Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
File: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft (raw, json)
Hash identifier: oxlVlNtwnUFhuYQ4r3fKFQh7gbAHOj9PxbazsoyA2qI=
Subject key identifier: DE:39:EF:CC:3F:5F:BB:1D:76:A8:50:06:A3:54:95:BE:24:4A:78:EB
Authority key identifier: 52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
Certificate issuer: /CN=52302a45d0568486051a7ec466f03108c320b4c4
Certificate serial: 019D9962ED1160960AD263F22B070C89B3C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
Manifest number: 1772
Signing time: Fri 17 Apr 2026 03:01:30 +0000
Manifest this update: Fri 17 Apr 2026 03:01:30 +0000
Manifest next update: Sat 18 Apr 2026 03:01:30 +0000
Files and hashes: 1: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl (hash: H0UXGGBhiQNby3VMMdNG2bWJJoPgFKEXRnCkjHYECJU=)
2: tPGHq-xonUhjbc0GPXfgpubi7fg.roa (hash: enO+XevnxDfW0eM48CipaEGSZTkfKHUjYqxFWFDkOZ4=)
3: wRc3Z7cAWkuH8qIX0DCtlZppJxw.roa (hash: LxXQG3jteUBxRZiT3TEKB78O1uWlhGbpoLQr0jkRBdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:ed:11:60:96:0a:d2:63:f2:2b:07:0c:89:b3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52302a45d0568486051a7ec466f03108c320b4c4
Validity
Not Before: Apr 17 03:01:30 2026 GMT
Not After : Apr 18 03:01:30 2026 GMT
Subject: CN=de39efcc3f5fbb1d76a85006a35495be244a78eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:30:3b:eb:7a:d4:09:e1:3b:5a:b6:05:4e:77:
66:b7:0a:51:cb:c7:41:07:40:5c:4b:4b:9f:2b:a4:
51:a9:7c:6e:45:6e:d4:8b:e6:69:01:9c:0d:c5:bb:
3b:3c:17:c5:10:84:8a:f1:08:12:6f:fb:c2:71:51:
4d:83:94:67:c5:70:c2:d5:ea:b7:a8:09:69:33:95:
3e:62:1a:ac:68:c9:94:80:a6:06:35:15:0e:02:2d:
b8:54:ed:44:15:a0:29:05:04:f0:24:f8:1a:74:1d:
d3:3c:4c:08:81:ee:82:14:e3:70:78:ac:90:c5:73:
1c:ac:c9:b8:d7:3c:6d:c3:b2:0f:1b:1c:0a:54:a7:
fb:40:68:30:1c:de:67:6b:a0:0d:f9:7f:2e:1f:c2:
d9:c8:cb:56:23:78:e6:dc:3c:e5:0d:3b:96:61:34:
e4:fe:74:9a:53:89:9f:d0:c9:6b:3c:5a:50:19:92:
62:4a:43:24:7c:7d:66:74:2b:a5:1f:8b:e2:32:c8:
0c:4c:f1:b9:a3:14:a3:66:3e:43:65:a7:0c:86:7c:
2f:8f:2a:8e:3c:b5:a5:5d:af:1f:d8:55:9c:50:8a:
c8:e2:d0:d9:43:c1:a8:5c:88:ab:a0:35:b9:c8:12:
cc:49:d8:c2:a5:f8:3f:9e:b9:4f:68:9c:21:42:05:
3b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:39:EF:CC:3F:5F:BB:1D:76:A8:50:06:A3:54:95:BE:24:4A:78:EB
X509v3 Authority Key Identifier:
keyid:52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a8:18:bb:b9:c1:45:1d:f5:7a:07:1c:05:02:d9:3a:73:35:
f7:d6:4a:1b:bf:02:9d:9a:f5:5a:7a:a7:c8:43:e2:6c:da:84:
98:77:a5:9e:4a:4a:f4:b0:b9:6e:fc:00:9c:06:97:1b:93:05:
f4:44:f3:08:1a:69:e8:c2:a1:b8:36:9f:6b:a0:9a:d5:70:de:
c5:af:32:f6:11:8c:92:1a:94:25:40:bd:8b:19:5e:e1:18:e6:
dd:26:09:70:19:59:41:6c:5c:ce:0d:78:fc:83:6f:45:ef:01:
3d:20:e6:96:7f:5c:b9:f6:4f:89:52:e4:d6:96:42:d6:83:8d:
5d:5e:3e:44:2a:61:92:6f:15:6c:a3:9b:e0:7c:c9:17:c6:5b:
95:eb:3d:c2:f6:f4:fd:4e:97:b6:11:12:c2:6b:e5:e5:23:0d:
4d:45:9a:fe:a6:c3:2c:07:66:98:72:97:a1:c8:5e:41:92:51:
ad:73:1f:a4:b4:b5:38:e6:0a:d1:5d:7f:8e:6c:82:d3:be:94:
b2:ed:2e:fe:ae:df:5b:e4:eb:85:fd:39:93:db:5e:2e:81:16:
c9:e8:dc:19:98:f4:6f:03:d8:f0:53:28:a9:a2:0a:5e:80:fd:
14:5b:cc:5b:af:75:b2:26:94:39:e7:6a:b1:97:6c:f3:15:28:
e5:0e:49:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYu0RYJYK0mPyKwcMibPFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMzAyYTQ1ZDA1Njg0ODYwNTFhN2VjNDY2ZjAzMTA4YzMy
MGI0YzQwHhcNMjYwNDE3MDMwMTMwWhcNMjYwNDE4MDMwMTMwWjAzMTEwLwYDVQQD
EyhkZTM5ZWZjYzNmNWZiYjFkNzZhODUwMDZhMzU0OTViZTI0NGE3OGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjA763rUCeE7WrYFTndmtwpRy8dB
B0BcS0ufK6RRqXxuRW7Ui+ZpAZwNxbs7PBfFEISK8QgSb/vCcVFNg5RnxXDC1eq3
qAlpM5U+YhqsaMmUgKYGNRUOAi24VO1EFaApBQTwJPgadB3TPEwIge6CFONweKyQ
xXMcrMm41zxtw7IPGxwKVKf7QGgwHN5na6AN+X8uH8LZyMtWI3jm3DzlDTuWYTTk
/nSaU4mf0MlrPFpQGZJiSkMkfH1mdCulH4viMsgMTPG5oxSjZj5DZacMhnwvjyqO
PLWlXa8f2FWcUIrI4tDZQ8GoXIiroDW5yBLMSdjCpfg/nrlPaJwhQgU7tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4578w/X7sddqhQBqNUlb4kSnjrMB8GA1UdIwQY
MBaAFFIwKkXQVoSGBRp+xGbwMQjDILTEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWpBcVJkQldoSVlGR243RVp2QXhDTU1ndE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS83NWJhNzItZDdiMi00MjgzLTlmMGIt
ZTNlNWZhMzZiYjJmLzEvVWpBcVJkQldoSVlGR243RVp2QXhDTU1ndE1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS83NWJhNzItZDdiMi00MjgzLTlmMGItZTNlNWZhMzZiYjJm
LzEvVWpBcVJkQldoSVlGR243RVp2QXhDTU1ndE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKgYu7nB
RR31egccBQLZOnM199ZKG78CnZr1WnqnyEPibNqEmHelnkpK9LC5bvwAnAaXG5MF
9ETzCBpp6MKhuDafa6Ca1XDexa8y9hGMkhqUJUC9ixle4Rjm3SYJcBlZQWxczg14
/INvRe8BPSDmln9cufZPiVLk1pZC1oONXV4+RCphkm8VbKOb4HzJF8Zbles9wvb0
/U6XthESwmvl5SMNTUWa/qbDLAdmmHKXocheQZJRrXMfpLS1OOYK0V1/jmyC076U
su0u/q7fW+Trhf05k9teLoEWyejcGZj0bwPY8FMoqaIKXoD9FFvMW691siaUOedq
sZds8xUo5Q5JOw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:18:52 2026 by rpki-client