Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
File: UJvGPmjJCTK0_CiZf8O_eN47N0M.mft (raw, json)
Hash identifier: uERZqoSffppyUAaqVK4LtqIVclaPv9vZAyEPERAkRr8=
Subject key identifier: A7:94:56:3D:F3:49:98:33:D3:BC:5D:93:95:7A:D0:E5:52:C6:2F:74
Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
Certificate issuer: /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Certificate serial: 01A12E0E1B61D47595B7E4DC869B69EB590C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
Manifest number: 13A3
Signing time: Mon 12 Oct 2026 03:00:38 +0000
Manifest this update: Mon 12 Oct 2026 03:00:38 +0000
Manifest next update: Tue 13 Oct 2026 03:00:38 +0000
Files and hashes: 1: 6TGUfIQg-VBwQ1TSjbACENP0Fuk.roa (hash: KbUe0U97E5HGIjpIMaXPTxhvroq3ZGOD2BiTeZCgmUA=)
2: UJvGPmjJCTK0_CiZf8O_eN47N0M.crl (hash: 9nZ/PKBAMwOAVOeBnzWEKSphjVcF6LOFMD57aziHWqE=)
3: vFIy0amMxxYp6t0XVtNNLn2R_I8.roa (hash: vax2PUgWucdwxjsswO26V1j+tAN7zRvvsr/R7FSg7S0=)
4: zr2faZR5YeSQwhfP1BestpJXC-c.roa (hash: l0wUse8So6p8HXiUpDrAoN5JVZGYHdfzX/5wlHsppLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:0e:1b:61:d4:75:95:b7:e4:dc:86:9b:69:eb:59:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Validity
Not Before: Oct 12 03:00:38 2026 GMT
Not After : Oct 13 03:00:38 2026 GMT
Subject: CN=a794563df3499833d3bc5d93957ad0e552c62f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:89:56:56:fe:f5:af:ef:77:46:2d:de:b1:3d:
12:36:00:9f:f2:17:a5:b6:93:de:9a:a9:1c:c3:52:
a7:11:43:f3:90:7d:8a:d1:81:50:b5:24:5e:e6:d8:
1d:7b:b9:f1:d0:cf:d5:b5:51:13:a1:31:ba:8a:33:
7e:bd:18:0d:1f:df:67:40:6f:b3:6b:79:94:3b:4b:
48:9f:2f:e9:5f:ee:ef:3f:1a:1e:fa:ac:71:f6:0b:
0c:9f:a0:66:d2:97:ed:ea:f4:6d:ff:d7:df:a7:05:
1b:62:80:b8:fc:3c:1e:af:67:f7:51:51:47:89:6b:
25:2e:db:a2:1a:e9:5a:c5:c7:c6:4d:24:0e:f2:95:
20:16:43:f4:b2:5e:36:a1:c6:14:6b:93:6b:bf:f0:
93:47:42:74:a8:65:b4:6d:57:d7:df:dd:77:f3:12:
da:a7:37:84:8b:bc:71:5f:0d:8a:6b:66:42:fe:1b:
0a:2c:d3:8d:ed:3e:a7:d5:4d:c3:c6:c3:ac:02:73:
b0:4b:8e:ef:79:78:0f:d6:2f:94:1a:5d:ef:9e:0b:
73:db:c7:96:68:fa:13:fe:db:47:4f:79:f3:a0:c4:
44:5a:2c:98:c6:62:40:c6:26:13:f8:dd:e8:9f:20:
15:8e:ad:6f:3e:b9:14:d8:9c:99:b3:ed:aa:7a:7f:
0b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:94:56:3D:F3:49:98:33:D3:BC:5D:93:95:7A:D0:E5:52:C6:2F:74
X509v3 Authority Key Identifier:
keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ad:0e:d4:db:65:0e:15:d9:a0:80:4c:15:ab:09:62:ce:61:
