Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
File: UjhuUgR45iW-HWKC0hawWRL4OHQ.mft (raw, json)
Hash identifier: 2rQAlg7/WHl/WnJJManJ7V+54SiVphIDhON4UptCAUI=
Subject key identifier: 9A:49:97:3E:11:E5:82:18:41:DA:A3:66:45:71:DB:6B:F5:04:48:E1
Authority key identifier: 52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
Certificate issuer: /CN=52386e520478e625be1d6282d216b05912f83874
Certificate serial: 019CAC46E38785864BC22A7F9A5D51C274B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
Manifest number: 1311
Signing time: Mon 02 Mar 2026 02:00:52 +0000
Manifest this update: Mon 02 Mar 2026 02:00:52 +0000
Manifest next update: Tue 03 Mar 2026 02:00:52 +0000
Files and hashes: 1: UjhuUgR45iW-HWKC0hawWRL4OHQ.crl (hash: xXCXd6yeJRwmP5pFKM+KiJ8ntg7bHEgLoWMqOGe4P/A=)
2: ldVLo-eNAW-W-3vclMcqBGxufHM.roa (hash: 3oSvQLb4YGLMfy8gAiD/iZGExJiz2TXf3tCjeUQNbTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:e3:87:85:86:4b:c2:2a:7f:9a:5d:51:c2:74:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52386e520478e625be1d6282d216b05912f83874
Validity
Not Before: Mar 2 02:00:52 2026 GMT
Not After : Mar 3 02:00:52 2026 GMT
Subject: CN=9a49973e11e5821841daa3664571db6bf50448e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:06:20:e6:d8:ce:a0:b2:88:6b:1a:a0:25:
0d:20:0a:f8:18:c9:45:c9:ea:34:a4:ac:35:d9:be:
cd:63:70:1f:0f:94:a4:06:4a:f4:7d:08:2d:e7:fd:
37:fb:c5:89:81:2f:04:d0:fc:c3:6c:ce:28:56:66:
07:96:f8:a8:2b:eb:79:64:6a:f5:50:01:06:34:83:
92:34:9f:e4:d3:3c:f5:03:27:3e:53:bd:d6:b9:6a:
84:f6:8a:9b:b4:0c:28:18:f9:90:ea:f7:fa:4b:27:
f3:3d:df:28:f8:e3:93:37:5a:80:de:ad:b5:70:45:
03:c5:be:22:6a:01:5d:0f:6f:ce:d0:b4:56:b3:28:
c8:85:f8:a6:ae:33:ee:3d:84:75:48:c1:e2:19:bc:
bd:38:cd:02:de:94:c7:bb:2a:60:69:23:32:f4:30:
38:29:f8:e2:0f:4a:07:96:ff:d3:4b:81:ce:e5:51:
2e:db:0b:5e:5d:0e:70:09:a2:f9:4e:06:cf:2f:b0:
f3:3b:d5:2d:f9:be:b6:c9:bc:46:74:92:08:73:4a:
c1:ef:06:0a:21:16:e2:a2:86:6e:9f:0c:b6:d5:12:
bd:7d:ee:c6:9b:42:e5:a2:f6:1f:b5:4e:6d:57:60:
39:82:bd:6f:c1:5e:03:75:81:24:a1:74:a6:e6:c9:
bb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:49:97:3E:11:E5:82:18:41:DA:A3:66:45:71:DB:6B:F5:04:48:E1
X509v3 Authority Key Identifier:
keyid:52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:34:2d:a2:2f:a4:93:23:33:09:80:36:e3:84:13:a6:01:39:
6f:47:0b:2e:11:2a:df:ba:f4:2e:9a:2b:b6:51:1a:96:7b:46:
