Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
File: xUUK-nPwuHpCACjCsqSMzg_pKwo.mft (raw, json)
Hash identifier: 6bJ/oYzl15C7GaIod8qVzmLqbvQ9YMIMkN2stewvGBg=
Subject key identifier: ED:90:C1:AA:D6:94:C6:BC:07:03:49:99:DE:E9:2E:70:B0:28:B4:DC
Authority key identifier: C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
Certificate issuer: /CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Certificate serial: 019CAF10EB019B0E3916C06566FCA3BA1A4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 15:00:47 +0000
Manifest this update: Mon 02 Mar 2026 15:00:47 +0000
Manifest next update: Tue 03 Mar 2026 15:00:47 +0000
Files and hashes: 1: SU9PYRAM665DV-tMHEvPHcVEgsI.roa (hash: jeXeTXBC5h2fT2fI75NdT9H4uSbQgepZnNzAOw/Te8I=)
2: rXw-nLWuLOJA5VYfraArb8rhBxg.roa (hash: aX5SC+qo7NJeSmp0QxRgYljkusSGS9FEUNCHyn6SxQM=)
3: xUUK-nPwuHpCACjCsqSMzg_pKwo.crl (hash: OAvbZN3lKVU662WZ9bXwW6pSrLQuEX2/dqVgB4CRahE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:eb:01:9b:0e:39:16:c0:65:66:fc:a3:ba:1a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Validity
Not Before: Mar 2 15:00:47 2026 GMT
Not After : Mar 3 15:00:47 2026 GMT
Subject: CN=ed90c1aad694c6bc07034999dee92e70b028b4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:76:23:ba:79:69:52:ea:11:cd:0e:c2:ba:
45:97:3a:6f:32:f5:5c:19:42:5d:a0:2a:36:39:99:
f3:52:31:d6:7b:89:58:ec:66:65:c1:0a:76:cc:17:
ef:55:b8:f9:c5:a5:f4:80:72:7a:34:58:cc:3f:f5:
19:72:ae:1e:1c:16:3f:89:ef:86:e6:6a:00:42:ed:
ba:1e:c0:1b:b5:8d:15:5b:9b:6f:f4:40:f5:11:ea:
11:75:2d:4d:9d:6d:f7:74:47:b7:a0:23:07:04:d4:
c8:47:de:6e:db:64:a6:9a:30:c4:1a:6b:ce:f9:6d:
21:10:95:aa:f7:3f:f0:9b:48:29:80:dc:b8:48:7d:
75:3d:29:0f:a8:27:ad:89:f1:0a:ad:9f:19:e9:9e:
82:b3:51:03:b3:b9:a7:f0:3f:db:de:62:b0:53:89:
6d:ef:d5:83:e1:7d:e5:98:69:7a:2e:e7:ca:97:58:
c1:33:fc:24:ff:2c:85:07:4a:b8:5c:ca:e6:39:8d:
1f:ea:30:05:9c:c1:e7:e0:7c:f0:c7:81:cd:2f:e1:
01:e8:f9:24:c1:ff:e2:96:9a:0b:ff:fd:27:3d:42:
a2:88:c9:bf:76:31:9e:ee:2d:d1:db:93:79:02:53:
ef:a0:35:e1:57:dc:4b:ba:e6:be:15:49:4a:da:5d:
a4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:90:C1:AA:D6:94:C6:BC:07:03:49:99:DE:E9:2E:70:B0:28:B4:DC
X509v3 Authority Key Identifier:
keyid:C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:06:95:f9:2d:71:7e:b2:f3:28:50:71:ef:84:e0:95:3c:f4:
51:9b:a6:f3:36:61:2a:df:33:25:d7:3d:29:d4:b6:72:85:aa:
c0:00:c9:a2:e9:bc:b5:c6:84:9a:31:86:b7:b2:c5:31:45:7c:
88:cf:34:76:95:40:41:23:bf:03:ca:d0:4e:99:10:19:11:c5:
f2:b2:99:78:0f:5c:82:b2:d4:47:b9:e0:cc:04:5e:92:f8:c2:
2c:6d:1a:74:76:b3:f2:43:3f:f9:d7:4b:e1:4a:3a:0c:cd:22:
e3:72:40:4e:58:7c:20:09:10:eb:f1:3c:8c:a8:a1:6c:d4:e8:
17:c6:c5:e9:ea:03:72:7a:f6:1a:c6:eb:9c:41:7d:25:6e:f7:
b3:b1:6a:05:07:68:82:99:b1:ac:46:7f:a0:ac:82:0c:ca:b2:
c3:51:3e:c5:81:b9:b9:7a:33:6e:a7:69:83:e8:78:89:b0:24:
ce:2c:e6:50:ed:e5:e1:1e:3a:09:37:e7:a2:02:54:64:d7:c1:
ee:10:46:5e:b3:2c:03:d8:f7:c5:07:51:1d:83:7e:10:21:62:
5a:4f:8b:c1:60:57:16:a8:7a:cd:14:31:b4:5f:5b:27:e2:6b:
17:8a:4d:7b:6e:85:11:cc:e1:19:49:25:9b:24:1b:7e:96:bf:
79:66:e7:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvEOsBmw45FsBlZvyjuhpMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NDUwYWZhNzNmMGI4N2E0MjAwMjhjMmIyYTQ4Y2NlMGZl
OTJiMGEwHhcNMjYwMzAyMTUwMDQ3WhcNMjYwMzAzMTUwMDQ3WjAzMTEwLwYDVQQD
EyhlZDkwYzFhYWQ2OTRjNmJjMDcwMzQ5OTlkZWU5MmU3MGIwMjhiNGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRt2I7p5aVLqEc0OwrpFlzpvMvVc
GUJdoCo2OZnzUjHWe4lY7GZlwQp2zBfvVbj5xaX0gHJ6NFjMP/UZcq4eHBY/ie+G
5moAQu26HsAbtY0VW5tv9ED1EeoRdS1NnW33dEe3oCMHBNTIR95u22SmmjDEGmvO
+W0hEJWq9z/wm0gpgNy4SH11PSkPqCetifEKrZ8Z6Z6Cs1EDs7mn8D/b3mKwU4lt
79WD4X3lmGl6LufKl1jBM/wk/yyFB0q4XMrmOY0f6jAFnMHn4Hzwx4HNL+EB6Pkk
wf/ilpoL//0nPUKiiMm/djGe7i3R25N5AlPvoDXhV9xLuua+FUlK2l2kTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2QwarWlMa8BwNJmd7pLnCwKLTcMB8GA1UdIwQY
MBaAFMVFCvpz8Lh6QgAowrKkjM4P6SsKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFVVSy1uUHd1SHBDQUNqQ3NxU016Z19wS3dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hMmE2YWQtYjE1Zi00NzM0LWI1OWUt
NjY0YTk5MjZmMzMzLzEveFVVSy1uUHd1SHBDQUNqQ3NxU016Z19wS3dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9hMmE2YWQtYjE1Zi00NzM0LWI1OWUtNjY0YTk5MjZmMzMz
LzEveFVVSy1uUHd1SHBDQUNqQ3NxU016Z19wS3dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgaV+S1x
frLzKFBx74TglTz0UZum8zZhKt8zJdc9KdS2coWqwADJoum8tcaEmjGGt7LFMUV8
iM80dpVAQSO/A8rQTpkQGRHF8rKZeA9cgrLUR7ngzARekvjCLG0adHaz8kM/+ddL
4Uo6DM0i43JATlh8IAkQ6/E8jKihbNToF8bF6eoDcnr2GsbrnEF9JW73s7FqBQdo
gpmxrEZ/oKyCDMqyw1E+xYG5uXozbqdpg+h4ibAkzizmUO3l4R46CTfnogJUZNfB
7hBGXrMsA9j3xQdRHYN+ECFiWk+LwWBXFqh6zRQxtF9bJ+JrF4pNe26FEczhGUkl
myQbfpa/eWbnyA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:30:13 2026 by rpki-client