Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
File: UquWU4x2TSMgXTMr4Te94EYvG4w.mft (raw, json)
Hash identifier: OKo6qwg1aO0t75pT2ge8dcme9++vdjheS8CATpls9NA=
Subject key identifier: AA:87:F0:85:62:68:E5:B4:F6:41:1D:42:C6:E0:CF:22:F4:45:38:0C
Authority key identifier: 52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
Certificate issuer: /CN=52ab96538c764d23205d332be137bde0462f1b8c
Certificate serial: 019D9A3EF093615332595295F8ED577B4C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
Manifest number: 1708
Signing time: Fri 17 Apr 2026 07:01:49 +0000
Manifest this update: Fri 17 Apr 2026 07:01:49 +0000
Manifest next update: Sat 18 Apr 2026 07:01:49 +0000
Files and hashes: 1: 02UbpjggiD2hCuBROuOMzSrBNes.roa (hash: oD92ZLodntYyRevIXaKbN61NlRaYP5OLaBNueXJo8rI=)
2: UquWU4x2TSMgXTMr4Te94EYvG4w.crl (hash: 50LItxqX0xWvRIrm/TuKk66RILSv+wepgAR09yq5OCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:f0:93:61:53:32:59:52:95:f8:ed:57:7b:4c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ab96538c764d23205d332be137bde0462f1b8c
Validity
Not Before: Apr 17 07:01:49 2026 GMT
Not After : Apr 18 07:01:49 2026 GMT
Subject: CN=aa87f0856268e5b4f6411d42c6e0cf22f445380c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:09:95:8a:c8:dd:7a:8c:14:0f:ca:f8:99:ac:
71:cb:84:fe:0d:f2:ae:fb:37:be:20:0d:69:21:f9:
0b:fe:70:46:97:e0:e2:cd:3e:03:84:c4:9e:3e:ca:
6c:b5:fb:b6:ff:94:37:a3:8c:4f:9b:ad:ca:95:bc:
87:cf:67:6a:d9:38:e1:f5:83:be:48:63:4d:c6:0d:
0f:a8:e6:01:1a:55:38:16:78:49:77:fd:93:53:65:
48:3a:97:a7:f3:32:c0:27:e5:51:e0:c0:22:e4:d1:
31:b9:b1:a3:6d:c2:e9:f0:bf:ba:f6:53:3e:81:ba:
8b:e5:f7:6c:99:43:ae:43:56:b2:58:f1:9f:b6:1b:
4e:28:1f:82:08:ad:c9:af:b1:3c:4d:a3:a5:c9:83:
53:80:05:d2:1d:58:d2:90:6e:28:e9:f1:e4:d4:16:
59:e4:5e:4d:4c:92:06:1a:91:b5:be:12:f3:8f:55:
ef:d2:c3:57:f1:53:24:db:e8:0a:3c:f9:4f:4a:00:
b0:d6:77:2c:ce:dd:7b:82:a6:4c:3c:a7:0f:07:c3:
0a:96:50:c6:31:3f:92:01:25:cb:98:53:3d:65:aa:
56:a2:51:d9:39:02:6d:f5:e8:1c:58:63:61:06:60:
87:f5:f7:a4:b3:14:fe:71:39:9e:a3:30:c4:36:a4:
db:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:87:F0:85:62:68:E5:B4:F6:41:1D:42:C6:E0:CF:22:F4:45:38:0C
X509v3 Authority Key Identifier:
keyid:52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:61:02:08:9a:e1:81:55:03:c5:f3:d7:97:2a:5b:17:d8:38:
f9:72:7b:9a:d8:a1:40:13:c3:67:6a:7d:b4:04:62:fc:f0:91:
58:a4:bf:94:47:8c:15:7c:67:e3:1c:16:7d:00:83:1c:ae:82:
32:4d:5f:75:20:de:e0:b9:13:f7:68:a6:ce:66:47:1c:c0:d6:
1d:b5:56:34:11:cc:b3:05:c3:ed:f2:e0:92:eb:b8:95:74:61:
46:df:9d:10:1f:e6:c5:2c:9c:d9:33:3b:a2:93:20:bf:86:33:
a9:2c:ed:33:52:96:3d:01:fc:84:3d:0f:f0:f3:3b:de:93:07:
c2:a9:c5:6d:24:9a:14:3e:16:5e:d3:3f:bf:d3:3d:4c:28:b2:
9a:bf:77:6c:ea:58:df:0e:b6:0b:31:14:b9:17:af:06:bf:7d:
1c:41:50:c7:b5:c4:cf:a4:8d:b7:69:df:a9:b3:67:43:50:7a:
5e:fd:ae:1a:ca:8a:ac:71:20:27:e6:85:1c:c2:cb:3e:d6:d1:
ba:ee:d7:45:cd:67:31:a5:81:47:64:5a:53:c3:89:1b:e6:d6:
40:a0:e4:6c:13:1a:24:77:8f:e7:c8:33:98:2a:59:76:3e:5a:
f5:a7:43:79:e5:a2:65:98:a0:8f:8d:0e:ee:d7:85:b6:d1:e0:
c7:9c:a5:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPvCTYVMyWVKV+O1Xe0wdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYWI5NjUzOGM3NjRkMjMyMDVkMzMyYmUxMzdiZGUwNDYy
ZjFiOGMwHhcNMjYwNDE3MDcwMTQ5WhcNMjYwNDE4MDcwMTQ5WjAzMTEwLwYDVQQD
EyhhYTg3ZjA4NTYyNjhlNWI0ZjY0MTFkNDJjNmUwY2YyMmY0NDUzODBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywmVisjdeowUD8r4maxxy4T+DfKu
+ze+IA1pIfkL/nBGl+DizT4DhMSePspstfu2/5Q3o4xPm63KlbyHz2dq2Tjh9YO+
SGNNxg0PqOYBGlU4FnhJd/2TU2VIOpen8zLAJ+VR4MAi5NExubGjbcLp8L+69lM+
gbqL5fdsmUOuQ1ayWPGfthtOKB+CCK3Jr7E8TaOlyYNTgAXSHVjSkG4o6fHk1BZZ
5F5NTJIGGpG1vhLzj1Xv0sNX8VMk2+gKPPlPSgCw1ncszt17gqZMPKcPB8MKllDG
MT+SASXLmFM9ZapWolHZOQJt9egcWGNhBmCH9feksxT+cTmeozDENqTb1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqH8IViaOW09kEdQsbgzyL0RTgMMB8GA1UdIwQY
MBaAFFKrllOMdk0jIF0zK+E3veBGLxuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8xOWI4MTItYjFhNC00OTJhLThiNDUt
MzhhZDQxNzlmZjI5LzEvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8xOWI4MTItYjFhNC00OTJhLThiNDUtMzhhZDQxNzlmZjI5
LzEvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2ECCJrh
gVUDxfPXlypbF9g4+XJ7mtihQBPDZ2p9tARi/PCRWKS/lEeMFXxn4xwWfQCDHK6C
Mk1fdSDe4LkT92imzmZHHMDWHbVWNBHMswXD7fLgkuu4lXRhRt+dEB/mxSyc2TM7
opMgv4YzqSztM1KWPQH8hD0P8PM73pMHwqnFbSSaFD4WXtM/v9M9TCiymr93bOpY
3w62CzEUuRevBr99HEFQx7XEz6SNt2nfqbNnQ1B6Xv2uGsqKrHEgJ+aFHMLLPtbR
uu7XRc1nMaWBR2RaU8OJG+bWQKDkbBMaJHeP58gzmCpZdj5a9adDeeWiZZigj40O
7teFttHgx5ylbA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:41:47 2026 by rpki-client