Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
File: UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft (raw, json)
Hash identifier: mTBX6JIhDtl0P9JNanoGxe3WpjpUWpNNybqsZYKG20c=
Subject key identifier: 11:62:D9:C4:EF:C1:88:6F:15:94:90:CC:24:87:0B:AD:99:40:E9:78
Authority key identifier: 52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
Certificate issuer: /CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Certificate serial: 019CAA217FA72D8E8872B77607B4FE7D3FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
Manifest number: 1595
Signing time: Sun 01 Mar 2026 16:00:47 +0000
Manifest this update: Sun 01 Mar 2026 16:00:47 +0000
Manifest next update: Mon 02 Mar 2026 16:00:47 +0000
Files and hashes: 1: FOg3Av7qAneoLCl9RE4sk42f7HM.roa (hash: s+X5qOD9V08ETG17KaGYFEzqR9Vxxzzwy/ShTxoaD6o=)
2: UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl (hash: h4xDwJFW/0+SDOJx+Ojex7R9Rb6AmZtVRVcKnBzTMjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:7f:a7:2d:8e:88:72:b7:76:07:b4:fe:7d:3f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Validity
Not Before: Mar 1 16:00:47 2026 GMT
Not After : Mar 2 16:00:47 2026 GMT
Subject: CN=1162d9c4efc1886f159490cc24870bad9940e978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f2:c4:36:96:63:ca:e8:3a:51:2d:12:1b:17:
ad:e9:8c:9a:5f:35:75:4e:bb:55:2b:a1:a6:50:1e:
26:ae:85:82:cb:c6:8e:dc:6f:fb:81:10:8b:b1:81:
f7:97:06:0e:8f:76:47:84:73:bd:58:ff:c5:76:2b:
92:8e:50:8f:47:a0:8f:f6:28:04:b8:ee:12:57:99:
25:ba:2c:15:f7:f6:fd:b2:e6:2b:06:75:d3:59:50:
3a:03:7a:4c:5a:97:92:49:40:9d:2b:d8:a7:78:dc:
5f:3e:bd:4b:08:80:3b:6a:7e:14:8e:82:72:1e:4a:
db:68:f3:7f:35:4a:36:d7:02:46:8f:26:ed:f7:bd:
4c:68:75:83:6d:8d:f7:18:62:f0:1c:a6:5e:71:67:
6b:1a:6a:b4:65:8b:f9:48:e2:7f:bf:88:fb:cf:17:
2b:96:4a:ca:fb:40:0a:eb:d4:70:82:f5:e1:93:7d:
83:b0:63:69:28:60:d5:e8:4e:32:60:83:d4:32:99:
61:b2:aa:a0:36:98:0c:5e:1e:cd:0d:3f:19:0d:39:
fd:96:12:9d:c8:d4:65:9d:2d:b9:48:64:b1:fd:52:
8b:5a:8e:31:9e:e5:fa:bc:a3:4a:90:6d:c7:b2:ce:
da:67:74:6b:36:26:b0:b8:25:43:b2:97:20:0b:f2:
55:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:62:D9:C4:EF:C1:88:6F:15:94:90:CC:24:87:0B:AD:99:40:E9:78
X509v3 Authority Key Identifier:
keyid:52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:46:d5:c9:f7:28:8c:ba:ef:ee:c9:d3:39:0d:b9:c4:02:79:
8a:6e:c9:03:32:cd:b4:22:1e:cd:7f:9c:fd:41:44:81:7f:29:
54:0f:c6:51:e3:d4:3f:5a:57:78:2b:bc:a0:24:0e:53:32:16:
16:fd:87:aa:1f:b3:c5:63:84:1a:c6:9c:1e:f0:1c:42:54:9b:
28:01:6c:e2:5a:78:52:9a:c8:f1:ac:69:c5:48:7a:56:97:f8:
3a:35:bb:37:fa:56:35:9f:f9:44:93:3d:f1:b9:10:10:26:a6:
8d:3c:47:d6:c1:1e:65:77:1a:af:3c:61:3f:1c:d2:d3:82:9f:
3f:d6:ed:a7:ae:ef:c4:de:81:4c:a1:3b:47:8a:fc:93:90:6b:
69:20:af:4b:d3:5b:3e:db:e1:cc:bf:4e:38:53:ba:f9:ed:f0:
27:4e:50:37:3a:81:ab:73:0a:5c:bc:50:66:1c:4f:06:e1:28:
65:4c:87:9f:43:4b:0e:3c:00:32:40:fc:8d:d2:60:54:15:00:
a1:89:17:3a:2c:10:02:3d:17:73:67:3b:cc:96:1e:4b:bf:69:
5c:2f:1b:d7:26:c0:41:a4:4c:84:2e:7e:9d:a6:f4:d0:ad:ba:
49:43:7c:76:4a:ec:ae:d2:87:5d:ec:e3:7b:38:51:a1:56:9c:
6b:23:85:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIX+nLY6Icrd2B7T+fT//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMjEwN2VkMDdiNWFjMGQ4MjY5ZDcyMjlkOWZkMmNhMGUz
MjY1OGIwHhcNMjYwMzAxMTYwMDQ3WhcNMjYwMzAyMTYwMDQ3WjAzMTEwLwYDVQQD
EygxMTYyZDljNGVmYzE4ODZmMTU5NDkwY2MyNDg3MGJhZDk5NDBlOTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PLENpZjyug6US0SGxet6YyaXzV1
TrtVK6GmUB4mroWCy8aO3G/7gRCLsYH3lwYOj3ZHhHO9WP/FdiuSjlCPR6CP9igE
uO4SV5kluiwV9/b9suYrBnXTWVA6A3pMWpeSSUCdK9ineNxfPr1LCIA7an4UjoJy
HkrbaPN/NUo21wJGjybt971MaHWDbY33GGLwHKZecWdrGmq0ZYv5SOJ/v4j7zxcr
lkrK+0AK69RwgvXhk32DsGNpKGDV6E4yYIPUMplhsqqgNpgMXh7NDT8ZDTn9lhKd
yNRlnS25SGSx/VKLWo4xnuX6vKNKkG3Hss7aZ3RrNiawuCVDspcgC/JVFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFi2cTvwYhvFZSQzCSHC62ZQOl4MB8GA1UdIwQY
MBaAFFIhB+0HtawNgmnXIp2f0soOMmWLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWlFSDdRZTFyQTJDYWRjaW5aX1N5ZzR5WllzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8wMmM1NjgtOTFlZS00ODVkLTk5YTIt
NTliY2UzMTljMWNiLzEvVWlFSDdRZTFyQTJDYWRjaW5aX1N5ZzR5WllzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8wMmM1NjgtOTFlZS00ODVkLTk5YTItNTliY2UzMTljMWNi
LzEvVWlFSDdRZTFyQTJDYWRjaW5aX1N5ZzR5WllzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0bVyfco
jLrv7snTOQ25xAJ5im7JAzLNtCIezX+c/UFEgX8pVA/GUePUP1pXeCu8oCQOUzIW
Fv2Hqh+zxWOEGsacHvAcQlSbKAFs4lp4UprI8axpxUh6Vpf4OjW7N/pWNZ/5RJM9
8bkQECamjTxH1sEeZXcarzxhPxzS04KfP9btp67vxN6BTKE7R4r8k5BraSCvS9Nb
PtvhzL9OOFO6+e3wJ05QNzqBq3MKXLxQZhxPBuEoZUyHn0NLDjwAMkD8jdJgVBUA
oYkXOiwQAj0Xc2c7zJYeS79pXC8b1ybAQaRMhC5+nab00K26SUN8dkrsrtKHXezj
ezhRoVacayOFlg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:29 2026 by rpki-client