Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
File: UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft (raw, json)
Hash identifier: pE/GQY6KN5ZdmW3Y3vXYnPEuhncebD2CWHZF+tTqs4w=
Subject key identifier: 45:34:64:1D:00:01:C2:28:F7:2C:E6:BA:F2:F1:60:9B:90:05:23:DC
Authority key identifier: 51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
Certificate issuer: /CN=51476318d71bf658f9a845f54ab27bd899892437
Certificate serial: 019CABA1F112AB52B54DCB6C1A27F290BE1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 23:00:42 +0000
Manifest this update: Sun 01 Mar 2026 23:00:42 +0000
Manifest next update: Mon 02 Mar 2026 23:00:42 +0000
Files and hashes: 1: UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl (hash: K5PcLZzueKRh+hhcK1J7pEODi5GI1k7ZI7N+u7Mv2Yw=)
2: j_DUMdAnZ9L25T_DLZEtDSOt7Jg.roa (hash: HhU7n7OhPQgUoe1hdC5otibZ4YzWb9TWF6sNGUEEoek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:f1:12:ab:52:b5:4d:cb:6c:1a:27:f2:90:be:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51476318d71bf658f9a845f54ab27bd899892437
Validity
Not Before: Mar 1 23:00:42 2026 GMT
Not After : Mar 2 23:00:42 2026 GMT
Subject: CN=4534641d0001c228f72ce6baf2f1609b900523dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c2:cb:c6:85:49:75:2a:ba:a9:47:99:76:0d:
12:66:41:ed:f9:41:00:ba:31:3e:8a:d1:17:6e:33:
a4:32:56:ac:9c:82:40:d5:a0:31:5c:d4:8d:f4:a7:
80:87:e9:6b:4f:73:0d:5f:d1:a6:09:e0:6a:02:6f:
49:c8:54:4d:5b:a8:d6:01:81:a4:d3:ad:d1:a5:f6:
51:67:37:6b:93:97:82:2f:07:d2:ba:97:2c:b9:9e:
09:ae:95:ae:5c:fc:b9:27:4c:37:ab:6e:e3:c7:81:
22:b0:d1:c5:a0:52:e4:12:1c:c0:5c:6f:d0:d1:47:
a2:fa:5d:81:d4:71:9d:43:58:4a:c5:0b:63:e4:de:
ea:f9:4a:80:e1:1c:64:9e:07:be:ef:0f:28:6c:23:
e7:8a:e0:9a:94:d7:f2:e8:1e:5d:71:f7:2d:bd:49:
c5:6e:fd:13:e0:2b:0f:b0:27:87:0d:08:90:0e:4e:
36:1e:37:cc:3f:12:4a:99:47:4b:8f:d2:b6:b9:de:
4d:16:f1:75:58:bc:3b:2c:9c:a5:9a:e3:05:62:a4:
d3:99:39:9a:82:b8:82:d9:2b:20:c6:fd:93:e8:f7:
22:95:b3:c6:66:bd:3f:20:e7:79:ab:a5:ce:ac:59:
7a:34:e5:6f:cd:dd:69:3d:cb:9c:1e:2a:bf:74:6a:
e9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:34:64:1D:00:01:C2:28:F7:2C:E6:BA:F2:F1:60:9B:90:05:23:DC
X509v3 Authority Key Identifier:
keyid:51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e2:af:41:32:e8:8f:a1:29:2c:72:99:f3:a4:78:83:73:f4:
0d:57:15:9d:22:b9:e0:db:d5:2f:83:82:b4:84:c3:03:5c:81:
