Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
File: Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft (raw, json)
Hash identifier: CmckRurlZ/2GqdyNUzohVDC/9g3MJ+OIAcoWY0KUy1A=
Subject key identifier: BD:0B:69:2C:7F:B9:0B:06:1F:D0:30:DE:68:97:24:6B:C9:5D:65:1F
Authority key identifier: 52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB
Certificate issuer: /CN=522f9879ccfadee5d04a9a9973f5b27952971bfb
Certificate serial: 019CAC473AC88593DD8D9D620AEAE59DF6EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
Manifest number: 1408
Signing time: Mon 02 Mar 2026 02:01:15 +0000
Manifest this update: Mon 02 Mar 2026 02:01:15 +0000
Manifest next update: Tue 03 Mar 2026 02:01:15 +0000
Files and hashes: 1: Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl (hash: Q9sgqbcPzbJpotXRVA2ytFhjPDJYFaI4q5DMQlm0dfc=)
2: oOmlfKVzpMVENSLkIqqHr9oYYIg.roa (hash: /1cGoeAjRc1hP5Tzk5VY4ttcaNmL4WoxJgl5UoSxmIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:3a:c8:85:93:dd:8d:9d:62:0a:ea:e5:9d:f6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522f9879ccfadee5d04a9a9973f5b27952971bfb
Validity
Not Before: Mar 2 02:01:15 2026 GMT
Not After : Mar 3 02:01:15 2026 GMT
Subject: CN=bd0b692c7fb90b061fd030de6897246bc95d651f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1e:53:3f:31:ac:f8:91:2c:9f:f3:d4:86:33:
2f:bd:d5:5a:ce:a4:d7:82:53:99:98:a3:eb:da:6f:
e3:52:c2:4f:62:0a:95:03:26:99:b5:c3:c5:d4:c8:
f5:86:04:01:a4:67:05:50:5a:64:fc:82:28:b6:43:
22:f6:d1:9a:f9:80:cd:e8:29:1e:7d:bf:1c:0c:66:
84:33:3e:9c:e6:40:87:d8:1f:e7:68:b6:07:de:7f:
a6:86:1d:2f:e2:ac:a0:03:ca:6e:d8:f5:2c:d6:80:
4d:07:4d:d2:56:32:0a:b2:e6:9e:95:57:ff:0c:ea:
f5:49:d5:6d:46:ad:fb:0b:81:99:45:ba:aa:50:73:
43:5d:16:a4:52:69:45:8b:de:de:d4:75:6d:95:7d:
92:1e:7c:26:7c:49:27:43:c7:50:36:b4:82:0c:8b:
19:fe:ac:56:04:0c:30:25:8a:94:8f:7d:8b:81:55:
74:2a:d8:76:20:63:e7:ba:d9:fd:f1:0e:50:db:c2:
6b:da:c9:8b:7b:4d:f8:cc:df:04:43:ca:40:74:21:
22:98:c0:32:67:27:3b:17:80:45:59:17:05:47:27:
b9:49:3e:55:88:81:cb:64:99:34:6e:a4:3a:45:08:
3a:51:99:58:95:2a:b3:ff:d7:bc:bb:a3:b4:5a:bc:
2d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0B:69:2C:7F:B9:0B:06:1F:D0:30:DE:68:97:24:6B:C9:5D:65:1F
X509v3 Authority Key Identifier:
keyid:52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:33:31:41:b3:a0:73:7e:87:3b:5a:a0:91:df:19:79:8c:5a:
f7:9e:e9:8f:19:af:43:0e:51:7c:1c:2d:4b:25:80:87:31:9e:
5d:5d:55:aa:33:58:cc:45:12:b7:7b:4a:cc:a7:50:b5:a6:38:
a3:cc:49:dc:47:c1:a7:7a:de:68:d4:50:7b:9e:1b:73:e2:93:
17:54:14:f9:0d:06:a9:35:70:1d:85:32:d2:2a:47:c2:bc:df:
f6:84:2c:a8:ca:08:b4:1c:31:4c:72:a3:8b:22:52:92:d5:bf:
d1:5d:22:80:8d:df:fc:c4:4e:8b:e1:94:81:dd:34:66:ff:1c:
d4:dc:0c:ef:5b:7b:da:12:e1:95:67:3b:91:97:30:b8:98:08:
f1:bc:0c:cf:6c:f5:a7:56:e0:ec:8a:bc:17:1b:fd:ca:11:88:
21:68:5a:92:39:c5:60:77:86:40:c3:87:41:cf:76:3a:04:d0:
c2:9c:61:94:d3:80:e4:8c:bc:4e:bd:80:e7:05:b7:ed:d8:1f:
21:6c:bb:38:5f:38:15:bb:85:5c:01:56:c4:fd:28:7f:08:b4:
b4:42:55:ca:ae:a8:1c:e1:a6:9b:ad:81:d1:75:e6:12:38:0e:
8a:2f:16:f2:2b:2f:1f:1e:23:fa:6b:29:ba:c0:1d:df:ea:03:
33:2e:ae:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRzrIhZPdjZ1iCurlnfbrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMmY5ODc5Y2NmYWRlZTVkMDRhOWE5OTczZjViMjc5NTI5
NzFiZmIwHhcNMjYwMzAyMDIwMTE1WhcNMjYwMzAzMDIwMTE1WjAzMTEwLwYDVQQD
EyhiZDBiNjkyYzdmYjkwYjA2MWZkMDMwZGU2ODk3MjQ2YmM5NWQ2NTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh5TPzGs+JEsn/PUhjMvvdVazqTX
glOZmKPr2m/jUsJPYgqVAyaZtcPF1Mj1hgQBpGcFUFpk/IIotkMi9tGa+YDN6Cke
fb8cDGaEMz6c5kCH2B/naLYH3n+mhh0v4qygA8pu2PUs1oBNB03SVjIKsuaelVf/
DOr1SdVtRq37C4GZRbqqUHNDXRakUmlFi97e1HVtlX2SHnwmfEknQ8dQNrSCDIsZ
/qxWBAwwJYqUj32LgVV0Kth2IGPnutn98Q5Q28Jr2smLe034zN8EQ8pAdCEimMAy
Zyc7F4BFWRcFRye5ST5ViIHLZJk0bqQ6RQg6UZlYlSqz/9e8u6O0WrwtOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0LaSx/uQsGH9Aw3miXJGvJXWUfMB8GA1UdIwQY
MBaAFFIvmHnM+t7l0EqamXP1snlSlxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWktWWVjejYzdVhRU3BxWmNfV3llVktYR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mYWQ0ZjEtOTFmMC00N2UxLWIzNzAt
ZWU1MDlmYmQ4MGUxLzEvVWktWWVjejYzdVhRU3BxWmNfV3llVktYR19zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9mYWQ0ZjEtOTFmMC00N2UxLWIzNzAtZWU1MDlmYmQ4MGUx
LzEvVWktWWVjejYzdVhRU3BxWmNfV3llVktYR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFDMxQbOg
c36HO1qgkd8ZeYxa957pjxmvQw5RfBwtSyWAhzGeXV1VqjNYzEUSt3tKzKdQtaY4
o8xJ3EfBp3reaNRQe54bc+KTF1QU+Q0GqTVwHYUy0ipHwrzf9oQsqMoItBwxTHKj
iyJSktW/0V0igI3f/MROi+GUgd00Zv8c1NwM71t72hLhlWc7kZcwuJgI8bwMz2z1
p1bg7Iq8Fxv9yhGIIWhakjnFYHeGQMOHQc92OgTQwpxhlNOA5Iy8Tr2A5wW37dgf
IWy7OF84FbuFXAFWxP0ofwi0tEJVyq6oHOGmm62B0XXmEjgOii8W8isvHx4j+msp
usAd3+oDMy6u7w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:54 2026 by rpki-client