Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
File: UquWU4x2TSMgXTMr4Te94EYvG4w.mft (raw, json)
Hash identifier: pR7kZhml1bXeozno6rR8Zw2l5s8CLcESd1zlehMbio8=
Subject key identifier: A6:C0:33:1F:93:6F:74:52:C0:D2:47:3A:50:C0:2E:BB:91:CD:7E:09
Authority key identifier: 52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
Certificate issuer: /CN=52ab96538c764d23205d332be137bde0462f1b8c
Certificate serial: 019CACB538FA785C58894E4354FC98C78879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
Manifest number: 168D
Signing time: Mon 02 Mar 2026 04:01:23 +0000
Manifest this update: Mon 02 Mar 2026 04:01:23 +0000
Manifest next update: Tue 03 Mar 2026 04:01:23 +0000
Files and hashes: 1: 02UbpjggiD2hCuBROuOMzSrBNes.roa (hash: oD92ZLodntYyRevIXaKbN61NlRaYP5OLaBNueXJo8rI=)
2: UquWU4x2TSMgXTMr4Te94EYvG4w.crl (hash: fg5JB6EXhXZ53nagEE7xuFr74nK0B8XPzaRcb3U5gTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:38:fa:78:5c:58:89:4e:43:54:fc:98:c7:88:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ab96538c764d23205d332be137bde0462f1b8c
Validity
Not Before: Mar 2 04:01:23 2026 GMT
Not After : Mar 3 04:01:23 2026 GMT
Subject: CN=a6c0331f936f7452c0d2473a50c02ebb91cd7e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5c:73:35:c3:f8:ea:b9:f4:2f:4e:20:cb:b8:
71:3e:2c:59:27:bc:06:a3:b4:23:ae:6e:91:80:f2:
ca:e4:ea:1b:58:2b:a4:1b:18:fc:c3:08:7c:65:85:
00:28:d8:06:a3:f7:ad:e1:9a:a8:67:ce:00:a2:bd:
8f:6d:6b:88:cd:03:03:04:f1:99:e5:3b:65:29:41:
a6:1a:ef:f9:c0:19:65:4e:29:0b:2b:ae:0d:ae:ed:
12:d3:21:86:1f:1f:db:10:d3:cd:ab:7d:32:02:9b:
6a:e2:0e:65:75:cf:a7:83:a4:ab:b4:72:7c:07:68:
d9:f9:98:be:4c:af:6e:b1:24:66:5d:64:8a:ca:a4:
37:00:27:e7:4b:f1:0b:88:c5:b5:bf:93:96:c2:01:
5c:33:7f:ff:74:e2:70:57:9e:a5:cc:52:83:e4:7d:
37:e4:06:0d:06:41:74:24:e1:31:ee:c7:e7:3c:6e:
af:f1:9a:a3:ea:a9:62:df:c9:79:62:4d:41:02:f8:
96:cf:99:85:ad:0a:21:b7:bc:9b:4a:4e:eb:16:ce:
d7:e1:f1:68:fe:e2:b6:76:56:69:73:8e:71:82:e5:
03:49:e1:6e:99:5e:6f:93:99:2a:6d:d7:3e:2e:d1:
22:56:e6:93:88:24:b1:83:c5:c5:be:a4:7f:f4:40:
18:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C0:33:1F:93:6F:74:52:C0:D2:47:3A:50:C0:2E:BB:91:CD:7E:09
X509v3 Authority Key Identifier:
keyid:52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5d:9b:a5:2e:c0:53:48:cf:c4:50:25:20:90:c7:e4:a8:bd:
