Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
File: UVfIfREcgFD9XJrCsGvmIyNnUDM.mft (raw, json)
Hash identifier: T9OtgXySFMaH8MOEsC4L+MlqYyzse9bWZPsFHSRc2QE=
Subject key identifier: 7A:A3:BC:19:F0:8B:AC:02:E3:4C:6B:9F:EF:09:00:C7:03:91:8C:15
Authority key identifier: 51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
Certificate issuer: /CN=5157c87d111c8050fd5c9ac2b06be62323675033
Certificate serial: 019CAB6B93E0D2B64E14D918322FABCC4015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
Manifest number: 1013
Signing time: Sun 01 Mar 2026 22:01:19 +0000
Manifest this update: Sun 01 Mar 2026 22:01:19 +0000
Manifest next update: Mon 02 Mar 2026 22:01:19 +0000
Files and hashes: 1: UGOU3defI1PD5TaoHY92iKKrLH0.roa (hash: LcXksAjeRM/Vkq/NF2W4DTlITP5jtyLZdb4ILyajRKM=)
2: UVfIfREcgFD9XJrCsGvmIyNnUDM.crl (hash: EORIoDd5oPCFF7cUyIfrai9nnnNBL95PxqO/gQ2L0nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:93:e0:d2:b6:4e:14:d9:18:32:2f:ab:cc:40:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5157c87d111c8050fd5c9ac2b06be62323675033
Validity
Not Before: Mar 1 22:01:19 2026 GMT
Not After : Mar 2 22:01:19 2026 GMT
Subject: CN=7aa3bc19f08bac02e34c6b9fef0900c703918c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:9d:59:f9:b6:7c:33:24:cf:cb:6b:77:65:
55:6e:c6:d3:67:6a:07:d6:b3:b6:92:cb:0b:6f:80:
8b:8c:a7:7f:90:47:76:6e:0e:bc:47:78:c2:5d:fa:
45:3b:a5:be:ea:94:ba:49:94:db:be:8d:f5:62:5d:
66:1f:e6:44:aa:00:bd:a2:32:f4:5f:33:08:8c:7f:
f4:b8:09:fe:13:89:35:91:da:7d:49:c7:5a:54:71:
6a:b7:2c:49:e4:d1:6a:ed:bb:e0:b9:1e:19:90:0a:
75:fc:74:b9:2c:e9:4c:fa:75:95:09:fd:23:9f:6d:
9a:2e:bf:04:92:09:e0:89:11:9f:4a:e4:c5:20:4a:
8e:1e:a1:5c:58:34:b1:d0:d2:22:52:3c:a4:b3:6e:
fe:5a:2d:09:08:ba:86:dd:3d:2f:af:5f:a8:cd:82:
28:73:1f:f8:5d:16:97:a8:33:e0:44:98:fd:62:48:
d7:c5:dc:91:2b:af:a1:50:7e:44:00:98:9c:0b:8d:
df:70:f2:aa:cb:4f:20:fe:1c:53:c2:ba:fa:79:e9:
82:16:6e:61:28:ed:32:fe:9c:90:52:ab:9a:c3:e4:
49:9a:54:c0:d2:08:ca:6f:34:91:96:bd:4a:da:52:
46:1e:30:49:a6:0d:d2:a8:43:8a:86:d6:dd:e4:52:
6b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A3:BC:19:F0:8B:AC:02:E3:4C:6B:9F:EF:09:00:C7:03:91:8C:15
X509v3 Authority Key Identifier:
keyid:51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:25:78:c7:6c:82:3d:fd:31:64:53:e2:c0:2c:90:52:b9:c2:
db:2c:59:3a:3d:20:fb:45:a8:4d:a1:87:e4:28:27:30:3f:9c:
