Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
File: UjC2XWEW1LYNNv33tsbV5blUY54.mft (raw, json)
Hash identifier: D7n/ijatV30ovLvB97pqerD83MA7w+6XLQtWvMgUPUI=
Subject key identifier: 47:98:50:DA:B9:78:BF:2F:D4:2D:7A:00:FC:EB:9B:13:21:C9:B7:15
Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Certificate serial: 019EC148953A76FBD47600471F57DC1FC8F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
Manifest number: 195E
Signing time: Sat 13 Jun 2026 14:00:19 +0000
Manifest this update: Sat 13 Jun 2026 14:00:19 +0000
Manifest next update: Sun 14 Jun 2026 14:00:19 +0000
Files and hashes: 1: UjC2XWEW1LYNNv33tsbV5blUY54.crl (hash: aqtg6IpG8kgbrmxtjFhymUGVj7yBTh5aQcyTHMqS3v8=)
2: YDTabDi8KIiVn2g5g0ARZ4FOj6Y.roa (hash: 4uSS/xcfK9YISuyI1M3a8VYQt60GXuC8eBgPt3hFnMw=)
3: sLh8Z3ykKeKmTd5LP1t35ARuEh0.roa (hash: g77XM78yPqe/jsFF9utIzh8pLf0nSfOh1N48HUcncso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:95:3a:76:fb:d4:76:00:47:1f:57:dc:1f:c8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Validity
Not Before: Jun 13 14:00:19 2026 GMT
Not After : Jun 14 14:00:19 2026 GMT
Subject: CN=479850dab978bf2fd42d7a00fceb9b1321c9b715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:50:6c:81:d3:7b:7a:7c:84:ad:a9:46:ee:
81:f4:3a:ee:38:4b:62:2b:7f:1a:25:e1:86:d0:8f:
9c:a8:c8:ea:2d:ce:31:b3:18:3a:83:3e:20:77:56:
54:fe:b8:74:18:5d:ef:ac:d2:ca:7d:90:26:12:bd:
42:e3:33:c7:7f:29:37:a2:9e:b3:a6:45:5e:80:b0:
b2:2b:42:c7:a8:7b:cf:50:da:52:3f:c6:37:4a:b1:
3c:e9:85:e3:fc:14:bb:c5:41:7b:1d:c2:40:d3:2f:
a0:6d:24:37:64:1d:25:1c:25:a9:09:38:40:9f:4b:
17:83:1f:a6:d5:27:91:f5:75:c3:d2:3d:2f:1a:ae:
96:cf:b0:b3:a6:15:d0:92:43:05:3e:15:0f:5c:b0:
88:96:e9:1c:48:d0:74:c5:32:dd:5b:9b:40:ab:cb:
0c:07:89:dd:95:0a:a1:2b:de:33:09:f6:4e:8f:4a:
ce:6b:5a:3e:22:24:62:1d:d1:b8:75:4c:ff:f9:47:
9a:be:b4:e6:65:26:08:cc:99:92:00:35:55:fa:00:
f9:8b:76:e6:61:62:0e:4e:35:3d:1d:0c:29:7f:38:
44:58:88:76:49:64:40:55:d5:40:15:db:82:99:d5:
bf:4b:95:d2:87:1c:ae:b4:1e:06:49:99:de:86:aa:
4d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:98:50:DA:B9:78:BF:2F:D4:2D:7A:00:FC:EB:9B:13:21:C9:B7:15
X509v3 Authority Key Identifier:
keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a0:18:a1:2b:74:13:ff:f3:e9:af:5f:77:f7:01:57:8a:37:
