Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
File: UXM4bzZygYSqADsdljn-OcShKqk.mft (raw, json)
Hash identifier: zvfCx/sarkY/9r/Ge+6rwqAtnhb98MgaZ+/36wiP7Pw=
Subject key identifier: D6:4F:DF:24:61:BD:F4:CD:21:D7:3B:7F:26:CF:45:DE:A9:D3:11:ED
Authority key identifier: 51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9
Certificate issuer: /CN=5173386f36728184aa003b1d9639fe39c4a12aa9
Certificate serial: 019CB0914804749C2BBA05679C007F14F62C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
Manifest number: 17AD
Signing time: Mon 02 Mar 2026 22:00:36 +0000
Manifest this update: Mon 02 Mar 2026 22:00:36 +0000
Manifest next update: Tue 03 Mar 2026 22:00:36 +0000
Files and hashes: 1: 7AUQmk1i8qtjdruOjZMPpBTiL6c.roa (hash: q33FWL8mHM8VvfHdKdh+6eQHgq4qLKkzK579GRNQTE8=)
2: UXM4bzZygYSqADsdljn-OcShKqk.crl (hash: hog55EAjK2n6pObTud1tigObeNLB4NcUjak5yHOiu/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:91:48:04:74:9c:2b:ba:05:67:9c:00:7f:14:f6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5173386f36728184aa003b1d9639fe39c4a12aa9
Validity
Not Before: Mar 2 22:00:36 2026 GMT
Not After : Mar 3 22:00:36 2026 GMT
Subject: CN=d64fdf2461bdf4cd21d73b7f26cf45dea9d311ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ea:42:9b:c7:22:b8:f3:4c:cf:46:ea:f5:66:
fe:ef:ee:69:f8:ef:27:3e:3d:27:da:62:f4:4a:19:
f9:1b:1f:b5:ed:89:7f:3e:6c:1e:79:ce:18:c7:4d:
72:3e:c1:00:ec:25:f9:b2:7b:7f:9f:62:71:78:fa:
63:31:2f:48:ba:89:57:d1:cf:91:0d:72:b3:9e:c2:
06:09:f9:ac:75:70:db:97:5e:c7:4c:de:e4:97:68:
63:33:48:20:8c:c8:1e:bf:37:8e:29:eb:0e:f3:cf:
44:25:7b:81:e8:60:a9:f4:61:ce:74:67:1b:34:49:
0d:f0:fb:15:28:58:09:37:cb:36:7e:a4:58:01:6d:
2e:47:5a:e8:f2:c5:c3:b3:a7:1f:95:f9:11:2d:b9:
34:11:1a:6f:62:ce:63:d8:66:34:f4:b4:6e:d2:56:
5f:02:dc:d6:fe:52:68:49:2a:15:2d:de:45:b0:99:
72:d3:e5:c3:0c:00:a9:b8:87:4e:39:39:09:cc:4a:
7e:94:ac:59:64:74:e2:b1:3e:b1:c1:e7:1b:8f:91:
10:4c:85:62:03:28:1e:59:ee:47:76:7a:30:02:4c:
77:c9:ba:bb:9e:aa:46:d0:7c:b8:75:db:c5:70:e8:
94:5f:e8:98:65:11:f0:af:b6:3c:ec:5f:b4:88:26:
9a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4F:DF:24:61:BD:F4:CD:21:D7:3B:7F:26:CF:45:DE:A9:D3:11:ED
X509v3 Authority Key Identifier:
keyid:51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:52:5e:b2:51:9d:a5:da:ee:13:91:84:40:dd:9e:72:95:5b:
8b:2a:b2:f1:6b:ea:00:5b:61:81:78:c3:83:60:c8:09:46:62:
