Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
File: UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft (raw, json)
Hash identifier: 8wQ6/znm+357Flur/xr7e6BNV/wFjO8FH3OGr99rZJM=
Subject key identifier: 7F:28:B6:34:83:F3:EA:7B:25:76:5D:77:16:F5:22:2E:2B:7D:1B:DD
Authority key identifier: 50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
Certificate issuer: /CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Certificate serial: 019CAE355C4D1756FF15BAD506CF4F4271E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
Manifest number: 0F4E
Signing time: Mon 02 Mar 2026 11:00:58 +0000
Manifest this update: Mon 02 Mar 2026 11:00:58 +0000
Manifest next update: Tue 03 Mar 2026 11:00:58 +0000
Files and hashes: 1: 5qnMhOIBTwB8o6XInGR4S35zi8o.roa (hash: y7FafzXY95fqgAjLfPP4p+mKq1OIvDb5CLfvYqhV8ro=)
2: UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl (hash: 1SMTf/27TL+je+qkMP4qyvweiqdHG/ambKFsfsu94SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:5c:4d:17:56:ff:15:ba:d5:06:cf:4f:42:71:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Validity
Not Before: Mar 2 11:00:58 2026 GMT
Not After : Mar 3 11:00:58 2026 GMT
Subject: CN=7f28b63483f3ea7b25765d7716f5222e2b7d1bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3e:e9:05:e3:16:f2:da:a3:3f:41:d7:f2:1b:
10:a7:16:e4:16:f4:f7:38:7d:65:49:ac:07:50:ca:
e4:66:6f:77:b8:bf:74:93:77:8e:40:8c:15:6b:7e:
ed:8c:25:70:98:ed:10:8e:ce:c7:36:ba:bd:00:73:
1f:83:e9:e9:68:cb:59:ce:f6:b8:ac:6b:5a:d9:a5:
4b:ce:91:50:82:00:91:70:b4:0f:e2:2e:d8:6a:05:
58:5c:7e:4a:2c:8d:77:74:26:d9:ce:ca:8d:88:3b:
49:d3:8e:46:6e:90:59:43:45:ce:9c:32:7a:59:12:
dc:4f:5b:35:50:c5:c6:b5:8e:ed:3d:75:46:cd:5c:
ee:a5:45:1c:b2:a0:7d:2e:2b:a0:0b:d4:73:98:59:
9c:69:a1:71:27:d0:bf:40:39:65:70:4b:89:16:6b:
44:2f:cf:25:a7:97:94:46:9d:0b:8d:9d:d5:b9:ed:
2f:aa:a6:58:fa:2e:86:2e:6c:8a:c1:fd:b6:46:45:
6b:73:56:3a:81:f9:df:4e:43:d2:61:62:e5:33:ca:
b6:18:3c:a0:0f:91:6d:9e:08:46:9e:22:f4:af:8d:
7c:03:83:fc:44:51:a6:84:49:68:b8:ed:3a:a3:c7:
e6:39:69:d0:70:79:32:01:2a:a6:bc:bb:62:e8:a5:
86:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:28:B6:34:83:F3:EA:7B:25:76:5D:77:16:F5:22:2E:2B:7D:1B:DD
X509v3 Authority Key Identifier:
keyid:50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:57:38:05:d7:06:aa:4d:ca:8c:8f:33:94:2a:d8:ac:5d:a3:
6b:76:6b:1b:50:6f:77:cb:bf:9b:92:52:dc:a1:83:5d:26:21:
a7:89:24:e2:de:3a:fc:84:6e:7b:c5:f5:49:51:3a:ac:23:34:
42:19:80:36:05:f6:3a:0d:74:95:fd:13:cf:e0:be:43:ec:c3:
a4:06:36:47:04:7d:9f:0a:96:b9:f6:fb:4e:2e:f7:09:46:1a:
ac:d9:2c:b8:f7:c5:37:d6:f9:a4:f3:2b:7f:61:af:97:1e:d7:
79:47:61:4b:a4:9b:10:74:d7:11:c2:44:40:99:5f:e9:97:ef:
57:d2:ed:12:78:07:7e:90:6f:8f:80:33:d2:01:25:31:80:3a:
9b:6f:57:4b:8b:ec:79:e6:fd:6d:51:e2:92:eb:b9:06:5c:32:
1d:f4:b1:81:77:d1:ec:64:d7:95:2c:47:bd:9e:f1:24:5e:3f:
91:f5:10:b4:f0:fe:a2:a6:1d:9f:ab:c9:97:5a:fe:65:63:bc:
00:6a:e7:82:4c:85:8f:79:11:5f:8c:dd:2a:02:90:14:6a:6b:
53:96:1e:c7:5a:82:b6:d3:92:43:20:41:21:f7:e3:94:dc:42:
e8:75:3f:6b:69:f3:56:df:da:ad:f1:48:b6:88:d9:bd:49:4d:
ea:74:46:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNVxNF1b/FbrVBs9PQnHkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYWE5OWViOGMxYjE4YjFhYTdkNDI0NWNlNDgxZmI4ODhm
YmYyNTQwHhcNMjYwMzAyMTEwMDU4WhcNMjYwMzAzMTEwMDU4WjAzMTEwLwYDVQQD
Eyg3ZjI4YjYzNDgzZjNlYTdiMjU3NjVkNzcxNmY1MjIyZTJiN2QxYmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj7pBeMW8tqjP0HX8hsQpxbkFvT3
OH1lSawHUMrkZm93uL90k3eOQIwVa37tjCVwmO0Qjs7HNrq9AHMfg+npaMtZzva4
rGta2aVLzpFQggCRcLQP4i7YagVYXH5KLI13dCbZzsqNiDtJ045GbpBZQ0XOnDJ6
WRLcT1s1UMXGtY7tPXVGzVzupUUcsqB9LiugC9RzmFmcaaFxJ9C/QDllcEuJFmtE
L88lp5eURp0LjZ3Vue0vqqZY+i6GLmyKwf22RkVrc1Y6gfnfTkPSYWLlM8q2GDyg
D5FtnghGniL0r418A4P8RFGmhElouO06o8fmOWnQcHkyASqmvLti6KWG7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8otjSD8+p7JXZddxb1Ii4rfRvdMB8GA1UdIwQY
MBaAFFCqmeuMGxixqn1CRc5IH7iI+/JUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUtxWjY0d2JHTEdxZlVKRnprZ2Z1SWo3OGxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wODg2NzctODBiZS00MTMwLWIzNjAt
MWNmNmZkOWY4MGZhLzEvVUtxWjY0d2JHTEdxZlVKRnprZ2Z1SWo3OGxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wODg2NzctODBiZS00MTMwLWIzNjAtMWNmNmZkOWY4MGZh
LzEvVUtxWjY0d2JHTEdxZlVKRnprZ2Z1SWo3OGxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1c4BdcG
qk3KjI8zlCrYrF2ja3ZrG1Bvd8u/m5JS3KGDXSYhp4kk4t46/IRue8X1SVE6rCM0
QhmANgX2Og10lf0Tz+C+Q+zDpAY2RwR9nwqWufb7Ti73CUYarNksuPfFN9b5pPMr
f2Gvlx7XeUdhS6SbEHTXEcJEQJlf6ZfvV9LtEngHfpBvj4Az0gElMYA6m29XS4vs
eeb9bVHikuu5BlwyHfSxgXfR7GTXlSxHvZ7xJF4/kfUQtPD+oqYdn6vJl1r+ZWO8
AGrngkyFj3kRX4zdKgKQFGprU5Yex1qCttOSQyBBIffjlNxC6HU/a2nzVt/arfFI
tojZvUlN6nRGdQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:41:17 2026 by rpki-client