Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/UoVvOOBRP5_qsFeMd3170GOidKo.mft
File: UoVvOOBRP5_qsFeMd3170GOidKo.mft (raw, json)
Hash identifier: UzSEeKSUKEdB8B9iliLoaSwUN76bA13K2RhEMc3nJUI=
Subject key identifier: 7C:6A:62:E1:17:41:46:F1:0F:B5:96:E2:14:A7:BE:21:79:3B:F6:28
Authority key identifier: 52:85:6F:38:E0:51:3F:9F:EA:B0:57:8C:77:7D:7B:D0:63:A2:74:AA
Certificate issuer: /CN=52856f38e0513f9feab0578c777d7bd063a274aa
Certificate serial: 019CA7FC3DA2D3AA52FFB5D0AF9AF7563672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoVvOOBRP5_qsFeMd3170GOidKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/UoVvOOBRP5_qsFeMd3170GOidKo.mft
Manifest number: 57
Signing time: Sun 01 Mar 2026 06:00:51 +0000
Manifest this update: Sun 01 Mar 2026 06:00:51 +0000
Manifest next update: Mon 02 Mar 2026 06:00:51 +0000
Files and hashes: 1: QwFKvvopZqKlG9j4iBrrVAusGsg.roa (hash: 14iSYLqrVub3iW+aJenPS0umnDZDvuXqPyuEeqJM+DE=)
2: UoVvOOBRP5_qsFeMd3170GOidKo.crl (hash: p2PyTSZmhG25VTJ1dfSLcHq6a9V69rjMGiV0eM1fqsU=)
3: nn_JfFoGDqXnHnXClRYM8BVKfms.asa (hash: Go99gPjwQ2qP0Poq+GhGWvW0PoWn1a+y2XVSES6ZIPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/UoVvOOBRP5_qsFeMd3170GOidKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/UoVvOOBRP5_qsFeMd3170GOidKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoVvOOBRP5_qsFeMd3170GOidKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fc:3d:a2:d3:aa:52:ff:b5:d0:af:9a:f7:56:36:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52856f38e0513f9feab0578c777d7bd063a274aa
Validity
Not Before: Mar 1 06:00:51 2026 GMT
Not After : Mar 2 06:00:51 2026 GMT
Subject: CN=7c6a62e1174146f10fb596e214a7be21793bf628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b7:e5:cc:8f:3c:44:19:3b:e7:58:2b:f4:f2:
dc:89:b7:36:37:b0:d8:71:b3:44:8c:3e:3f:2f:e3:
56:25:cb:d0:08:14:cb:0b:e7:bc:bc:3e:6f:b7:97:
d1:d8:ff:a6:86:56:85:1a:4a:e0:b4:a6:81:b8:6f:
5f:b7:d6:3b:44:9c:8a:5c:62:3e:a3:df:01:8c:a2:
cd:eb:9a:24:6e:f4:c6:5c:f3:e1:b7:d2:53:19:02:
d3:39:0a:ea:95:03:36:c0:1c:82:02:2f:6d:30:47:
e5:e3:1b:81:cc:90:c8:19:40:60:9f:f3:75:c6:f0:
fa:44:8e:64:b4:3e:e3:1f:35:4b:34:fa:fa:0d:0e:
50:d2:a4:80:7f:ab:91:27:0f:b6:79:9a:d9:85:3a:
3c:a4:1b:35:d6:04:9d:39:3b:96:4f:0c:5e:c3:40:
a3:cb:7b:29:53:d5:15:bf:70:ea:5f:5d:69:9e:44:
d8:56:ab:05:ff:41:eb:f9:c0:1c:c2:8d:f5:b0:9d:
ad:90:8a:fa:b5:4f:0b:03:99:77:5c:40:70:f4:c9:
38:a1:95:c3:b2:e2:43:c6:74:68:5b:63:1e:f9:bb:
2b:64:8d:74:10:09:99:69:20:fa:1d:69:37:47:8f:
1f:98:a5:0e:09:25:77:52:7e:e9:7c:e7:44:e3:c6:
8c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6A:62:E1:17:41:46:F1:0F:B5:96:E2:14:A7:BE:21:79:3B:F6:28
X509v3 Authority Key Identifier:
keyid:52:85:6F:38:E0:51:3F:9F:EA:B0:57:8C:77:7D:7B:D0:63:A2:74:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoVvOOBRP5_qsFeMd3170GOidKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/UoVvOOBRP5_qsFeMd3170GOidKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/UoVvOOBRP5_qsFeMd3170GOidKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2a:70:58:81:3d:b4:8b:72:0e:a9:27:87:e2:4d:63:c6:e8:
66:aa:cc:91:7e:7e:4a:63:59:47:73:46:20:bc:c8:f5:cf:c8:
bf:2f:78:eb:e3:7f:d8:aa:72:79:e4:15:28:ff:76:37:26:9e:
53:4d:76:f8:7c:df:2d:1d:80:5b:8f:a9:94:b4:ae:6a:36:94:
2a:0d:54:4b:1c:47:ee:f9:b8:bb:99:12:f4:db:be:ca:db:e7:
a5:74:f9:8e:a5:ae:c0:cb:8b:4f:f2:46:89:a2:a8:8a:eb:6c:
27:dc:52:60:89:49:61:ae:9f:28:3d:cd:d7:3f:93:7d:d4:85:
71:25:80:34:89:ff:60:c3:45:72:81:c7:22:53:6d:31:54:db:
92:8c:8d:26:86:94:ef:97:76:83:b8:ab:7b:83:42:ea:99:12:
b1:0e:57:1f:f0:33:2d:1e:75:62:29:80:9b:b7:b7:ee:d2:d3:
c6:57:62:81:06:f8:77:7c:e5:7f:ff:20:f8:18:e4:f0:af:0c:
85:9f:b0:fe:4d:ff:54:e0:ad:e0:7b:5a:57:3a:bd:a2:28:53:
95:90:a0:91:9d:44:8b:38:95:93:a5:d4:97:6a:2f:ec:ee:9d:
ba:8c:d4:fa:2b:be:9c:16:17:b6:fa:50:88:a8:bb:44:41:6e:
10:f0:78:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyn/D2i06pS/7XQr5r3VjZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyODU2ZjM4ZTA1MTNmOWZlYWIwNTc4Yzc3N2Q3YmQwNjNh
Mjc0YWEwHhcNMjYwMzAxMDYwMDUxWhcNMjYwMzAyMDYwMDUxWjAzMTEwLwYDVQQD
Eyg3YzZhNjJlMTE3NDE0NmYxMGZiNTk2ZTIxNGE3YmUyMTc5M2JmNjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLflzI88RBk751gr9PLcibc2N7DY
cbNEjD4/L+NWJcvQCBTLC+e8vD5vt5fR2P+mhlaFGkrgtKaBuG9ft9Y7RJyKXGI+
o98BjKLN65okbvTGXPPht9JTGQLTOQrqlQM2wByCAi9tMEfl4xuBzJDIGUBgn/N1
xvD6RI5ktD7jHzVLNPr6DQ5Q0qSAf6uRJw+2eZrZhTo8pBs11gSdOTuWTwxew0Cj
y3spU9UVv3DqX11pnkTYVqsF/0Hr+cAcwo31sJ2tkIr6tU8LA5l3XEBw9Mk4oZXD
suJDxnRoW2Me+bsrZI10EAmZaSD6HWk3R48fmKUOCSV3Un7pfOdE48aMSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxqYuEXQUbxD7WW4hSnviF5O/YoMB8GA1UdIwQY
MBaAFFKFbzjgUT+f6rBXjHd9e9BjonSqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW9Wdk9PQlJQNV9xc0ZlTWQzMTcwR09pZEtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9jNDM5MjktMGMzMC00YjlmLWIxMTgt
OTE0YTE2ZTZhMzRlLzEvVW9Wdk9PQlJQNV9xc0ZlTWQzMTcwR09pZEtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9jNDM5MjktMGMzMC00YjlmLWIxMTgtOTE0YTE2ZTZhMzRl
LzEvVW9Wdk9PQlJQNV9xc0ZlTWQzMTcwR09pZEtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANypwWIE9
tItyDqknh+JNY8boZqrMkX5+SmNZR3NGILzI9c/Ivy946+N/2KpyeeQVKP92Nyae
U012+HzfLR2AW4+plLSuajaUKg1USxxH7vm4u5kS9Nu+ytvnpXT5jqWuwMuLT/JG
iaKoiutsJ9xSYIlJYa6fKD3N1z+TfdSFcSWANIn/YMNFcoHHIlNtMVTbkoyNJoaU
75d2g7ire4NC6pkSsQ5XH/AzLR51YimAm7e37tLTxldigQb4d3zlf/8g+Bjk8K8M
hZ+w/k3/VOCt4HtaVzq9oihTlZCgkZ1EiziVk6XUl2ov7O6duozU+iu+nBYXtvpQ
iKi7REFuEPB4hg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:23:48 2026 by rpki-client