Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/bcc468-bd66-4c34-ad37-0efb99724d99/1/UVtUV3FxT4lre0FxJcklQWItDd0.mft
File: UVtUV3FxT4lre0FxJcklQWItDd0.mft (raw, json)
Hash identifier: w/dK6sDrzlx6g/czO1vCaAHxLth8mQli+l336iWUZuI=
Subject key identifier: 2F:84:68:A9:BE:A4:69:62:DC:49:D1:63:85:B5:E9:B1:0C:6E:F8:72
Authority key identifier: 51:5B:54:57:71:71:4F:89:6B:7B:41:71:25:C9:25:41:62:2D:0D:DD
Certificate issuer: /CN=515b545771714f896b7b417125c92541622d0ddd
Certificate serial: 019D27043F0343E0C12FE53A65F03C2B690A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVtUV3FxT4lre0FxJcklQWItDd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/bcc468-bd66-4c34-ad37-0efb99724d99/1/UVtUV3FxT4lre0FxJcklQWItDd0.mft
Manifest number: 16
Signing time: Wed 25 Mar 2026 22:01:22 +0000
Manifest this update: Wed 25 Mar 2026 22:01:22 +0000
Manifest next update: Thu 26 Mar 2026 22:01:22 +0000
Files and hashes: 1: UL8oCh7jC8MrhaCkeuIjsE-ENXk.roa (hash: EzyQeu5N9vyCieYirP7cUQDe+vJjtb3I3PrNd+S1+Zc=)
2: UVtUV3FxT4lre0FxJcklQWItDd0.crl (hash: YRKkUhYX0spmL3+n8JYl8H4JXKxXqcntbXjcCXuhO6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/bcc468-bd66-4c34-ad37-0efb99724d99/1/UVtUV3FxT4lre0FxJcklQWItDd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/bcc468-bd66-4c34-ad37-0efb99724d99/1/UVtUV3FxT4lre0FxJcklQWItDd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVtUV3FxT4lre0FxJcklQWItDd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:3f:03:43:e0:c1:2f:e5:3a:65:f0:3c:2b:69:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=515b545771714f896b7b417125c92541622d0ddd
Validity
Not Before: Mar 25 22:01:22 2026 GMT
Not After : Mar 26 22:01:22 2026 GMT
Subject: CN=2f8468a9bea46962dc49d16385b5e9b10c6ef872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:18:ce:3a:fa:85:9f:e3:36:01:ee:79:51:
f2:79:cf:20:22:e9:8f:56:2e:ef:a1:bd:56:4c:4f:
97:d8:c3:d0:92:af:43:bb:27:9d:2d:1c:3e:83:b3:
8b:cc:6a:9a:47:c4:ff:b9:8f:36:0b:c0:8a:4d:de:
c9:a2:0b:ec:ee:1e:f7:c3:0a:1e:93:f8:64:de:88:
81:4a:f6:87:37:77:a8:c4:8a:b6:94:20:34:a6:ec:
9a:d0:1f:80:94:ad:b7:d3:ee:16:fc:8e:72:2c:69:
1a:2c:28:23:84:b6:0c:e2:75:44:e7:40:35:92:40:
ec:68:71:64:30:3f:f2:dd:7e:3f:e2:8b:a1:f7:8b:
50:53:6e:d3:f6:7e:83:0d:39:50:90:c2:ce:d4:ce:
6c:ff:05:a0:54:f8:a8:36:8d:7f:be:9f:d8:64:38:
bc:54:ba:d2:81:a5:74:47:c1:08:54:5d:bc:94:0f:
86:14:1d:96:31:6c:1f:df:e1:4c:5d:7d:89:68:7f:
79:41:c6:60:b3:c1:2c:2e:4a:c6:03:0d:fb:1c:f7:
e7:cb:58:f4:67:2d:8e:17:85:47:44:30:56:a2:cb:
b5:1d:c3:95:1b:1e:fe:66:1d:80:1d:a4:26:3a:97:
e2:db:71:28:2a:23:6c:2a:5c:c8:43:e5:82:7e:3c:
e1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:84:68:A9:BE:A4:69:62:DC:49:D1:63:85:B5:E9:B1:0C:6E:F8:72
X509v3 Authority Key Identifier:
keyid:51:5B:54:57:71:71:4F:89:6B:7B:41:71:25:C9:25:41:62:2D:0D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVtUV3FxT4lre0FxJcklQWItDd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/bcc468-bd66-4c34-ad37-0efb99724d99/1/UVtUV3FxT4lre0FxJcklQWItDd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/bcc468-bd66-4c34-ad37-0efb99724d99/1/UVtUV3FxT4lre0FxJcklQWItDd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:89:0c:4b:e1:28:15:da:bf:71:02:04:14:93:13:5a:3d:8c:
e8:ca:0b:7d:26:ae:92:74:bd:6c:f4:ba:04:c3:a6:ee:6f:e3:
64:df:16:83:27:0c:27:09:00:8d:64:11:db:1b:ef:57:0b:95:
78:7b:d7:7b:df:53:2c:c1:4e:42:b6:0c:45:39:bf:eb:a4:89:
5c:d9:2c:a8:6e:14:d1:10:35:b8:14:a3:42:15:99:b6:14:69:
ae:93:b7:8e:65:e5:df:d3:a5:94:e1:9e:ac:af:24:81:0b:af:
93:a1:47:99:2c:47:88:28:b1:e9:0a:8b:ab:8e:4a:85:dc:b8:
b0:ce:a6:80:1a:9a:58:09:ff:be:a8:d7:40:d7:e4:3b:4c:93:
93:70:11:b5:21:94:64:5b:97:09:6a:0d:1c:de:81:06:37:b8:
74:15:57:70:46:af:de:37:f4:ed:ec:95:4e:d3:de:8c:1b:16:
06:6f:ab:33:7a:8b:35:05:a4:27:3a:e5:ee:6c:12:41:67:3c:
f6:c5:42:15:2f:a2:8a:ba:c3:80:0e:5e:1b:77:5b:32:9d:d9:
f3:7e:ea:91:e3:7c:ed:0d:3e:83:b9:f9:9a:e9:c4:c9:55:ad:
ec:0f:d1:13:b7:57:9e:7e:b6:d7:c3:29:5d:a2:20:ab:06:00:
fc:c5:77:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBD8DQ+DBL+U6ZfA8K2kKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNWI1NDU3NzE3MTRmODk2YjdiNDE3MTI1YzkyNTQxNjIy
ZDBkZGQwHhcNMjYwMzI1MjIwMTIyWhcNMjYwMzI2MjIwMTIyWjAzMTEwLwYDVQQD
EygyZjg0NjhhOWJlYTQ2OTYyZGM0OWQxNjM4NWI1ZTliMTBjNmVmODcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS0Yzjr6hZ/jNgHueVHyec8gIumP
Vi7vob1WTE+X2MPQkq9DuyedLRw+g7OLzGqaR8T/uY82C8CKTd7Jogvs7h73wwoe
k/hk3oiBSvaHN3eoxIq2lCA0puya0B+AlK230+4W/I5yLGkaLCgjhLYM4nVE50A1
kkDsaHFkMD/y3X4/4ouh94tQU27T9n6DDTlQkMLO1M5s/wWgVPioNo1/vp/YZDi8
VLrSgaV0R8EIVF28lA+GFB2WMWwf3+FMXX2JaH95QcZgs8EsLkrGAw37HPfny1j0
Zy2OF4VHRDBWosu1HcOVGx7+Zh2AHaQmOpfi23EoKiNsKlzIQ+WCfjzhQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+EaKm+pGli3EnRY4W16bEMbvhyMB8GA1UdIwQY
MBaAFFFbVFdxcU+Ja3tBcSXJJUFiLQ3dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVZ0VVYzRnhUNGxyZTBGeEpja2xRV0l0RGQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9iY2M0NjgtYmQ2Ni00YzM0LWFkMzct
MGVmYjk5NzI0ZDk5LzEvVVZ0VVYzRnhUNGxyZTBGeEpja2xRV0l0RGQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9iY2M0NjgtYmQ2Ni00YzM0LWFkMzctMGVmYjk5NzI0ZDk5
LzEvVVZ0VVYzRnhUNGxyZTBGeEpja2xRV0l0RGQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4kMS+Eo
Fdq/cQIEFJMTWj2M6MoLfSauknS9bPS6BMOm7m/jZN8WgycMJwkAjWQR2xvvVwuV
eHvXe99TLMFOQrYMRTm/66SJXNksqG4U0RA1uBSjQhWZthRprpO3jmXl39OllOGe
rK8kgQuvk6FHmSxHiCix6QqLq45Khdy4sM6mgBqaWAn/vqjXQNfkO0yTk3ARtSGU
ZFuXCWoNHN6BBje4dBVXcEav3jf07eyVTtPejBsWBm+rM3qLNQWkJzrl7mwSQWc8
9sVCFS+iirrDgA5eG3dbMp3Z837qkeN87Q0+g7n5munEyVWt7A/RE7dXnn6218Mp
XaIgqwYA/MV3JA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:48:16 2026 by rpki-client