Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
File: UltwWpHbww7RDrciK3eXuDTgGGM.mft (raw, json)
Hash identifier: xkHUeaZdlIrkhbyezqxBuywWhAVhw7hR8bZOanRRLJM=
Subject key identifier: 15:5F:BF:D1:79:E8:54:8A:16:A4:27:89:81:C9:32:9C:CC:5C:FE:29
Authority key identifier: 52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
Certificate issuer: /CN=525b705a91dbc30ed10eb7222b7797b834e01863
Certificate serial: 019D277275D8991C731B859A6A1EB70FC103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 00:01:45 +0000
Manifest this update: Thu 26 Mar 2026 00:01:45 +0000
Manifest next update: Fri 27 Mar 2026 00:01:45 +0000
Files and hashes: 1: KlL1K6iOrdNgSybgFClw1upWqbU.roa (hash: W7OttyGx9EuMgenKXewm+r+hTp3kZdfJ3JB/6T3yysg=)
2: UltwWpHbww7RDrciK3eXuDTgGGM.crl (hash: +Oce2uVz1F2vvI8MPDwzeQi6sj9jCxUMoHaqFgH9qYk=)
3: pa_3nrQU9sw7OgTjd5yx0VmvRCA.roa (hash: RO+47JjxuCYnZ9Bz/vNN2VIRL6JJUsDg7rwYhEHWFsY=)
4: zNKUtHAFTtLYqLumLGcRzG27f7Y.roa (hash: 872Fq4m0qhsFSDlfogdNcIFhv8haNEfuUjtryb/YTr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:75:d8:99:1c:73:1b:85:9a:6a:1e:b7:0f:c1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525b705a91dbc30ed10eb7222b7797b834e01863
Validity
Not Before: Mar 26 00:01:45 2026 GMT
Not After : Mar 27 00:01:45 2026 GMT
Subject: CN=155fbfd179e8548a16a4278981c9329ccc5cfe29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:f2:d5:d8:8c:fd:04:93:2a:32:1c:53:7e:
32:f6:15:51:79:f7:d6:f2:33:51:56:e6:42:76:60:
25:c5:e4:20:c7:6b:46:d0:0a:1d:80:e1:e9:e6:27:
6b:0b:45:14:eb:2e:4d:91:dc:11:15:5d:3a:0e:da:
f0:b1:75:f7:97:65:ef:05:53:44:9b:e5:f2:dd:75:
2e:76:ef:82:15:7f:9e:6f:8e:fb:a0:c7:61:3b:28:
bd:39:80:f7:03:f4:39:1c:fc:19:d4:2b:11:e1:f2:
e2:f4:03:f4:9c:3c:62:b3:30:b6:83:e6:2b:e4:51:
c4:82:69:12:15:fd:b4:bf:79:31:4c:55:f6:18:69:
e1:d3:5d:80:d9:e8:0d:33:49:bb:b8:8c:ff:1b:f1:
d4:c2:11:18:9e:d8:56:0d:05:a9:ea:09:5f:ae:76:
f8:cb:25:70:db:70:ca:86:a4:30:1f:fa:f1:1d:8e:
94:df:51:3f:4c:10:fe:b6:f9:fd:66:29:2e:91:ca:
c1:23:fd:be:5b:ca:a2:16:a7:cb:38:b7:1c:82:fe:
84:e0:8a:94:b1:11:6a:ae:69:c3:ce:59:7c:ac:39:
9f:5e:8a:eb:97:02:e8:9b:97:12:e5:e6:cc:4d:19:
09:89:d9:13:70:d2:57:b4:43:7b:68:f2:cf:df:ed:
25:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5F:BF:D1:79:E8:54:8A:16:A4:27:89:81:C9:32:9C:CC:5C:FE:29
X509v3 Authority Key Identifier:
keyid:52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ff:3e:78:95:15:c9:37:f2:30:20:39:6a:03:e7:22:4a:46:
f6:57:3e:d3:7c:f1:b2:8a:cf:be:aa:18:40:7f:3f:70:1b:ea:
e2:c3:85:81:92:e7:5f:d9:26:8d:2a:19:82:75:eb:a6:cb:80:
5e:2a:6b:df:19:37:32:31:ab:24:e0:17:89:1c:b0:a7:c4:18:
0f:33:ee:91:5b:82:66:29:6c:31:6e:e3:44:2b:0b:7b:48:79:
0c:a4:d2:79:72:1e:99:68:64:2f:ca:f2:a4:d8:ef:1d:83:1f:
21:1b:85:2c:53:79:e3:0e:e7:f7:25:d0:5a:a7:94:92:b9:cf:
a0:5d:ae:95:88:32:1e:29:49:22:94:02:8b:d5:e7:82:e8:63:
a7:65:61:6a:1a:de:3e:f4:cc:e3:05:c1:e5:1f:54:aa:7f:a8:
58:2f:8e:02:4e:0b:6f:60:f0:a6:00:35:77:8f:f5:02:73:05:
8e:6e:c1:3f:f5:5d:27:16:93:7f:6c:3a:f2:85:8e:1d:88:88:
50:17:a1:2c:96:a0:18:d5:5a:68:b2:f3:29:65:8b:92:60:2e:
c1:d1:a0:67:b6:38:b0:32:4e:82:53:80:d0:a6:3b:08:0f:c2:
e4:2d:f9:0a:a3:82:78:1c:90:62:ef:cb:47:b6:2e:2e:0e:e4:
75:3b:34:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncnXYmRxzG4Waah63D8EDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNWI3MDVhOTFkYmMzMGVkMTBlYjcyMjJiNzc5N2I4MzRl
MDE4NjMwHhcNMjYwMzI2MDAwMTQ1WhcNMjYwMzI3MDAwMTQ1WjAzMTEwLwYDVQQD
EygxNTVmYmZkMTc5ZTg1NDhhMTZhNDI3ODk4MWM5MzI5Y2NjNWNmZTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSry1diM/QSTKjIcU34y9hVReffW
8jNRVuZCdmAlxeQgx2tG0AodgOHp5idrC0UU6y5NkdwRFV06DtrwsXX3l2XvBVNE
m+Xy3XUudu+CFX+eb477oMdhOyi9OYD3A/Q5HPwZ1CsR4fLi9AP0nDxiszC2g+Yr
5FHEgmkSFf20v3kxTFX2GGnh012A2egNM0m7uIz/G/HUwhEYnthWDQWp6glfrnb4
yyVw23DKhqQwH/rxHY6U31E/TBD+tvn9ZikukcrBI/2+W8qiFqfLOLccgv6E4IqU
sRFqrmnDzll8rDmfXorrlwLom5cS5ebMTRkJidkTcNJXtEN7aPLP3+0lgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVfv9F56FSKFqQniYHJMpzMXP4pMB8GA1UdIwQY
MBaAFFJbcFqR28MO0Q63Iit3l7g04BhjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWx0d1dwSGJ3dzdSRHJjaUszZVh1RFRnR0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNDYyZGMtOWU1OS00ZThkLTljNmQt
ZjQ2ODg3ZGY5ODYzLzEvVWx0d1dwSGJ3dzdSRHJjaUszZVh1RFRnR0dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNDYyZGMtOWU1OS00ZThkLTljNmQtZjQ2ODg3ZGY5ODYz
LzEvVWx0d1dwSGJ3dzdSRHJjaUszZVh1RFRnR0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIf8+eJUV
yTfyMCA5agPnIkpG9lc+03zxsorPvqoYQH8/cBvq4sOFgZLnX9kmjSoZgnXrpsuA
Xipr3xk3MjGrJOAXiRywp8QYDzPukVuCZilsMW7jRCsLe0h5DKTSeXIemWhkL8ry
pNjvHYMfIRuFLFN54w7n9yXQWqeUkrnPoF2ulYgyHilJIpQCi9Xnguhjp2Vhahre
PvTM4wXB5R9Uqn+oWC+OAk4Lb2DwpgA1d4/1AnMFjm7BP/VdJxaTf2w68oWOHYiI
UBehLJagGNVaaLLzKWWLkmAuwdGgZ7Y4sDJOglOA0KY7CA/C5C35CqOCeByQYu/L
R7YuLg7kdTs0Ow==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:21 2026 by rpki-client