e2:77:e2:b4:ef:98:fa:23:04:1a:55:16:d4:91:b4:07:96:c9:
72:92:4b:88:1d:cf:e9:d4:bc:02:13:0c:71:50:b1:cc:1f:1e:
1e:c5:d4:34:32:cc:6d:11:67:08:40:f3:69:89:35:19:77:ac:
4d:b5:9d:24:e2:ae:bf:bb:86:df:86:78:7b:f5:17:2c:1f:64:
4b:01:5a:e8:ca:f3:59:8e:64:be:80:6e:e3:37:5a:a0:7e:a7:
d2:f2:72:62:b6:7a:d5:43:79:12:c3:b9:1c:bf:70:9f:53:22:
38:3f:bf:5d:e4:35:32:0e:fa:9a:66:77:9f:78:e9:96:e0:58:
ea:14:56:9a:31:83:db:79:8e:b2:f2:f6:1f:1a:a9:fa:7e:1a:
c5:5f:71:60:a2:48:2b:97:06:8e:af:f3:23:e6:08:87:15:3e:
69:b9:16:97:16:a1:a9:3e:9d:30:4e:12:d6:e2:a0:b2:0d:82:
41:56:d4:b0:15:2b:16:e9:5f:c7:be:90:95:9b:48:75:af:82:
38:06:a2:0f:85:b0:2a:b2:f5:14:f7:b1:ba:03:0a:30:56:6c:
c4:49:11:b8:b7:dc:a3:44:f0:56:70:63:6e:5a:35:51:c2:5e:
f8:54:5b:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystTj6eFxYiU5DVPyYx4h5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYWI5NjUzOGM3NjRkMjMyMDVkMzMyYmUxMzdiZGUwNDYy
ZjFiOGMwHhcNMjYwMzAyMDQwMTIzWhcNMjYwMzAzMDQwMTIzWjAzMTEwLwYDVQQD
EyhhNmMwMzMxZjkzNmY3NDUyYzBkMjQ3M2E1MGMwMmViYjkxY2Q3ZTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FxzNcP46rn0L04gy7hxPixZJ7wG
o7Qjrm6RgPLK5OobWCukGxj8wwh8ZYUAKNgGo/et4ZqoZ84Aor2PbWuIzQMDBPGZ
5TtlKUGmGu/5wBllTikLK64Nru0S0yGGHx/bENPNq30yAptq4g5ldc+ng6SrtHJ8
B2jZ+Zi+TK9usSRmXWSKyqQ3ACfnS/ELiMW1v5OWwgFcM3//dOJwV56lzFKD5H03
5AYNBkF0JOEx7sfnPG6v8Zqj6qli38l5Yk1BAviWz5mFrQoht7ybSk7rFs7X4fFo
/uK2dlZpc45xguUDSeFumV5vk5kqbdc+LtEiVuaTiCSxg8XFvqR/9EAY1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbAMx+Tb3RSwNJHOlDALruRzX4JMB8GA1UdIwQY
MBaAFFKrllOMdk0jIF0zK+E3veBGLxuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8xOWI4MTItYjFhNC00OTJhLThiNDUt
MzhhZDQxNzlmZjI5LzEvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8xOWI4MTItYjFhNC00OTJhLThiNDUtMzhhZDQxNzlmZjI5
LzEvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk12bpS7A
U0jPxFAlIJDH5Ki94nfitO+Y+iMEGlUW1JG0B5bJcpJLiB3P6dS8AhMMcVCxzB8e
HsXUNDLMbRFnCEDzaYk1GXesTbWdJOKuv7uG34Z4e/UXLB9kSwFa6MrzWY5kvoBu
4zdaoH6n0vJyYrZ61UN5EsO5HL9wn1MiOD+/XeQ1Mg76mmZ3n3jpluBY6hRWmjGD
23mOsvL2Hxqp+n4axV9xYKJIK5cGjq/zI+YIhxU+abkWlxahqT6dME4S1uKgsg2C
QVbUsBUrFulfx76QlZtIda+COAaiD4WwKrL1FPexugMKMFZsxEkRuLfco0TwVnBj
blo1UcJe+FRbzA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:48 2026 by rpki-client