Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
File: UucbOdfElDC7x3u2WVLkAhoCUxY.mft (raw, json)
Hash identifier: Zopkg559tp7BP/NEWOfeJsT5NyzFHj3L8eageGvgLwo=
Subject key identifier: 1D:A9:CF:36:F5:19:41:20:CB:0F:45:8A:42:89:91:93:8E:B9:D1:FE
Authority key identifier: 52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16
Certificate issuer: /CN=52e71b39d7c49430bbc77bb65952e4021a025316
Certificate serial: 019D37F6F47F63EEF51AD8FBAD232ACFDE5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
Manifest number: 1573
Signing time: Sun 29 Mar 2026 05:00:24 +0000
Manifest this update: Sun 29 Mar 2026 05:00:24 +0000
Manifest next update: Mon 30 Mar 2026 05:00:24 +0000
Files and hashes: 1: UucbOdfElDC7x3u2WVLkAhoCUxY.crl (hash: 10x4ulvZlJL565wqr0GTcJWCGked34/5d7VkyePiWf0=)
2: fAEQXEU8XqYl4iZbVuPiwUl1I_0.roa (hash: q8r4P3JkpztaMfofkjIYM4mXiBLUcbGTHnSsBJ/p6UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f4:7f:63:ee:f5:1a:d8:fb:ad:23:2a:cf:de:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e71b39d7c49430bbc77bb65952e4021a025316
Validity
Not Before: Mar 29 05:00:24 2026 GMT
Not After : Mar 30 05:00:24 2026 GMT
Subject: CN=1da9cf36f5194120cb0f458a428991938eb9d1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a0:6b:5e:e5:1b:52:15:fd:7b:81:4e:f3:e1:
58:f5:98:92:63:11:e2:ae:9b:79:c2:72:20:3b:55:
4c:45:2d:01:58:95:e0:23:da:c6:83:bb:38:db:63:
c5:d4:37:84:cd:1d:fa:2b:0b:b6:b6:a0:61:8e:72:
2a:c3:70:b9:dd:da:ec:ef:e9:18:f1:79:07:ca:c9:
80:c2:00:41:d0:68:84:f0:e6:58:2e:c9:cb:98:ba:
07:0c:60:63:91:ef:fa:bb:b5:41:85:6c:36:c4:b9:
a8:9b:30:3f:d9:a1:49:38:7f:0f:84:8f:ca:6f:28:
e7:df:a9:43:9a:69:83:6f:95:b4:7c:5d:f5:e2:6d:
f6:e3:0f:f3:5f:a0:85:29:ce:5c:e2:1c:23:dd:ef:
8a:13:19:b5:49:5e:65:2d:78:83:f5:df:b1:fd:64:
ef:22:c4:f0:d3:48:24:bf:3a:11:13:24:2b:2b:39:
8e:b3:45:d2:d7:92:6f:6f:01:e3:d4:b5:9e:be:be:
46:b4:7d:ed:d0:c5:b0:c3:06:af:e0:4a:aa:6e:6c:
16:7b:6f:b0:39:15:2b:62:cc:20:6a:8e:92:a6:48:
a6:66:f9:dd:81:94:36:5e:86:f3:ec:5d:b1:d7:a6:
6b:c9:ff:da:4a:d5:6d:d7:f5:24:db:b7:73:8c:d5:
b0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A9:CF:36:F5:19:41:20:CB:0F:45:8A:42:89:91:93:8E:B9:D1:FE
X509v3 Authority Key Identifier:
keyid:52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:88:ac:44:d9:75:2d:c9:53:4a:d8:70:cc:b4:5d:38:62:0f:
63:8e:d0:11:b2:9b:c1:83:90:e5:e7:6b:d0:e0:38:f5:5a:cb:
65:9e:91:d4:4f:2a:30:f5:4a:38:10:7c:31:42:23:af:bd:c3:
0d:a8:9e:e4:02:77:20:63:0f:9c:3f:b0:52:eb:90:82:c2:40:
08:5f:9f:11:a3:ee:e3:30:c8:34:0b:3d:7d:95:72:02:f2:bc:
ab:cd:dc:70:31:6f:f6:32:31:ab:2c:b2:af:c8:c8:4c:6c:ee:
bb:38:84:e6:6b:27:2d:c1:31:92:4a:ef:dc:f4:c9:8d:1b:c8:
57:1d:7a:f3:98:cf:71:13:8b:04:c0:34:4d:63:63:d3:68:46:
02:2b:d2:79:cb:b1:33:bf:c9:70:07:8b:2c:66:25:9a:2e:a4:
2d:eb:cc:59:62:24:f4:be:34:7f:3f:6e:ca:b9:2f:34:58:6e:
62:6a:ff:41:64:1d:29:e9:49:8b:e1:13:83:72:70:a8:cc:b4:
62:3a:9a:5e:74:e8:11:99:9a:57:c1:41:46:fb:ab:14:fd:6e:
b9:fe:c9:da:94:29:02:52:c9:0b:85:b6:88:4c:53:83:c4:b2:
7f:43:26:4c:ac:8f:77:01:e8:b3:d0:36:4c:51:23:a3:3f:a6:
6c:54:1e:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039vR/Y+71Gtj7rSMqz95eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZTcxYjM5ZDdjNDk0MzBiYmM3N2JiNjU5NTJlNDAyMWEw
MjUzMTYwHhcNMjYwMzI5MDUwMDI0WhcNMjYwMzMwMDUwMDI0WjAzMTEwLwYDVQQD
EygxZGE5Y2YzNmY1MTk0MTIwY2IwZjQ1OGE0Mjg5OTE5MzhlYjlkMWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6BrXuUbUhX9e4FO8+FY9ZiSYxHi
rpt5wnIgO1VMRS0BWJXgI9rGg7s422PF1DeEzR36Kwu2tqBhjnIqw3C53drs7+kY
8XkHysmAwgBB0GiE8OZYLsnLmLoHDGBjke/6u7VBhWw2xLmomzA/2aFJOH8PhI/K
byjn36lDmmmDb5W0fF314m324w/zX6CFKc5c4hwj3e+KExm1SV5lLXiD9d+x/WTv
IsTw00gkvzoREyQrKzmOs0XS15JvbwHj1LWevr5GtH3t0MWwwwav4EqqbmwWe2+w
ORUrYswgao6SpkimZvndgZQ2Xobz7F2x16Zryf/aStVt1/Uk27dzjNWwFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2pzzb1GUEgyw9FikKJkZOOudH+MB8GA1UdIwQY
MBaAFFLnGznXxJQwu8d7tllS5AIaAlMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXVjYk9kZkVsREM3eDN1MldWTGtBaG9DVXhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jMzlhOGMtM2JiMC00NDlkLTg5YzMt
NmZiYTZhMWUwZWU3LzEvVXVjYk9kZkVsREM3eDN1MldWTGtBaG9DVXhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9jMzlhOGMtM2JiMC00NDlkLTg5YzMtNmZiYTZhMWUwZWU3
LzEvVXVjYk9kZkVsREM3eDN1MldWTGtBaG9DVXhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATIisRNl1
LclTSthwzLRdOGIPY47QEbKbwYOQ5edr0OA49VrLZZ6R1E8qMPVKOBB8MUIjr73D
Daie5AJ3IGMPnD+wUuuQgsJACF+fEaPu4zDINAs9fZVyAvK8q83ccDFv9jIxqyyy
r8jITGzuuziE5msnLcExkkrv3PTJjRvIVx1685jPcROLBMA0TWNj02hGAivSecux
M7/JcAeLLGYlmi6kLevMWWIk9L40fz9uyrkvNFhuYmr/QWQdKelJi+ETg3JwqMy0
YjqaXnToEZmaV8FBRvurFP1uuf7J2pQpAlLJC4W2iExTg8Syf0MmTKyPdwHos9A2
TFEjoz+mbFQeyA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:00 2026 by rpki-client