Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
File: UeFdozln1BRwqW1hQcg0DyJAWBw.mft (raw, json)
Hash identifier: z1uWmbSuAzLGFuh0RF8dxkTOyVgkwwIgoKNVotdc+1s=
Subject key identifier: C4:65:A2:44:96:2A:F0:AE:4A:2B:F5:11:12:F7:B5:BD:15:40:F7:FF
Authority key identifier: 51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
Certificate issuer: /CN=51e15da33967d41470a96d6141c8340f2240581c
Certificate serial: 019CADFDFA1B308D618F3304E18E79C53A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 10:00:28 +0000
Manifest this update: Mon 02 Mar 2026 10:00:28 +0000
Manifest next update: Tue 03 Mar 2026 10:00:28 +0000
Files and hashes: 1: 81cJ_EIt-PStE8ZvP9c7d9zPO5Y.roa (hash: VoEIe6W6A/UJnNjd89XKoAD4I+DEvz9ksYBB+LiWpIU=)
2: UeFdozln1BRwqW1hQcg0DyJAWBw.crl (hash: aXiwgy3wxgcd75sG7j0EfiYfMzJzlQrdS7TYck2//Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fd:fa:1b:30:8d:61:8f:33:04:e1:8e:79:c5:3a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e15da33967d41470a96d6141c8340f2240581c
Validity
Not Before: Mar 2 10:00:28 2026 GMT
Not After : Mar 3 10:00:28 2026 GMT
Subject: CN=c465a244962af0ae4a2bf51112f7b5bd1540f7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:14:0f:20:ed:00:a4:48:58:52:02:06:a3:
40:df:1d:f8:b2:23:eb:89:22:4f:75:5e:77:55:7f:
86:7f:b3:4c:29:75:79:f8:f8:ba:fe:ae:85:d3:70:
dc:f0:69:4f:79:6d:43:1d:ef:df:b5:8f:94:de:9b:
ee:03:8a:d4:31:0e:3c:02:f0:80:d5:66:2c:14:92:
f8:5e:c1:11:05:69:9d:b0:99:b0:93:be:cc:57:59:
fb:f9:4d:0d:a5:97:bc:e7:05:19:43:2b:c9:2e:92:
3d:dd:5a:4a:ac:be:33:07:bd:7b:7c:c9:8c:1e:1d:
6c:55:44:2e:65:10:0d:19:73:93:32:47:ec:15:d2:
d6:e8:6a:7e:db:12:ee:7c:ba:ef:3b:56:1d:6f:96:
c6:b2:91:c9:c6:b7:9e:95:e7:03:9e:ca:f0:34:24:
21:39:41:f0:25:b4:be:b1:09:ac:b2:ca:8c:96:c3:
77:51:21:ad:75:3b:30:bc:3f:e0:55:48:4c:61:8f:
30:88:33:08:15:2e:dc:17:9f:c2:9c:64:96:52:24:
6b:80:1d:8e:cd:e8:07:18:5a:38:5e:ee:7b:b5:c8:
89:08:a1:d3:22:1c:ba:d7:b7:83:b3:1b:70:6a:e5:
44:91:4f:17:85:9d:7e:28:33:ac:68:d0:4d:b5:d5:
5f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:65:A2:44:96:2A:F0:AE:4A:2B:F5:11:12:F7:B5:BD:15:40:F7:FF
X509v3 Authority Key Identifier:
keyid:51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:fa:ce:82:49:c3:d3:05:68:5b:54:d8:66:e0:df:fa:08:04:
ca:b3:38:df:ca:c1:31:67:d2:e7:6d:1d:a3:a2:bb:aa:48:e0:
fd:d9:2e:38:ad:59:cc:29:fa:d6:79:34:9c:96:21:03:99:74:
c5:35:dd:e2:ac:7b:48:db:38:ba:4d:e0:71:b7:ef:d1:f3:63:
06:7c:29:8a:87:b5:06:44:1a:5e:0a:a6:6d:43:3c:11:97:20:
f9:5b:44:94:c3:be:51:5b:18:dc:e5:89:23:e6:5c:c0:bf:7d:
dc:1d:1b:88:d0:64:60:c7:9d:cd:87:94:9b:82:5d:74:b2:85:
16:87:e5:09:fa:82:e8:3f:2d:a0:fd:3e:c9:fa:e2:d4:96:e7:
ac:b7:42:ea:b9:59:0e:bb:68:41:ac:c4:18:d2:5a:f6:55:e6:
02:14:97:49:71:28:6d:b3:53:97:1c:23:f9:c3:0a:f3:15:a9:
a6:49:9f:fd:4c:2d:fa:e7:10:38:27:99:90:de:44:e1:c8:b2:
b0:86:fd:f5:59:44:09:b2:df:43:72:23:1f:f9:28:ed:fc:77:
b9:a8:3a:4b:30:94:6c:1e:de:d2:1d:34:63:89:3a:41:2d:63:
15:cc:25:b2:e1:c2:8b:c5:e8:96:48:3b:7c:76:fa:61:2f:5e:
f0:32:c7:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/fobMI1hjzME4Y55xToZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZTE1ZGEzMzk2N2Q0MTQ3MGE5NmQ2MTQxYzgzNDBmMjI0
MDU4MWMwHhcNMjYwMzAyMTAwMDI4WhcNMjYwMzAzMTAwMDI4WjAzMTEwLwYDVQQD
EyhjNDY1YTI0NDk2MmFmMGFlNGEyYmY1MTExMmY3YjViZDE1NDBmN2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfkUDyDtAKRIWFICBqNA3x34siPr
iSJPdV53VX+Gf7NMKXV5+Pi6/q6F03Dc8GlPeW1DHe/ftY+U3pvuA4rUMQ48AvCA
1WYsFJL4XsERBWmdsJmwk77MV1n7+U0NpZe85wUZQyvJLpI93VpKrL4zB717fMmM
Hh1sVUQuZRANGXOTMkfsFdLW6Gp+2xLufLrvO1Ydb5bGspHJxreelecDnsrwNCQh
OUHwJbS+sQmsssqMlsN3USGtdTswvD/gVUhMYY8wiDMIFS7cF5/CnGSWUiRrgB2O
zegHGFo4Xu57tciJCKHTIhy617eDsxtwauVEkU8XhZ1+KDOsaNBNtdVfMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRlokSWKvCuSiv1ERL3tb0VQPf/MB8GA1UdIwQY
MBaAFFHhXaM5Z9QUcKltYUHINA8iQFgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWVGZG96bG4xQlJ3cVcxaFFjZzBEeUpBV0J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yM2Q1YzEtYWM2Ni00NjFmLTkwMGYt
MzgwODg1NzQwZDRhLzEvVWVGZG96bG4xQlJ3cVcxaFFjZzBEeUpBV0J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yM2Q1YzEtYWM2Ni00NjFmLTkwMGYtMzgwODg1NzQwZDRh
LzEvVWVGZG96bG4xQlJ3cVcxaFFjZzBEeUpBV0J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPrOgknD
0wVoW1TYZuDf+ggEyrM438rBMWfS520do6K7qkjg/dkuOK1ZzCn61nk0nJYhA5l0
xTXd4qx7SNs4uk3gcbfv0fNjBnwpioe1BkQaXgqmbUM8EZcg+VtElMO+UVsY3OWJ
I+ZcwL993B0biNBkYMedzYeUm4JddLKFFoflCfqC6D8toP0+yfri1JbnrLdC6rlZ
DrtoQazEGNJa9lXmAhSXSXEobbNTlxwj+cMK8xWppkmf/Uwt+ucQOCeZkN5E4ciy
sIb99VlECbLfQ3IjH/ko7fx3uag6SzCUbB7e0h00Y4k6QS1jFcwlsuHCi8Xolkg7
fHb6YS9e8DLHxw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:55:25 2026 by rpki-client