Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
File: UeFASVvQbC6O-st-0KMVFtsfQF8.mft (raw, json)
Hash identifier: U3vRl6X3hdG/HKDKv4wXv1B4fDsb1Ty6Z8sasykUtLc=
Subject key identifier: 87:D2:7A:8D:3E:52:35:88:69:64:D9:3D:92:C4:68:AB:1F:65:D5:8F
Authority key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
Certificate issuer: /CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Certificate serial: 019CAC10544642268798F6E66F81B8343207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
Manifest number: 0FA1
Signing time: Mon 02 Mar 2026 01:01:17 +0000
Manifest this update: Mon 02 Mar 2026 01:01:17 +0000
Manifest next update: Tue 03 Mar 2026 01:01:17 +0000
Files and hashes: 1: UcC2Y8zHvL_FDSURiolVRBuB8_g.roa (hash: p3IzoT2nzG2oBklzpQ6gR/NCnzvpo3xyP/73GYhUd3g=)
2: UeFASVvQbC6O-st-0KMVFtsfQF8.crl (hash: WVF9eQRVKhIXeeGbHjvN9pNCrSkxfDQkVMk2ZLKMrY8=)
3: vz5RaUGZ5UQMv5HfTK7-xdJaMis.roa (hash: YyzHvgYYzEsZBa9TKZu8r++ne7pY4Yz24jL7ObVc/TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:54:46:42:26:87:98:f6:e6:6f:81:b8:34:32:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Validity
Not Before: Mar 2 01:01:17 2026 GMT
Not After : Mar 3 01:01:17 2026 GMT
Subject: CN=87d27a8d3e5235886964d93d92c468ab1f65d58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ec:49:3a:83:58:38:ec:d2:9f:89:90:b2:06:
bb:3a:94:70:45:2b:02:11:9e:cc:d8:21:75:4e:52:
98:9d:20:26:57:a9:b5:ab:11:a9:55:5a:ee:bc:98:
cb:cd:71:b8:e3:54:b3:1e:e7:3d:0a:16:2d:e3:3c:
8e:c1:bc:17:2b:d3:36:34:b3:96:e5:0d:9d:98:37:
e7:bb:f1:86:35:31:5c:a2:9a:56:1d:1d:a5:88:11:
42:bb:e1:7a:84:0c:da:37:9f:41:69:05:84:ce:e2:
c8:cb:f2:05:40:ba:8a:db:6c:db:90:31:ae:65:ec:
ef:c9:b9:f1:43:d1:3d:83:9b:90:55:60:53:77:9d:
f8:e3:19:c7:cf:5c:d3:82:bc:c5:dc:8e:ef:ba:c9:
8b:a8:a7:56:3b:7f:ca:c2:ab:1a:3c:1b:1c:a9:1c:
d6:35:5b:bf:f4:22:74:a8:1c:d5:1c:d7:61:eb:28:
e2:91:eb:d8:52:b4:2b:28:d9:48:cd:15:ee:b0:46:
2c:64:6a:fe:48:50:0d:7e:13:d5:7c:4f:e4:18:22:
89:ca:93:35:75:3b:4d:51:07:f1:b9:67:69:69:7d:
16:d5:23:60:70:6c:c9:67:09:1f:05:9c:87:af:a4:
dd:42:b6:52:5b:48:9f:13:2b:d4:b2:de:c4:c0:c4:
ac:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D2:7A:8D:3E:52:35:88:69:64:D9:3D:92:C4:68:AB:1F:65:D5:8F
X509v3 Authority Key Identifier:
keyid:51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:18:64:12:aa:fe:96:a1:5e:19:c3:aa:26:72:49:4c:66:08:
ef:80:b2:9e:dc:8d:49:78:3b:1d:aa:84:3e:55:c5:f6:eb:22:
dc:46:14:e2:c7:3a:9e:79:b1:4b:43:9c:c7:f0:2f:52:cf:18:
5b:21:5d:3c:2d:39:3e:01:44:9c:96:22:27:bd:99:bf:66:1e:
4e:d9:58:82:7e:9b:39:04:ff:42:d5:ab:dd:05:b4:c9:60:d0:
42:48:7f:55:6b:e3:93:f1:53:91:c1:a9:0b:47:20:81:87:a3:
c6:53:d6:c3:85:50:fb:2f:12:35:01:e2:88:42:db:fc:2e:df:
80:24:f1:e9:d5:b6:24:db:ad:f7:81:dc:78:fb:a7:24:14:3f:
76:a8:34:ca:80:c9:ff:79:d9:3e:e6:35:0e:ed:a4:63:62:6a:
0e:cd:c2:8f:55:57:d5:b5:27:c4:a3:71:87:ed:03:38:e8:b6:
08:b9:76:ab:89:9c:04:c8:ed:69:e2:d7:03:6d:0f:3e:c2:3d:
3f:4b:c4:b3:e6:85:d7:5d:ee:8e:aa:ab:6b:9e:9e:28:c0:68:
c0:c0:6d:1d:0b:1b:ac:33:78:4a:54:dd:2b:24:32:bc:9c:d3:
25:ca:5f:ee:a7:6b:db:f6:d8:e4:cd:23:53:92:62:e4:c7:98:
8d:79:14:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysEFRGQiaHmPbmb4G4NDIHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZTE0MDQ5NWJkMDZjMmU4ZWZhY2I3ZWQwYTMxNTE2ZGIx
ZjQwNWYwHhcNMjYwMzAyMDEwMTE3WhcNMjYwMzAzMDEwMTE3WjAzMTEwLwYDVQQD
Eyg4N2QyN2E4ZDNlNTIzNTg4Njk2NGQ5M2Q5MmM0NjhhYjFmNjVkNThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uxJOoNYOOzSn4mQsga7OpRwRSsC
EZ7M2CF1TlKYnSAmV6m1qxGpVVruvJjLzXG441SzHuc9ChYt4zyOwbwXK9M2NLOW
5Q2dmDfnu/GGNTFcoppWHR2liBFCu+F6hAzaN59BaQWEzuLIy/IFQLqK22zbkDGu
ZezvybnxQ9E9g5uQVWBTd5344xnHz1zTgrzF3I7vusmLqKdWO3/KwqsaPBscqRzW
NVu/9CJ0qBzVHNdh6yjikevYUrQrKNlIzRXusEYsZGr+SFANfhPVfE/kGCKJypM1
dTtNUQfxuWdpaX0W1SNgcGzJZwkfBZyHr6TdQrZSW0ifEyvUst7EwMSsgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfSeo0+UjWIaWTZPZLEaKsfZdWPMB8GA1UdIwQY
MBaAFFHhQElb0GwujvrLftCjFRbbH0BfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWVGQVNWdlFiQzZPLXN0LTBLTVZGdHNmUUY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9mZDVmMDQtMWQyNi00NDUxLWE2YWUt
OTg2NzY0MmMyZjEwLzEvVWVGQVNWdlFiQzZPLXN0LTBLTVZGdHNmUUY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9mZDVmMDQtMWQyNi00NDUxLWE2YWUtOTg2NzY0MmMyZjEw
LzEvVWVGQVNWdlFiQzZPLXN0LTBLTVZGdHNmUUY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUBhkEqr+
lqFeGcOqJnJJTGYI74CyntyNSXg7HaqEPlXF9usi3EYU4sc6nnmxS0Ocx/AvUs8Y
WyFdPC05PgFEnJYiJ72Zv2YeTtlYgn6bOQT/QtWr3QW0yWDQQkh/VWvjk/FTkcGp
C0cggYejxlPWw4VQ+y8SNQHiiELb/C7fgCTx6dW2JNut94HcePunJBQ/dqg0yoDJ
/3nZPuY1Du2kY2JqDs3Cj1VX1bUnxKNxh+0DOOi2CLl2q4mcBMjtaeLXA20PPsI9
P0vEs+aF113ujqqra56eKMBowMBtHQsbrDN4SlTdKyQyvJzTJcpf7qdr2/bY5M0j
U5Ji5MeYjXkUig==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:20 2026 by rpki-client