Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.mft
File: UFzWGp9t6drMDTySFwbffVCvvW8.mft (raw, json)
Hash identifier: h5A5Rb7C7S7V9qYTMRz2sdtqMtxLbu3JpN0pZHt8qyY=
Subject key identifier: 39:11:9F:51:7C:27:12:49:BB:0E:05:09:C8:21:DD:0E:92:32:D7:48
Authority key identifier: 50:5C:D6:1A:9F:6D:E9:DA:CC:0D:3C:92:17:06:DF:7D:50:AF:BD:6F
Certificate issuer: /CN=505cd61a9f6de9dacc0d3c921706df7d50afbd6f
Certificate serial: 019E314E634301274CD5BD3BA8BBF0786447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFzWGp9t6drMDTySFwbffVCvvW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.mft
Manifest number: 0F64
Signing time: Sat 16 May 2026 15:01:21 +0000
Manifest this update: Sat 16 May 2026 15:01:21 +0000
Manifest next update: Sun 17 May 2026 15:01:21 +0000
Files and hashes: 1: KYZm_9MuL_c9ERWs0Td3tSLq0RM.roa (hash: fei8OCGwkyhg3dv3nNRDFJMFMNR03cAB020hgr7s0HQ=)
2: UFzWGp9t6drMDTySFwbffVCvvW8.crl (hash: QbWQWEOu41pbodCoYCAUb/pRr1OVAisQsPgXRvslyzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFzWGp9t6drMDTySFwbffVCvvW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 15:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:63:43:01:27:4c:d5:bd:3b:a8:bb:f0:78:64:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505cd61a9f6de9dacc0d3c921706df7d50afbd6f
Validity
Not Before: May 16 15:01:21 2026 GMT
Not After : May 17 15:01:21 2026 GMT
Subject: CN=39119f517c271249bb0e0509c821dd0e9232d748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e3:38:aa:c1:0f:2a:f7:1a:b2:9d:39:f9:ad:
29:6c:64:d0:aa:6c:1c:ba:43:e7:b8:64:55:ba:dd:
57:61:5e:62:48:d1:a0:73:3e:3f:fe:1b:7f:5e:bf:
80:8b:6c:db:53:74:a3:76:ef:bd:44:4a:36:42:d7:
06:97:04:cc:9d:20:a9:7d:23:e8:ee:6d:7a:5e:e8:
12:f5:55:c4:51:06:15:c8:92:17:2e:80:0a:97:ba:
5f:5d:ee:e4:42:1c:b5:08:09:c4:2a:43:f0:00:ab:
47:95:0b:eb:32:80:7b:11:e9:5a:70:17:9b:3e:88:
bc:2b:2f:17:0d:03:c7:1b:c2:21:87:70:24:ca:a8:
1e:ba:24:ab:96:7f:f3:39:0d:43:af:38:04:26:93:
3f:6f:7b:82:68:a6:ab:45:cc:61:e1:18:14:de:a3:
d0:30:92:22:08:39:01:90:ea:13:41:2d:3e:9f:09:
de:34:03:64:53:63:6c:74:d4:89:ce:60:67:47:b7:
01:75:4a:ef:70:f3:cb:43:d3:75:f2:f5:85:2b:82:
bd:3a:b2:bb:3a:e0:a9:4c:51:e1:94:d3:0c:73:cb:
d4:fd:23:09:28:8a:84:ca:f0:e6:94:6e:87:01:2c:
59:43:d8:87:0e:98:d7:04:f2:e4:02:0d:01:0f:b9:
2c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:11:9F:51:7C:27:12:49:BB:0E:05:09:C8:21:DD:0E:92:32:D7:48
X509v3 Authority Key Identifier:
keyid:50:5C:D6:1A:9F:6D:E9:DA:CC:0D:3C:92:17:06:DF:7D:50:AF:BD:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFzWGp9t6drMDTySFwbffVCvvW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:70:78:63:d4:29:f9:33:cd:94:49:fa:5b:98:09:89:f2:79:
a0:d3:a5:11:9c:d3:d9:d1:c5:1a:f7:b4:37:ea:ed:97:cc:03:
e6:6d:0d:26:c5:2a:eb:05:17:bb:e8:84:32:0b:21:25:37:81:
39:cf:7a:1e:48:5d:7b:e1:d7:f3:40:d0:88:73:52:42:2b:8e:
f2:65:c6:24:9c:70:5a:f5:a9:3c:86:cd:a4:06:e7:ab:31:b9:
e7:5f:c3:21:45:f5:5e:22:26:4d:8a:45:cd:7d:fb:0b:de:f7:
cd:20:62:c9:d8:d3:83:b0:2b:73:d9:5e:fc:18:6f:38:24:a8:
b0:3a:53:4b:55:84:99:9e:68:4a:47:3c:eb:9d:c1:3b:d2:57:
a2:e3:6e:11:33:0d:79:b9:1f:71:59:64:d1:e2:8c:6d:b2:74:
21:ca:da:47:a7:67:16:85:30:a4:ca:66:13:f5:e7:37:f2:78:
59:49:19:3e:df:71:00:f6:4b:2c:ab:66:10:7f:3b:59:97:2a:
be:50:6c:43:2f:6f:6f:a4:9b:0f:66:8c:b9:d9:f9:8e:99:f9:
dd:b5:04:86:cb:08:bf:ca:30:9b:e0:3d:fa:66:c7:c3:ad:18:
32:ac:58:e1:ac:44:46:83:fa:e2:05:cb:8e:2a:5b:f6:f3:9e:
0e:80:e5:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xTmNDASdM1b07qLvweGRHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNWNkNjFhOWY2ZGU5ZGFjYzBkM2M5MjE3MDZkZjdkNTBh
ZmJkNmYwHhcNMjYwNTE2MTUwMTIxWhcNMjYwNTE3MTUwMTIxWjAzMTEwLwYDVQQD
EygzOTExOWY1MTdjMjcxMjQ5YmIwZTA1MDljODIxZGQwZTkyMzJkNzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOM4qsEPKvcasp05+a0pbGTQqmwc
ukPnuGRVut1XYV5iSNGgcz4//ht/Xr+Ai2zbU3Sjdu+9REo2QtcGlwTMnSCpfSPo
7m16XugS9VXEUQYVyJIXLoAKl7pfXe7kQhy1CAnEKkPwAKtHlQvrMoB7EelacBeb
Poi8Ky8XDQPHG8Ihh3AkyqgeuiSrln/zOQ1DrzgEJpM/b3uCaKarRcxh4RgU3qPQ
MJIiCDkBkOoTQS0+nwneNANkU2NsdNSJzmBnR7cBdUrvcPPLQ9N18vWFK4K9OrK7
OuCpTFHhlNMMc8vU/SMJKIqEyvDmlG6HASxZQ9iHDpjXBPLkAg0BD7ksfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkRn1F8JxJJuw4FCcgh3Q6SMtdIMB8GA1UdIwQY
MBaAFFBc1hqfbenazA08khcG331Qr71vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZ6V0dwOXQ2ZHJNRFR5U0Z3YmZmVkN2dlc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9hMzczNWEtZWNjYy00MWQ3LWI3MjMt
ZTAxMjM3YjVmYzEwLzEvVUZ6V0dwOXQ2ZHJNRFR5U0Z3YmZmVkN2dlc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9hMzczNWEtZWNjYy00MWQ3LWI3MjMtZTAxMjM3YjVmYzEw
LzEvVUZ6V0dwOXQ2ZHJNRFR5U0Z3YmZmVkN2dlc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3B4Y9Qp
+TPNlEn6W5gJifJ5oNOlEZzT2dHFGve0N+rtl8wD5m0NJsUq6wUXu+iEMgshJTeB
Oc96Hkhde+HX80DQiHNSQiuO8mXGJJxwWvWpPIbNpAbnqzG551/DIUX1XiImTYpF
zX37C973zSBiydjTg7Arc9le/BhvOCSosDpTS1WEmZ5oSkc8653BO9JXouNuETMN
ebkfcVlk0eKMbbJ0IcraR6dnFoUwpMpmE/XnN/J4WUkZPt9xAPZLLKtmEH87WZcq
vlBsQy9vb6SbD2aMudn5jpn53bUEhssIv8owm+A9+mbHw60YMqxY4axERoP64gXL
jipb9vOeDoDlvg==
-----END CERTIFICATE-----
Generated at Sun May 17 01:04:26 2026 by rpki-client