00:f5:23:87:cd:68:8b:06:6a:a4:fe:33:c9:c5:e0:25:e4:22:
f4:80:10:4e:bd:8e:6d:19:cb:c1:c9:36:41:6e:ce:61:9d:c8:
cc:fb:90:f8:9a:4e:78:05:32:19:d8:a1:3e:5c:a9:79:bc:e8:
c7:72:ec:04:a2:8a:34:49:c1:d6:35:f1:76:30:1e:56:f8:d5:
b6:fd:55:f0:fd:52:23:a3:14:b3:29:65:e1:11:11:86:fa:5a:
42:47:ee:80:4f:73:db:7c:5a:18:84:18:0b:05:22:52:f2:13:
ed:fc:21:12:71:4d:68:bc:b3:af:99:fa:bc:c7:25:f0:4c:e6:
fa:a5:74:4c:c5:9a:cf:57:f8:2f:91:2e:0d:41:6a:1c:85:59:
4d:dc:ad:46:9c:e0:51:15:df:d2:ba:44:ff:85:65:3e:46:b5:
44:3d:94:57:a6:69:0a:0c:49:3b:03:8a:19:5f:42:a0:cf:28:
b0:74:54:61:1c:f7:1f:12:c0:f5:d3:93:56:6c:bd:a4:3f:e6:
f0:e9:ba:9b:d5:45:cc:72:ee:9e:8d:42:c2:70:96:6e:00:9b:
5e:af:ec:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra5Pg0rZOFNkYMi+rzEAVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNTdjODdkMTExYzgwNTBmZDVjOWFjMmIwNmJlNjIzMjM2
NzUwMzMwHhcNMjYwMzAxMjIwMTE5WhcNMjYwMzAyMjIwMTE5WjAzMTEwLwYDVQQD
Eyg3YWEzYmMxOWYwOGJhYzAyZTM0YzZiOWZlZjA5MDBjNzAzOTE4YzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqudWfm2fDMkz8trd2VVbsbTZ2oH
1rO2kssLb4CLjKd/kEd2bg68R3jCXfpFO6W+6pS6SZTbvo31Yl1mH+ZEqgC9ojL0
XzMIjH/0uAn+E4k1kdp9ScdaVHFqtyxJ5NFq7bvguR4ZkAp1/HS5LOlM+nWVCf0j
n22aLr8EkgngiRGfSuTFIEqOHqFcWDSx0NIiUjyks27+Wi0JCLqG3T0vr1+ozYIo
cx/4XRaXqDPgRJj9YkjXxdyRK6+hUH5EAJicC43fcPKqy08g/hxTwrr6eemCFm5h
KO0y/pyQUquaw+RJmlTA0gjKbzSRlr1K2lJGHjBJpg3SqEOKhtbd5FJr8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqjvBnwi6wC40xrn+8JAMcDkYwVMB8GA1UdIwQY
MBaAFFFXyH0RHIBQ/VyawrBr5iMjZ1AzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVZmSWZSRWNnRkQ5WEpyQ3NHdm1JeU5uVURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80ZTdiNWMtMjkwNi00NzhhLThlZjAt
ZDI5NzAxNDg3NTM2LzEvVVZmSWZSRWNnRkQ5WEpyQ3NHdm1JeU5uVURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy80ZTdiNWMtMjkwNi00NzhhLThlZjAtZDI5NzAxNDg3NTM2
LzEvVVZmSWZSRWNnRkQ5WEpyQ3NHdm1JeU5uVURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkiV4x2yC
Pf0xZFPiwCyQUrnC2yxZOj0g+0WoTaGH5CgnMD+cAPUjh81oiwZqpP4zycXgJeQi
9IAQTr2ObRnLwck2QW7OYZ3IzPuQ+JpOeAUyGdihPlypebzox3LsBKKKNEnB1jXx
djAeVvjVtv1V8P1SI6MUsyll4RERhvpaQkfugE9z23xaGIQYCwUiUvIT7fwhEnFN
aLyzr5n6vMcl8Ezm+qV0TMWaz1f4L5EuDUFqHIVZTdytRpzgURXf0rpE/4VlPka1
RD2UV6ZpCgxJOwOKGV9CoM8osHRUYRz3HxLA9dOTVmy9pD/m8Om6m9VFzHLuno1C
wnCWbgCbXq/sIA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:14 2026 by rpki-client