVnmWQqDZEqmO2WY+S4MGoPlkXNuh19se0kGL18mI0ziB79L501UEKOpRhsWj
heFGZ9FcS+lMo+v1DZAklpT4VjtM7ePb1QwxSsntSHvBmS6QouVVX8LnfjXIFQoT
6vUisWqXe83z/X4oVsoxt0jn9bC7Bbtskob8JNqsiwg/RzQVAqRIVP0I+xgffYbR
F1n0a6XRbzzZ4FWaqVcYIUcnmzeJmrrNo3F+2ynttcbK9hPiSdDjrrcIjefYk4LR
ZN0gwBM0yLIQmA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:14:53 2026 by rpki-client