Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft
File: UC_eWr0nGEuqmtq3za-8w6VEGus.mft (raw, json)
Hash identifier: fR7/z4qzY5aAHvgAQOBXA5W8ont/kKLmVpkvVgGgT9A=
Subject key identifier: A3:72:EC:25:B3:84:7C:FA:E3:AD:E9:69:C8:73:51:F2:D9:FE:48:10
Authority key identifier: 50:2F:DE:5A:BD:27:18:4B:AA:9A:DA:B7:CD:AF:BC:C3:A5:44:1A:EB
Certificate issuer: /CN=502fde5abd27184baa9adab7cdafbcc3a5441aeb
Certificate serial: 019CACB4B7EB19D07F7124CCD8EF9910657D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UC_eWr0nGEuqmtq3za-8w6VEGus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft
Manifest number: 157F
Signing time: Mon 02 Mar 2026 04:00:50 +0000
Manifest this update: Mon 02 Mar 2026 04:00:50 +0000
Manifest next update: Tue 03 Mar 2026 04:00:50 +0000
Files and hashes: 1: UC_eWr0nGEuqmtq3za-8w6VEGus.crl (hash: lBnRDUzhX6U2VKNeVzk8A192x4xszG9d/JEUXIF2JdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft
rsync://rpki.ripe.net/repository/DEFAULT/UC_eWr0nGEuqmtq3za-8w6VEGus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:b7:eb:19:d0:7f:71:24:cc:d8:ef:99:10:65:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=502fde5abd27184baa9adab7cdafbcc3a5441aeb
Validity
Not Before: Mar 2 04:00:50 2026 GMT
Not After : Mar 3 04:00:50 2026 GMT
Subject: CN=a372ec25b3847cfae3ade969c87351f2d9fe4810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:53:18:28:3a:fb:21:d1:0a:7a:35:28:b9:51:
c4:24:b6:a6:f0:f8:d5:ca:4c:4b:2e:a9:82:cf:c2:
4b:85:10:72:24:eb:22:20:10:78:a9:5a:c7:97:b5:
cb:89:dd:31:24:f9:0f:ca:bf:a3:6c:3d:30:e1:5f:
cd:d8:aa:99:37:0e:b5:a1:1d:a2:1b:78:4d:bc:ee:
3e:a1:7b:9d:72:99:e3:b3:cc:03:9e:b5:79:75:2e:
12:fd:82:f0:fc:c2:1d:b4:2a:f7:b1:0e:35:ad:4c:
23:52:c2:6f:57:c7:82:74:67:c8:16:38:59:22:85:
82:00:a5:22:71:01:22:55:38:1c:9d:ee:0f:88:6c:
ed:f9:8f:c9:93:6a:3b:b3:15:95:a6:fb:3d:af:2b:
77:63:ae:e6:66:f4:cf:51:e4:61:81:d0:4c:1e:80:
f2:f2:c4:fb:83:8b:d6:cb:9c:a0:6d:53:29:ef:4e:
83:4f:bb:19:c4:32:46:68:c6:a4:71:dc:5a:0c:91:
1c:af:1d:b8:49:83:25:35:eb:b7:77:94:66:f9:b6:
c5:26:18:1e:59:82:f2:1b:09:aa:bb:19:7d:3b:5a:
4d:71:b9:a7:29:db:a7:35:3c:55:e6:d4:54:bc:78:
d6:8f:06:f8:5a:76:58:69:c7:76:50:68:0d:21:62:
33:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:72:EC:25:B3:84:7C:FA:E3:AD:E9:69:C8:73:51:F2:D9:FE:48:10
X509v3 Authority Key Identifier:
keyid:50:2F:DE:5A:BD:27:18:4B:AA:9A:DA:B7:CD:AF:BC:C3:A5:44:1A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UC_eWr0nGEuqmtq3za-8w6VEGus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a1:66:dc:2b:58:04:d0:24:bd:a7:f0:de:1c:49:27:26:11:
7d:94:ee:87:b1:64:38:6e:bc:ba:7c:17:75:63:59:3f:8b:31:
5a:d3:0f:5d:02:1d:56:4c:3c:d2:96:ce:a3:26:de:88:a5:67:
da:dd:28:84:a8:91:6a:bb:85:91:ba:fc:52:4e:fa:a4:2e:ff:
11:75:ea:27:cd:20:13:5d:e7:a8:c0:ea:09:02:ee:6c:8a:82:
66:61:ee:e2:66:38:e0:59:04:df:7b:7a:08:d8:3a:6e:78:dd:
86:9b:ae:d6:da:62:6e:89:45:8d:bc:4d:11:9e:e0:03:87:9f:
b4:cf:76:62:fc:ca:f0:c7:76:e9:cc:37:60:d8:6b:a0:ff:0e:
be:8e:62:87:00:29:19:73:f9:fe:ed:b1:19:19:2c:e4:e0:cd:
f3:2f:35:60:2d:2e:7b:dc:2b:0a:79:b5:7c:be:e0:cc:5d:0d:
3f:55:d0:3e:d8:0b:97:76:25:ca:5a:14:43:bf:75:ed:cd:d8:
fe:79:cb:f3:1a:12:26:9b:ce:9b:6b:39:5a:60:95:b6:77:04:
c1:8c:7a:a6:35:ba:aa:48:52:4c:f6:9c:f4:e7:f1:b7:1b:b2:
e7:bf:b8:50:bb:12:a4:5e:b1:e3:f4:74:df:05:ab:2a:7d:24:
9c:ca:9a:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystLfrGdB/cSTM2O+ZEGV9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMmZkZTVhYmQyNzE4NGJhYTlhZGFiN2NkYWZiY2MzYTU0
NDFhZWIwHhcNMjYwMzAyMDQwMDUwWhcNMjYwMzAzMDQwMDUwWjAzMTEwLwYDVQQD
EyhhMzcyZWMyNWIzODQ3Y2ZhZTNhZGU5NjljODczNTFmMmQ5ZmU0ODEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFMYKDr7IdEKejUouVHEJLam8PjV
ykxLLqmCz8JLhRByJOsiIBB4qVrHl7XLid0xJPkPyr+jbD0w4V/N2KqZNw61oR2i
G3hNvO4+oXudcpnjs8wDnrV5dS4S/YLw/MIdtCr3sQ41rUwjUsJvV8eCdGfIFjhZ
IoWCAKUicQEiVTgcne4PiGzt+Y/Jk2o7sxWVpvs9ryt3Y67mZvTPUeRhgdBMHoDy
8sT7g4vWy5ygbVMp706DT7sZxDJGaMakcdxaDJEcrx24SYMlNeu3d5Rm+bbFJhge
WYLyGwmquxl9O1pNcbmnKdunNTxV5tRUvHjWjwb4WnZYacd2UGgNIWIzqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNy7CWzhHz6463pachzUfLZ/kgQMB8GA1UdIwQY
MBaAFFAv3lq9JxhLqprat82vvMOlRBrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUNfZVdyMG5HRXVxbXRxM3phLTh3NlZFR3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84MTUyYWUtNTFiZC00MTA2LWJmNTkt
NzEzZmQ4ZTkxZmE5LzEvVUNfZVdyMG5HRXVxbXRxM3phLTh3NlZFR3VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS84MTUyYWUtNTFiZC00MTA2LWJmNTktNzEzZmQ4ZTkxZmE5
LzEvVUNfZVdyMG5HRXVxbXRxM3phLTh3NlZFR3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqFm3CtY
BNAkvafw3hxJJyYRfZTuh7FkOG68unwXdWNZP4sxWtMPXQIdVkw80pbOoybeiKVn
2t0ohKiRaruFkbr8Uk76pC7/EXXqJ80gE13nqMDqCQLubIqCZmHu4mY44FkE33t6
CNg6bnjdhpuu1tpibolFjbxNEZ7gA4eftM92YvzK8Md26cw3YNhroP8Ovo5ihwAp
GXP5/u2xGRks5ODN8y81YC0ue9wrCnm1fL7gzF0NP1XQPtgLl3YlyloUQ7917c3Y
/nnL8xoSJpvOm2s5WmCVtncEwYx6pjW6qkhSTPac9Ofxtxuy57+4ULsSpF6x4/R0
3wWrKn0knMqagg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:39:05 2026 by rpki-client