Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
File: uGu2DZaz5dYYfuo4NovlSJuYdcY.mft (raw, json)
Hash identifier: DT+1taaEOdQ+p71UZUaNUPzDhmwdCs7pdHtCWyYZiCo=
Subject key identifier: 41:22:DB:7E:97:28:EC:A8:D7:CC:40:33:29:79:14:60:D3:1F:B4:DD
Authority key identifier: B8:6B:B6:0D:96:B3:E5:D6:18:7E:EA:38:36:8B:E5:48:9B:98:75:C6
Certificate issuer: /CN=b86bb60d96b3e5d6187eea38368be5489b9875c6
Certificate serial: 019E322A4B0D09461DD56DAC503CEFF52676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGu2DZaz5dYYfuo4NovlSJuYdcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
Manifest number: 48
Signing time: Sat 16 May 2026 19:01:32 +0000
Manifest this update: Sat 16 May 2026 19:01:32 +0000
Manifest next update: Sun 17 May 2026 19:01:32 +0000
Files and hashes: 1: JKRhGHz1wOMMDMbkd77Yaq_Pjqk.roa (hash: HUtH+6+YHomcHaSyEnrlGRMw9Xpgpt0Knkn8njrNXug=)
2: uGu2DZaz5dYYfuo4NovlSJuYdcY.crl (hash: 5rwyI/rt6F+1O4pZkGNhJ5iPliR2H9enmeUGcovUUDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGu2DZaz5dYYfuo4NovlSJuYdcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:2a:4b:0d:09:46:1d:d5:6d:ac:50:3c:ef:f5:26:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86bb60d96b3e5d6187eea38368be5489b9875c6
Validity
Not Before: May 16 19:01:32 2026 GMT
Not After : May 17 19:01:32 2026 GMT
Subject: CN=4122db7e9728eca8d7cc403329791460d31fb4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:63:0f:12:d3:0c:08:c7:d3:9f:4d:33:8b:f2:
d7:8a:f1:5f:54:50:42:cf:b1:64:4e:c4:a5:a4:b5:
db:da:00:75:de:a8:8f:4d:67:1d:3e:bb:a4:b7:b3:
86:ed:ba:e2:5a:8a:46:6d:45:44:55:45:27:7e:54:
76:ba:54:ab:df:97:9d:3d:8a:ee:ef:74:f4:d2:6d:
d6:3c:fa:aa:88:33:ac:17:92:48:1b:fd:8a:7c:32:
3c:ad:cd:75:59:83:61:ae:c7:49:56:71:50:51:60:
ba:bb:74:e9:18:11:32:a2:96:3b:a2:01:ac:c0:dd:
fb:41:ee:05:9a:50:17:ce:0b:af:ba:86:06:1b:f3:
3a:63:90:10:38:1e:d8:9f:5a:6f:c2:9a:c2:06:db:
33:dd:a5:30:9a:21:dc:ff:03:7d:7f:c6:c9:6a:2e:
ea:ce:e4:09:90:a8:16:b2:24:b5:06:7c:1c:9e:3e:
da:95:a0:70:46:1f:34:61:39:01:46:9c:29:07:84:
b1:e5:26:59:e2:15:6e:a7:4c:e8:58:b7:d6:0b:04:
11:a8:80:af:85:3f:12:b7:24:fd:54:85:6a:7e:aa:
66:5d:20:80:43:95:f7:81:5e:f2:b3:35:4d:19:3c:
64:92:f7:ac:eb:c9:ea:a5:50:fd:7c:a3:a6:64:6f:
48:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:22:DB:7E:97:28:EC:A8:D7:CC:40:33:29:79:14:60:D3:1F:B4:DD
X509v3 Authority Key Identifier:
keyid:B8:6B:B6:0D:96:B3:E5:D6:18:7E:EA:38:36:8B:E5:48:9B:98:75:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGu2DZaz5dYYfuo4NovlSJuYdcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9f:b5:a9:e4:fa:72:0b:59:18:89:1e:ef:ed:d2:ca:ad:38:
13:30:f4:e7:ea:a7:a5:51:ef:e1:ea:79:1d:e9:15:2b:f6:1c:
cd:17:8e:2a:cd:8d:29:3d:70:94:34:9c:1a:7d:3a:e4:6c:54:
1c:61:a5:33:9d:9f:15:1d:04:51:c9:b8:a5:f0:a7:00:97:d6:
85:5a:5c:df:4e:7f:cd:79:1f:30:4f:8c:e0:44:9e:8f:99:b7:
19:a3:ba:34:51:f9:ac:9b:4e:87:be:4e:a7:06:5a:c2:f0:90:
e3:2e:dd:7b:50:59:37:3b:33:e9:af:22:31:24:f2:c7:28:3c:
a5:7c:80:19:93:5d:24:d9:aa:57:93:d6:e6:66:c7:68:76:39:
6b:28:93:3b:35:3b:9d:87:e7:e7:93:77:e8:42:20:f6:8b:5c:
fe:b3:fb:a6:11:d2:ee:22:29:71:5e:37:6a:ff:b0:e8:74:2c:
27:1c:d5:62:c6:9d:9e:de:5b:7b:22:fb:fa:e2:f2:96:c3:b3:
33:86:6f:29:a9:3c:f7:8c:44:ce:4e:ed:8e:1d:f9:98:a3:fa:
96:f5:15:cd:22:8a:da:5a:d1:4a:13:e2:c9:c2:6e:e7:dd:32:
0d:0a:07:da:cc:77:53:2f:2f:d6:d4:e1:80:2a:54:1d:09:17:
fd:33:90:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4yKksNCUYd1W2sUDzv9SZ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NmJiNjBkOTZiM2U1ZDYxODdlZWEzODM2OGJlNTQ4OWI5
ODc1YzYwHhcNMjYwNTE2MTkwMTMyWhcNMjYwNTE3MTkwMTMyWjAzMTEwLwYDVQQD
Eyg0MTIyZGI3ZTk3MjhlY2E4ZDdjYzQwMzMyOTc5MTQ2MGQzMWZiNGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGMPEtMMCMfTn00zi/LXivFfVFBC
z7FkTsSlpLXb2gB13qiPTWcdPrukt7OG7briWopGbUVEVUUnflR2ulSr35edPYru
73T00m3WPPqqiDOsF5JIG/2KfDI8rc11WYNhrsdJVnFQUWC6u3TpGBEyopY7ogGs
wN37Qe4FmlAXzguvuoYGG/M6Y5AQOB7Yn1pvwprCBtsz3aUwmiHc/wN9f8bJai7q
zuQJkKgWsiS1Bnwcnj7alaBwRh80YTkBRpwpB4Sx5SZZ4hVup0zoWLfWCwQRqICv
hT8StyT9VIVqfqpmXSCAQ5X3gV7yszVNGTxkkves68nqpVD9fKOmZG9IVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEi236XKOyo18xAMyl5FGDTH7TdMB8GA1UdIwQY
MBaAFLhrtg2Ws+XWGH7qODaL5UibmHXGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUd1MkRaYXo1ZFlZZnVvNE5vdmxTSnVZZGNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80YWM3ZjYtNGNmZC00YjExLWIwMDct
NjljMjVmZWFhYjUwLzEvdUd1MkRaYXo1ZFlZZnVvNE5vdmxTSnVZZGNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80YWM3ZjYtNGNmZC00YjExLWIwMDctNjljMjVmZWFhYjUw
LzEvdUd1MkRaYXo1ZFlZZnVvNE5vdmxTSnVZZGNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5+1qeT6
cgtZGIke7+3Syq04EzD05+qnpVHv4ep5HekVK/YczReOKs2NKT1wlDScGn065GxU
HGGlM52fFR0EUcm4pfCnAJfWhVpc305/zXkfME+M4ESej5m3GaO6NFH5rJtOh75O
pwZawvCQ4y7de1BZNzsz6a8iMSTyxyg8pXyAGZNdJNmqV5PW5mbHaHY5ayiTOzU7
nYfn55N36EIg9otc/rP7phHS7iIpcV43av+w6HQsJxzVYsadnt5beyL7+uLylsOz
M4ZvKak894xEzk7tjh35mKP6lvUVzSKK2lrRShPiycJu590yDQoH2sx3Uy8v1tTh
gCpUHQkX/TOQaA==
-----END CERTIFICATE-----
Generated at Sun May 17 00:22:17 2026 by rpki-client