7a:39:bb:7e:1f:fe:4e:4e:3b:8f:2c:0b:ff:08:19:bd:5d:bd:
44:5a:5e:8b:77:52:6d:41:51:f0:cb:dc:1f:00:bf:0d:b2:b0:
ea:d8:d4:04:2a:9e:cd:39:c6:4a:63:fe:4c:3f:06:30:13:d3:
8d:65:5c:4b:e6:7e:a0:92:e2:0a:7f:38:0a:c7:e8:19:c9:f2:
16:f2:7e:d2:5d:6b:91:49:cc:25:2d:bc:b5:f7:a0:12:9f:8d:
2e:50:b1:ba:48:6b:5d:f4:f2:e3:34:6c:f2:3b:7f:c5:ef:98:
1b:66:cb:c2:eb:f6:b9:dd:9c:11:a6:ad:12:af:c1:89:1a:1b:
ba:ed:71:85:61:5f:12:b9:71:a2:31:0a:69:1e:0a:86:90:56:
b6:f9:bc:d3:e7:fa:8a:3e:84:8d:4d:a2:27:0f:86:b0:b4:a0:
cb:56:ec:17:33:c2:92:a8:4c:cc:8b:5e:46:42:03:a4:3f:d5:
2d:f6:ee:3a:5f:d0:25:a3:7e:c2:9a:42:19:3e:50:48:ff:97:
61:1e:2e:06:13:dd:e7:79:33:74:0a:12:9a:ef:08:03:fb:b5:
73:70:67:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRuOHhYZLwip/ml1RwnSwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMzg2ZTUyMDQ3OGU2MjViZTFkNjI4MmQyMTZiMDU5MTJm
ODM4NzQwHhcNMjYwMzAyMDIwMDUyWhcNMjYwMzAzMDIwMDUyWjAzMTEwLwYDVQQD
Eyg5YTQ5OTczZTExZTU4MjE4NDFkYWEzNjY0NTcxZGI2YmY1MDQ0OGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviIGIObYzqCyiGsaoCUNIAr4GMlF
yeo0pKw12b7NY3AfD5SkBkr0fQgt5/03+8WJgS8E0PzDbM4oVmYHlvioK+t5ZGr1
UAEGNIOSNJ/k0zz1Ayc+U73WuWqE9oqbtAwoGPmQ6vf6SyfzPd8o+OOTN1qA3q21
cEUDxb4iagFdD2/O0LRWsyjIhfimrjPuPYR1SMHiGby9OM0C3pTHuypgaSMy9DA4
KfjiD0oHlv/TS4HO5VEu2wteXQ5wCaL5TgbPL7DzO9Ut+b62ybxGdJIIc0rB7wYK
IRbiooZunwy21RK9fe7Gm0LlovYftU5tV2A5gr1vwV4DdYEkoXSm5sm74wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpJlz4R5YIYQdqjZkVx22v1BEjhMB8GA1UdIwQY
MBaAFFI4blIEeOYlvh1igtIWsFkS+Dh0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWpodVVnUjQ1aVctSFdLQzBoYXdXUkw0T0hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kNDUxOTMtYjVmZS00ZTFkLThlNDIt
YWU1ZGI2ZTE0ODZkLzEvVWpodVVnUjQ1aVctSFdLQzBoYXdXUkw0T0hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9kNDUxOTMtYjVmZS00ZTFkLThlNDItYWU1ZGI2ZTE0ODZk
LzEvVWpodVVnUjQ1aVctSFdLQzBoYXdXUkw0T0hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajQtoi+k
kyMzCYA244QTpgE5b0cLLhEq37r0LportlEalntGejm7fh/+Tk47jywL/wgZvV29
RFpei3dSbUFR8MvcHwC/DbKw6tjUBCqezTnGSmP+TD8GMBPTjWVcS+Z+oJLiCn84
CsfoGcnyFvJ+0l1rkUnMJS28tfegEp+NLlCxukhrXfTy4zRs8jt/xe+YG2bLwuv2
ud2cEaatEq/BiRobuu1xhWFfErlxojEKaR4KhpBWtvm80+f6ij6EjU2iJw+GsLSg
y1bsFzPCkqhMzIteRkIDpD/VLfbuOl/QJaN+wppCGT5QSP+XYR4uBhPd53kzdAoS
mu8IA/u1c3Bncw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:48 2026 by rpki-client