Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
File: Uez5urycprrpCFzikvscLMGNNE8.mft (raw, json)
Hash identifier: iTSc1CKgwEMTE6ZCpT62tTwZaBg2WsYhG5+6+8LTBO8=
Subject key identifier: AD:C8:EC:D3:C7:6A:C7:9C:96:CB:7F:03:DE:76:28:6E:7A:86:2A:D5
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 019CAC7E5BAB227E39D1DB376F5918F9A32F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
Manifest number: 1854
Signing time: Mon 02 Mar 2026 03:01:27 +0000
Manifest this update: Mon 02 Mar 2026 03:01:27 +0000
Manifest next update: Tue 03 Mar 2026 03:01:27 +0000
Files and hashes: 1: 1PnK9cELFJueJptrXJSb31qB-8g.roa (hash: ysJjVCrRDnCwue+Z8cjhJMdlMs4FN7B0hch20MyG2Ic=)
2: LqDWuGzHYEKyWD-0J71Yqy_PTe0.roa (hash: XOv2DO/Z4VpNTpwruJxK+1Cieqox7ARRO30Wur/mB0I=)
3: Uez5urycprrpCFzikvscLMGNNE8.crl (hash: PdV6Fa6Gk7RfMJ1vXl/RITj+dTRY0hprrai1X64aJpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:5b:ab:22:7e:39:d1:db:37:6f:59:18:f9:a3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Mar 2 03:01:27 2026 GMT
Not After : Mar 3 03:01:27 2026 GMT
Subject: CN=adc8ecd3c76ac79c96cb7f03de76286e7a862ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3b:fb:93:05:88:8d:5d:ad:70:7b:ea:8c:9d:
d0:25:84:4e:0c:99:20:52:1a:95:58:af:f9:c1:de:
bd:19:27:51:4e:7a:f4:8f:a3:f9:92:0c:52:b4:08:
80:85:d7:0b:89:c2:fc:66:62:1c:00:56:dc:56:46:
9d:3d:59:90:f8:b3:64:96:0e:69:6d:45:45:70:ea:
8c:85:16:1f:c3:47:52:fd:21:64:d0:c4:28:f8:af:
a8:02:a5:5c:5a:75:dd:ca:22:9e:84:30:58:3e:73:
fa:7e:2e:a2:a6:30:fd:3b:04:b0:0f:57:15:18:b3:
21:0b:b5:e0:b4:59:19:51:4d:94:14:b4:9d:cf:ef:
0e:48:c5:ea:9a:38:12:0e:89:27:47:c3:22:b6:44:
04:c6:c2:39:38:8e:49:fc:1d:82:4d:a5:ed:4b:40:
cc:4a:4f:41:ff:bb:8c:55:32:37:85:1e:8b:1e:a0:
fa:ad:50:b7:5b:9b:33:71:b5:e5:99:e4:36:d5:a1:
0c:83:fd:75:40:81:ed:57:76:9e:75:08:23:68:98:
de:6b:14:d1:f4:c6:5f:69:f9:71:8b:31:05:ca:6e:
a6:b6:eb:f4:9b:5c:9f:da:5a:53:0f:56:2c:d1:e8:
7b:0c:17:de:51:7b:b0:e1:cc:15:14:fd:f7:6c:7c:
7d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C8:EC:D3:C7:6A:C7:9C:96:CB:7F:03:DE:76:28:6E:7A:86:2A:D5
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:83:27:32:93:ae:c1:1d:5e:fc:23:75:33:c9:cd:e4:22:b7:
98:64:68:4c:62:5f:cf:ed:33:df:4b:8b:a4:0e:39:ab:a1:8d:
cf:57:73:30:b8:0d:2a:31:30:16:16:12:d5:e5:f9:a2:11:ae:
7d:23:d1:b3:80:8d:b6:a9:b8:28:3a:c0:3d:dd:ec:9b:11:d3:
72:33:d6:1f:e2:00:a7:c9:8b:54:b1:d6:ff:15:3e:89:b8:20:
04:22:77:38:ca:64:51:2f:da:2e:25:df:f9:fc:5b:e5:1d:aa:
20:53:a0:e1:61:c3:c0:d8:54:6d:74:f4:bb:62:e9:9e:1f:d4:
fb:d6:21:07:28:11:bf:9a:6e:51:77:4c:d6:e7:a6:42:a3:42:
c8:2b:10:7f:3a:d6:90:59:d5:88:11:29:ee:cf:ff:03:ae:22:
01:ea:f3:e6:a6:91:4b:b3:bd:9b:a5:d4:65:89:ed:20:87:f0:
23:58:32:6d:a9:d2:12:2b:c2:2d:86:a6:04:c6:5f:fb:e8:85:
d3:10:5d:4a:17:35:66:7f:c3:3c:e1:e3:e7:d6:e1:e6:f5:8d:
15:43:39:9d:5c:b5:b6:96:24:24:f8:88:be:7e:95:5c:db:7a:
89:db:cf:60:5e:dc:40:85:8d:35:78:54:9b:7e:4c:fd:4e:f5:
1e:e5:c2:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysflurIn450ds3b1kY+aMvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZWNmOWJhYmM5Y2E2YmFlOTA4NWNlMjkyZmIxYzJjYzE4
ZDM0NGYwHhcNMjYwMzAyMDMwMTI3WhcNMjYwMzAzMDMwMTI3WjAzMTEwLwYDVQQD
EyhhZGM4ZWNkM2M3NmFjNzljOTZjYjdmMDNkZTc2Mjg2ZTdhODYyYWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTv7kwWIjV2tcHvqjJ3QJYRODJkg
UhqVWK/5wd69GSdRTnr0j6P5kgxStAiAhdcLicL8ZmIcAFbcVkadPVmQ+LNklg5p
bUVFcOqMhRYfw0dS/SFk0MQo+K+oAqVcWnXdyiKehDBYPnP6fi6ipjD9OwSwD1cV
GLMhC7XgtFkZUU2UFLSdz+8OSMXqmjgSDoknR8MitkQExsI5OI5J/B2CTaXtS0DM
Sk9B/7uMVTI3hR6LHqD6rVC3W5szcbXlmeQ21aEMg/11QIHtV3aedQgjaJjeaxTR
9MZfaflxizEFym6mtuv0m1yf2lpTD1Ys0eh7DBfeUXuw4cwVFP33bHx9oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3I7NPHaseclst/A952KG56hirVMB8GA1UdIwQY
MBaAFFHs+bq8nKa66Qhc4pL7HCzBjTRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWV6NXVyeWNwcnJwQ0Z6aWt2c2NMTUdOTkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mYjA0YzgtNzA1Ny00NWI3LWEzNGMt
ZGNmYzZhOWUwZGM3LzEvVWV6NXVyeWNwcnJwQ0Z6aWt2c2NMTUdOTkU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9mYjA0YzgtNzA1Ny00NWI3LWEzNGMtZGNmYzZhOWUwZGM3
LzEvVWV6NXVyeWNwcnJwQ0Z6aWt2c2NMTUdOTkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkoMnMpOu
wR1e/CN1M8nN5CK3mGRoTGJfz+0z30uLpA45q6GNz1dzMLgNKjEwFhYS1eX5ohGu
fSPRs4CNtqm4KDrAPd3smxHTcjPWH+IAp8mLVLHW/xU+ibggBCJ3OMpkUS/aLiXf
+fxb5R2qIFOg4WHDwNhUbXT0u2Lpnh/U+9YhBygRv5puUXdM1uemQqNCyCsQfzrW
kFnViBEp7s//A64iAerz5qaRS7O9m6XUZYntIIfwI1gybanSEivCLYamBMZf++iF
0xBdShc1Zn/DPOHj59bh5vWNFUM5nVy1tpYkJPiIvn6VXNt6idvPYF7cQIWNNXhU
m35M/U71HuXCtg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:37:38 2026 by rpki-client