60:32:9c:25:18:4a:93:05:c5:c5:60:3b:40:10:a3:0b:0c:e1:
6b:02:20:91:98:34:2b:65:fb:b7:6f:4e:c1:a7:92:ec:73:6c:
f8:89:c1:1f:09:c0:84:aa:84:33:58:df:46:42:87:20:9f:02:
a3:2a:61:c0:dd:8e:22:af:44:56:1f:7a:a6:b8:c9:7b:69:1b:
92:58:e2:0e:d2:a0:8b:bb:66:5d:7b:96:5b:d9:50:17:9d:f4:
ce:9b:7c:41:3f:7b:53:4f:2f:4e:e2:a4:84:6c:06:a7:4d:b3:
ff:46:8b:10:c2:2c:a1:0e:f2:dd:0c:98:06:94:bd:62:7a:84:
ad:5d:2e:c1:2d:45:ae:8b:80:1e:39:35:72:33:7f:b4:58:7f:
19:30:a0:eb:0d:b1:f9:84:a0:1b:75:46:7e:47:b2:13:7d:5b:
d3:be:0a:b4:b5:23:c9:a1:72:8f:5c:c5:d7:60:82:65:51:58:
6d:df:50:b0:00:94:0e:70:4d:34:c8:cb:a3:f6:ec:49:1a:f4:
78:6c:6d:07:d9:42:a3:69:87:c3:3f:0c:bd:ad:bd:dd:87:c3:
83:51:97:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrofESq1K1TctsGifykL4dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNDc2MzE4ZDcxYmY2NThmOWE4NDVmNTRhYjI3YmQ4OTk4
OTI0MzcwHhcNMjYwMzAxMjMwMDQyWhcNMjYwMzAyMjMwMDQyWjAzMTEwLwYDVQQD
Eyg0NTM0NjQxZDAwMDFjMjI4ZjcyY2U2YmFmMmYxNjA5YjkwMDUyM2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38LLxoVJdSq6qUeZdg0SZkHt+UEA
ujE+itEXbjOkMlasnIJA1aAxXNSN9KeAh+lrT3MNX9GmCeBqAm9JyFRNW6jWAYGk
063RpfZRZzdrk5eCLwfSupcsuZ4JrpWuXPy5J0w3q27jx4EisNHFoFLkEhzAXG/Q
0Uei+l2B1HGdQ1hKxQtj5N7q+UqA4Rxknge+7w8obCPniuCalNfy6B5dcfctvUnF
bv0T4CsPsCeHDQiQDk42HjfMPxJKmUdLj9K2ud5NFvF1WLw7LJylmuMFYqTTmTma
griC2Ssgxv2T6PcilbPGZr0/IOd5q6XOrFl6NOVvzd1pPcucHiq/dGrpkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEU0ZB0AAcIo9yzmuvLxYJuQBSPcMB8GA1UdIwQY
MBaAFFFHYxjXG/ZY+ahF9Uqye9iZiSQ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVVkakdOY2I5bGo1cUVYMVNySjcySm1KSkRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi82MjA3ZTgtZWViNS00MzM0LThkZmUt
NjM3OTljMDI2YTU3LzEvVVVkakdOY2I5bGo1cUVYMVNySjcySm1KSkRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi82MjA3ZTgtZWViNS00MzM0LThkZmUtNjM3OTljMDI2YTU3
LzEvVVVkakdOY2I5bGo1cUVYMVNySjcySm1KSkRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOKvQTLo
j6EpLHKZ86R4g3P0DVcVnSK54NvVL4OCtITDA1yBYDKcJRhKkwXFxWA7QBCjCwzh
awIgkZg0K2X7t29OwaeS7HNs+InBHwnAhKqEM1jfRkKHIJ8CoyphwN2OIq9EVh96
prjJe2kbkljiDtKgi7tmXXuWW9lQF530zpt8QT97U08vTuKkhGwGp02z/0aLEMIs
oQ7y3QyYBpS9YnqErV0uwS1FrouAHjk1cjN/tFh/GTCg6w2x+YSgG3VGfkeyE31b
074KtLUjyaFyj1zF12CCZVFYbd9QsACUDnBNNMjLo/bsSRr0eGxtB9lCo2mHwz8M
va293YfDg1GXBQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:41 2026 by rpki-client