c7:ce:bb:47:82:04:e1:1d:2d:2b:2c:1f:0e:ef:34:88:3a:66:
58:6f:81:3e:ec:be:90:cb:ca:6e:a4:0a:a6:ba:bb:52:5d:50:
13:a7:55:c9:a8:6c:0c:0c:8d:dd:66:92:97:77:5c:6f:a8:36:
fc:23:50:3c:5f:3f:1d:15:96:2d:28:f6:bc:c3:77:f2:6f:74:
a4:77:7b:5c:1f:1e:c1:14:ed:4e:41:13:07:8b:69:4b:6c:94:
c6:70:35:ed:63:21:93:f0:48:06:31:d0:ea:d9:bf:1a:c0:2f:
b5:6f:d1:11:4b:9b:f2:2e:57:bd:71:6c:b1:07:98:44:df:93:
90:f4:6f:10:11:8d:9e:2e:f3:e8:94:84:58:c3:af:d5:62:46:
ff:8c:90:46:ec:fa:03:6f:29:11:45:98:93:f2:33:1f:7a:09:
33:e9:67:5e:53:d3:81:80:18:85:7a:fd:cd:20:49:7f:b3:7c:
1a:a5:0f:82:46:d6:28:ae:97:9f:cd:9c:f0:28:25:9e:c4:5b:
f1:9e:91:09:20:54:1a:fd:92:9e:1e:40:43:27:fe:c9:a8:43:
78:05:37:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZywkUgEdJwrugVnnAB/FPYsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNzMzODZmMzY3MjgxODRhYTAwM2IxZDk2MzlmZTM5YzRh
MTJhYTkwHhcNMjYwMzAyMjIwMDM2WhcNMjYwMzAzMjIwMDM2WjAzMTEwLwYDVQQD
EyhkNjRmZGYyNDYxYmRmNGNkMjFkNzNiN2YyNmNmNDVkZWE5ZDMxMWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoupCm8ciuPNMz0bq9Wb+7+5p+O8n
Pj0n2mL0Shn5Gx+17Yl/Pmweec4Yx01yPsEA7CX5snt/n2JxePpjMS9IuolX0c+R
DXKznsIGCfmsdXDbl17HTN7kl2hjM0ggjMgevzeOKesO889EJXuB6GCp9GHOdGcb
NEkN8PsVKFgJN8s2fqRYAW0uR1ro8sXDs6cflfkRLbk0ERpvYs5j2GY09LRu0lZf
AtzW/lJoSSoVLd5FsJly0+XDDACpuIdOOTkJzEp+lKxZZHTisT6xwecbj5EQTIVi
AygeWe5HdnowAkx3ybq7nqpG0Hy4ddvFcOiUX+iYZRHwr7Y87F+0iCaaPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZP3yRhvfTNIdc7fybPRd6p0xHtMB8GA1UdIwQY
MBaAFFFzOG82coGEqgA7HZY5/jnEoSqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVhNNGJ6WnlnWVNxQURzZGxqbi1PY1NoS3FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xN2MwMmItZDczNS00MWNhLTgyMjkt
MGNkZGY3OWVlOTBmLzEvVVhNNGJ6WnlnWVNxQURzZGxqbi1PY1NoS3FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xN2MwMmItZDczNS00MWNhLTgyMjktMGNkZGY3OWVlOTBm
LzEvVVhNNGJ6WnlnWVNxQURzZGxqbi1PY1NoS3FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMlJeslGd
pdruE5GEQN2ecpVbiyqy8WvqAFthgXjDg2DICUZix867R4IE4R0tKywfDu80iDpm
WG+BPuy+kMvKbqQKprq7Ul1QE6dVyahsDAyN3WaSl3dcb6g2/CNQPF8/HRWWLSj2
vMN38m90pHd7XB8ewRTtTkETB4tpS2yUxnA17WMhk/BIBjHQ6tm/GsAvtW/REUub
8i5XvXFssQeYRN+TkPRvEBGNni7z6JSEWMOv1WJG/4yQRuz6A28pEUWYk/IzH3oJ
M+lnXlPTgYAYhXr9zSBJf7N8GqUPgkbWKK6Xn82c8CglnsRb8Z6RCSBUGv2Snh5A
Qyf+yahDeAU3Sg==
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:11:48 2026 by rpki-client