7e:76:ed:0c:41:47:36:42:02:fe:c3:1d:4f:52:93:61:0a:8b:
a8:a6:b8:0b:ca:ec:c7:4f:87:a5:4b:be:e1:af:a8:e5:cc:70:
07:b4:67:46:cb:d4:97:d1:d8:87:e4:90:c2:5e:4c:d7:79:57:
17:08:f1:a2:6e:a5:64:6f:7b:a9:f8:77:be:a5:78:74:e5:9a:
ae:ad:b3:a8:a0:7b:70:58:ea:f2:66:9a:a5:ad:a7:8d:7d:58:
f6:62:8a:ae:f3:77:9c:c2:6a:1e:6f:45:00:fe:ba:03:63:f6:
7d:7e:1f:1f:68:52:a4:ca:51:5f:48:d1:55:3b:2e:00:0a:99:
b6:2e:02:d4:76:ff:09:5b:1e:df:84:5a:ab:4f:cd:b2:df:4a:
2d:3c:9f:bb:6f:ec:ab:3e:ed:67:a3:1a:0a:c3:d1:87:cd:ee:
f0:cd:91:6d:2a:51:55:17:23:04:4e:48:d6:b3:a8:83:70:e5:
99:c5:df:43:60:81:e7:71:81:e9:f1:f0:d9:00:0b:0e:a3:61:
49:48:fc:8b:ea:9a:29:cf:d1:b3:42:12:8a:4a:85:3b:26:45:
42:79:c9:2b:f6:75:aa:46:6c:06:a5:32:b2:b5:28:77:6f:43:
ac:8e:5b:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSJU6dvvUdgBHH1fcH8jxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMzBiNjVkNjExNmQ0YjYwZDM2ZmRmN2I2YzZkNWU1Yjk1
NDYzOWUwHhcNMjYwNjEzMTQwMDE5WhcNMjYwNjE0MTQwMDE5WjAzMTEwLwYDVQQD
Eyg0Nzk4NTBkYWI5NzhiZjJmZDQyZDdhMDBmY2ViOWIxMzIxYzliNzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ9QbIHTe3p8hK2pRu6B9DruOEti
K38aJeGG0I+cqMjqLc4xsxg6gz4gd1ZU/rh0GF3vrNLKfZAmEr1C4zPHfyk3op6z
pkVegLCyK0LHqHvPUNpSP8Y3SrE86YXj/BS7xUF7HcJA0y+gbSQ3ZB0lHCWpCThA
n0sXgx+m1SeR9XXD0j0vGq6Wz7CzphXQkkMFPhUPXLCIlukcSNB0xTLdW5tAq8sM
B4ndlQqhK94zCfZOj0rOa1o+IiRiHdG4dUz/+UeavrTmZSYIzJmSADVV+gD5i3bm
YWIOTjU9HQwpfzhEWIh2SWRAVdVAFduCmdW/S5XShxyutB4GSZnehqpNfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeYUNq5eL8v1C16APzrmxMhybcVMB8GA1UdIwQY
MBaAFFIwtl1hFtS2DTb997bG1eW5VGOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mYWRmZjYtNWNjMC00Njk0LTljNjIt
MTM1OGMyYjVkNTQxLzEvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9mYWRmZjYtNWNjMC00Njk0LTljNjItMTM1OGMyYjVkNTQx
LzEvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjqAYoSt0
E//z6a9fd/cBV4o3fnbtDEFHNkIC/sMdT1KTYQqLqKa4C8rsx0+HpUu+4a+o5cxw
B7RnRsvUl9HYh+SQwl5M13lXFwjxom6lZG97qfh3vqV4dOWarq2zqKB7cFjq8maa
pa2njX1Y9mKKrvN3nMJqHm9FAP66A2P2fX4fH2hSpMpRX0jRVTsuAAqZti4C1Hb/
CVse34Raq0/Nst9KLTyfu2/sqz7tZ6MaCsPRh83u8M2RbSpRVRcjBE5I1rOog3Dl
mcXfQ2CB53GB6fHw2QALDqNhSUj8i+qaKc/Rs0ISikqFOyZFQnnJK/Z1qkZsBqUy
srUod29DrI5bmQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:32:18 2026 by rpki-client