Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
File: UKiPmoNBAa34dwN6UcgdEzqpRuw.mft (raw, json)
Hash identifier: otkRzBxGL1q+XXr+CggOiARxmjefXG2hBJP3zMDhh60=
Subject key identifier: 08:08:21:AE:B0:D5:5D:23:67:4B:38:D3:14:76:9F:C6:AE:88:63:15
Authority key identifier: 50:A8:8F:9A:83:41:01:AD:F8:77:03:7A:51:C8:1D:13:3A:A9:46:EC
Certificate issuer: /CN=50a88f9a834101adf877037a51c81d133aa946ec
Certificate serial: 019D29979557FE7939B31677DD85D27B02AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
Manifest number: 1013
Signing time: Thu 26 Mar 2026 10:01:33 +0000
Manifest this update: Thu 26 Mar 2026 10:01:33 +0000
Manifest next update: Fri 27 Mar 2026 10:01:33 +0000
Files and hashes: 1: J7XTEsifopXt0LyZERZ4bxD_gsA.roa (hash: Il7+0rYxklAhI9+3062Z4W95Cz4Wv/cW8FrtfG8GyYg=)
2: UKiPmoNBAa34dwN6UcgdEzqpRuw.crl (hash: EnUKE5WEVP69UOQMXamoJum3l0Jxx1gQxMAetBcZtSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:95:57:fe:79:39:b3:16:77:dd:85:d2:7b:02:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a88f9a834101adf877037a51c81d133aa946ec
Validity
Not Before: Mar 26 10:01:33 2026 GMT
Not After : Mar 27 10:01:33 2026 GMT
Subject: CN=080821aeb0d55d23674b38d314769fc6ae886315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:06:64:c3:da:b5:21:65:09:ed:a0:ac:f7:21:
9a:7d:14:7c:4f:54:aa:bd:9f:40:87:58:a9:f4:11:
29:91:e4:99:8f:b3:8b:c4:ab:18:0b:f6:82:19:11:
a3:89:12:70:15:83:08:87:b3:ea:f8:2f:01:c6:03:
99:cc:a7:00:27:c4:ff:98:93:e6:1c:f8:c4:2f:bb:
1a:85:6a:b3:72:04:00:a5:28:16:aa:eb:aa:c9:32:
67:dc:61:58:1a:44:e8:4c:85:77:e5:c3:1a:88:78:
d7:5a:f6:a3:e1:f2:56:f2:ff:59:56:a5:a0:4a:ae:
59:62:36:a2:7f:6b:66:e2:a8:3a:18:9b:7d:54:b0:
12:0e:a1:82:c2:04:c3:94:ba:46:61:ef:82:ea:db:
93:dc:34:1a:77:42:e7:29:67:32:34:ee:b9:0b:7d:
0d:20:4f:03:8b:5e:1b:1d:78:ea:b7:34:e1:6b:93:
8e:d4:11:ca:48:ff:1c:98:4a:cb:9b:ce:76:ca:07:
ff:33:36:09:66:6c:c8:54:e5:3d:3b:48:01:2d:1a:
b1:a3:f0:bd:74:0b:2b:55:54:c6:cd:4f:34:f6:d4:
19:f0:36:8e:00:b1:ba:dc:74:c8:ac:19:fc:03:b0:
7d:e9:08:8d:09:66:0d:4b:b3:6a:81:d7:3c:08:79:
88:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:08:21:AE:B0:D5:5D:23:67:4B:38:D3:14:76:9F:C6:AE:88:63:15
X509v3 Authority Key Identifier:
keyid:50:A8:8F:9A:83:41:01:AD:F8:77:03:7A:51:C8:1D:13:3A:A9:46:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:cf:0e:43:45:01:c9:8a:a6:ff:f1:0b:3d:fc:79:a4:7e:65:
1c:1f:aa:64:02:6c:fc:c5:af:cd:d5:f4:fe:5b:25:7f:ea:89:
ed:d9:30:f1:cc:6a:73:a4:6a:5d:07:1d:fb:40:9a:0b:ee:4e:
8b:57:68:01:89:19:33:c6:f0:e2:ad:fb:4a:30:bc:df:bb:b3:
42:27:90:a5:ff:85:54:c6:1e:88:01:17:2a:f6:84:73:8a:ff:
49:bf:af:99:ca:61:1f:8e:ff:5f:0d:3f:57:82:d1:9f:6f:fc:
31:11:d3:c2:c9:1a:ff:ee:26:3c:27:94:e1:52:e5:e4:0e:3b:
9c:12:a3:62:01:b2:4b:65:57:26:99:40:ba:79:10:e1:b7:29:
b2:4e:3f:f6:8e:e8:38:64:89:36:7d:2e:2e:ac:c3:51:4c:e9:
85:65:d1:97:1a:a6:f9:ae:a3:98:84:33:94:35:59:db:5d:5e:
22:19:6d:84:b0:f3:f5:41:b9:0d:b3:1a:fb:48:0f:f2:c5:24:
96:3a:99:35:82:79:34:ba:7c:1f:eb:a3:51:31:c2:98:7b:1f:
b4:3e:90:1f:b2:c9:a4:bb:fb:73:62:58:eb:ff:ad:5c:c2:7d:
6b:f8:22:c5:80:49:82:5d:b0:60:67:6f:de:c9:2d:3c:f4:05:
23:8d:76:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pl5VX/nk5sxZ33YXSewKuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYTg4ZjlhODM0MTAxYWRmODc3MDM3YTUxYzgxZDEzM2Fh
OTQ2ZWMwHhcNMjYwMzI2MTAwMTMzWhcNMjYwMzI3MTAwMTMzWjAzMTEwLwYDVQQD
EygwODA4MjFhZWIwZDU1ZDIzNjc0YjM4ZDMxNDc2OWZjNmFlODg2MzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQZkw9q1IWUJ7aCs9yGafRR8T1Sq
vZ9Ah1ip9BEpkeSZj7OLxKsYC/aCGRGjiRJwFYMIh7Pq+C8BxgOZzKcAJ8T/mJPm
HPjEL7sahWqzcgQApSgWquuqyTJn3GFYGkToTIV35cMaiHjXWvaj4fJW8v9ZVqWg
Sq5ZYjaif2tm4qg6GJt9VLASDqGCwgTDlLpGYe+C6tuT3DQad0LnKWcyNO65C30N
IE8Di14bHXjqtzTha5OO1BHKSP8cmErLm852ygf/MzYJZmzIVOU9O0gBLRqxo/C9
dAsrVVTGzU809tQZ8DaOALG63HTIrBn8A7B96QiNCWYNS7Nqgdc8CHmIqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgIIa6w1V0jZ0s40xR2n8auiGMVMB8GA1UdIwQY
MBaAFFCoj5qDQQGt+HcDelHIHRM6qUbsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUtpUG1vTkJBYTM0ZHdONlVjZ2RFenFwUnV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85NzYwYzYtM2ZjZS00MmJkLWJiYzgt
NDlmYmMzMGE4ZjYxLzEvVUtpUG1vTkJBYTM0ZHdONlVjZ2RFenFwUnV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi85NzYwYzYtM2ZjZS00MmJkLWJiYzgtNDlmYmMzMGE4ZjYx
LzEvVUtpUG1vTkJBYTM0ZHdONlVjZ2RFenFwUnV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzs8OQ0UB
yYqm//ELPfx5pH5lHB+qZAJs/MWvzdX0/lslf+qJ7dkw8cxqc6RqXQcd+0CaC+5O
i1doAYkZM8bw4q37SjC837uzQieQpf+FVMYeiAEXKvaEc4r/Sb+vmcphH47/Xw0/
V4LRn2/8MRHTwska/+4mPCeU4VLl5A47nBKjYgGyS2VXJplAunkQ4bcpsk4/9o7o
OGSJNn0uLqzDUUzphWXRlxqm+a6jmIQzlDVZ211eIhlthLDz9UG5DbMa+0gP8sUk
ljqZNYJ5NLp8H+ujUTHCmHsftD6QH7LJpLv7c2JY6/+tXMJ9a/gixYBJgl2wYGdv
3sktPPQFI412LQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:17 2026 by rpki-client