c6:43:1f:90:be:53:1c:c8:74:a8:1e:85:4b:31:f5:ef:16:6e:
d0:89:c8:59:62:19:f2:72:ea:fe:51:71:bc:1c:04:c8:19:e6:
f4:d4:8e:73:96:8d:d5:f0:e0:11:a2:77:cd:62:61:1b:9d:fb:
40:26:50:62:d5:2a:66:17:f2:c5:a9:7d:79:bb:06:3a:9b:11:
c8:4b:e8:bc:46:28:ca:c5:3c:83:12:21:9c:96:27:b5:2c:d4:
0b:85:e4:68:e7:85:8f:18:a8:fb:49:34:22:de:3d:cc:98:ae:
16:67:08:4c:ad:dc:21:eb:a9:b2:95:dc:fb:16:fc:27:16:e3:
ad:29:46:f2:9a:94:c5:1a:2b:d0:d5:0b:73:27:18:4f:fb:d0:
2e:74:9f:2b:47:d6:70:fc:93:5f:fb:ed:14:38:14:51:86:e9:
bc:33:13:3b:c0:e6:a2:bf:79:5c:93:a2:6d:d0:da:1d:b0:15:
1c:83:d6:62:a3:2b:0d:9d:75:0f:da:e2:89:5a:24:72:32:6c:
17:fb:41:6a:7b:2d:1f:da:bb:e2:03:b4:ff:3c:45:46:1a:06:
5f:22:d5:0f:ef:a5:5f:83:81:1f:3b:bb:a0:f6:dd:69:91:60:
74:d4:f0:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEuDhth1HWVt+Tchptp61kMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOWJjNjNlNjhjOTA5MzJiNGZjMjg5OTdmYzNiZjc4ZGUz
YjM3NDMwHhcNMjYxMDEyMDMwMDM4WhcNMjYxMDEzMDMwMDM4WjAzMTEwLwYDVQQD
EyhhNzk0NTYzZGYzNDk5ODMzZDNiYzVkOTM5NTdhZDBlNTUyYzYyZjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IlWVv71r+93Ri3esT0SNgCf8hel
tpPemqkcw1KnEUPzkH2K0YFQtSRe5tgde7nx0M/VtVEToTG6ijN+vRgNH99nQG+z
a3mUO0tIny/pX+7vPxoe+qxx9gsMn6Bm0pft6vRt/9ffpwUbYoC4/Dwer2f3UVFH
iWslLtuiGulaxcfGTSQO8pUgFkP0sl42ocYUa5Nrv/CTR0J0qGW0bVfX39138xLa
pzeEi7xxXw2Ka2ZC/hsKLNON7T6n1U3DxsOsAnOwS47veXgP1i+UGl3vngtz28eW
aPoT/ttHT3nzoMREWiyYxmJAxiYT+N3onyAVjq1vPrkU2JyZs+2qen8LOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeUVj3zSZgz07xdk5V60OVSxi90MB8GA1UdIwQY
MBaAFFCbxj5oyQkytPwomX/Dv3jeOzdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUp2R1BtakpDVEswX0NpWmY4T19lTjQ3TjBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zNGM1YjItYjZlMy00YjIzLWE2MDkt
MTZlZDNjZDBjNzJhLzEvVUp2R1BtakpDVEswX0NpWmY4T19lTjQ3TjBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8zNGM1YjItYjZlMy00YjIzLWE2MDktMTZlZDNjZDBjNzJh
LzEvVUp2R1BtakpDVEswX0NpWmY4T19lTjQ3TjBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdK0O1Ntl
DhXZoIBMFasJYs5hxkMfkL5THMh0qB6FSzH17xZu0InIWWIZ8nLq/lFxvBwEyBnm
9NSOc5aN1fDgEaJ3zWJhG537QCZQYtUqZhfyxal9ebsGOpsRyEvovEYoysU8gxIh
nJYntSzUC4XkaOeFjxio+0k0It49zJiuFmcITK3cIeupspXc+xb8JxbjrSlG8pqU
xRor0NULcycYT/vQLnSfK0fWcPyTX/vtFDgUUYbpvDMTO8Dmor95XJOibdDaHbAV
HIPWYqMrDZ11D9riiVokcjJsF/tBanstH9q74gO0/zxFRhoGXyLVD++lX4OBHzu7
oPbdaZFgdNTwew==
-----END CERTIFICATE-----
Generated at Mon Oct 12 09:04:34 2026 by rpki-client