Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
File: UYje2s3CQLSy94bxI0LgqD2K6A8.mft (raw, json)
Hash identifier: 2L61dMVhszzF0KWh6+1UQBtSF+nWDUQ5cnk+RQGFVAI=
Subject key identifier: F5:DB:03:91:0B:2D:F8:A5:AA:53:C7:1C:15:3A:B1:81:9A:EA:E6:21
Authority key identifier: 51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
Certificate issuer: /CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Certificate serial: 019A725CD6B7F9DB871D5BB2E590DC760035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
Manifest number: 1728
Signing time: Tue 11 Nov 2025 10:01:18 +0000
Manifest this update: Tue 11 Nov 2025 10:01:18 +0000
Manifest next update: Wed 12 Nov 2025 10:01:18 +0000
Files and hashes: 1: 7qvgIj3jypWMSKFnvSypb6eNA_Y.roa (hash: MROlFsFZhg7uUHfqBSW5TAr927G+FcG0aizwMj7xAAs=)
2: UYje2s3CQLSy94bxI0LgqD2K6A8.crl (hash: W4V1GpwBnKtuMYA6EFgNFFGurqsDSr6lD1Wj6ThERFM=)
3: VzEuM4wQpuwbT-xJ7bC1xNm7YDc.roa (hash: Pz1SZUH98WHk5LHtbhA9Ppfrk48GkT05UG0eFHMTuIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d6:b7:f9:db:87:1d:5b:b2:e5:90:dc:76:00:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Validity
Not Before: Nov 11 10:01:18 2025 GMT
Not After : Nov 12 10:01:18 2025 GMT
Subject: CN=f5db03910b2df8a5aa53c71c153ab1819aeae621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7f:0b:af:34:6f:ee:47:f0:86:b8:2f:b2:37:
dc:56:48:c3:59:99:e0:25:e6:db:84:ed:5c:a7:3d:
04:4f:71:a4:18:5b:33:7c:d2:80:b2:a3:87:2c:41:
19:36:ce:2a:22:86:52:97:95:da:47:ee:ee:ae:47:
01:2b:7b:0f:eb:ba:21:ec:8e:0f:57:15:55:cf:a6:
34:d2:ab:64:3b:93:37:3d:13:17:aa:e9:05:a8:ad:
29:49:f2:38:42:07:a0:64:35:aa:24:d0:05:c4:98:
fb:cc:d0:4f:fb:df:d0:7c:b0:77:0b:f5:87:56:ef:
bd:3f:f2:46:2d:93:cd:7c:fc:1b:a3:9a:b9:fc:24:
ad:8e:ae:2f:44:2c:fd:a4:c3:08:fa:79:48:de:0c:
c9:71:d5:17:96:69:0c:e0:36:d0:97:4f:63:83:f5:
0a:cb:14:f6:63:ff:0c:73:98:51:f4:16:13:30:b7:
18:67:3e:fe:ed:c1:3a:f8:a6:46:ae:6c:b7:23:8b:
41:71:15:49:47:dc:2b:4b:46:17:26:0b:95:28:e7:
8a:13:3b:55:29:b7:dc:43:5f:ef:a3:83:25:5a:2f:
16:30:a6:6a:ec:a6:42:3f:a8:e4:d8:2b:0e:2e:ae:
4f:b1:a4:e0:94:c3:f3:57:69:5f:db:0a:55:78:a0:
35:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DB:03:91:0B:2D:F8:A5:AA:53:C7:1C:15:3A:B1:81:9A:EA:E6:21
X509v3 Authority Key Identifier:
keyid:51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b9:25:6d:92:fd:63:e9:87:4c:c8:89:7e:da:f4:4b:f7:29:
10:91:0d:a2:00:e7:68:4a:f2:0d:39:c5:0c:18:41:6b:e3:36:
d1:19:09:75:a9:75:78:10:1d:63:83:ce:20:ff:fc:da:ba:de:
f4:6b:3f:e6:03:9c:8b:29:8d:ba:cf:a2:7d:f1:51:7f:36:d9:
ef:ff:62:bc:e7:e4:e0:16:c1:eb:54:46:8a:ba:59:5b:bd:17:
aa:cf:89:8f:fc:4f:b7:fe:98:f8:de:e4:fa:d9:8f:7d:4e:9a:
62:3a:44:89:47:cc:10:c7:42:5e:71:d6:7c:f7:2e:b9:30:f5:
c4:89:e7:7c:d8:fe:69:c1:3b:da:8f:64:11:4c:84:9a:e7:08:
84:38:c3:6c:70:c0:81:72:f2:dd:09:80:90:0c:fb:5f:66:60:
c0:9f:eb:0b:38:6a:88:0b:f1:00:d9:b2:ca:cb:fc:f8:e9:c8:
5d:86:c9:b2:73:9a:5d:18:27:74:ce:a1:7a:c8:76:5d:be:f7:
0c:db:ba:06:de:39:2e:e9:fa:91:b3:f9:39:c8:6e:34:47:78:
d1:ae:e0:99:f8:c6:9d:b3:94:84:06:bc:51:35:73:01:1c:e3:
82:3f:57:82:05:3e:5a:0f:4d:30:64:cc:07:e4:da:5c:e6:b6:
7b:8d:89:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXNa3+duHHVuy5ZDcdgA1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxODhkZWRhY2RjMjQwYjRiMmY3ODZmMTIzNDJlMGE4M2Q4
YWU4MGYwHhcNMjUxMTExMTAwMTE4WhcNMjUxMTEyMTAwMTE4WjAzMTEwLwYDVQQD
EyhmNWRiMDM5MTBiMmRmOGE1YWE1M2M3MWMxNTNhYjE4MTlhZWFlNjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH8LrzRv7kfwhrgvsjfcVkjDWZng
JebbhO1cpz0ET3GkGFszfNKAsqOHLEEZNs4qIoZSl5XaR+7urkcBK3sP67oh7I4P
VxVVz6Y00qtkO5M3PRMXqukFqK0pSfI4QgegZDWqJNAFxJj7zNBP+9/QfLB3C/WH
Vu+9P/JGLZPNfPwbo5q5/CStjq4vRCz9pMMI+nlI3gzJcdUXlmkM4DbQl09jg/UK
yxT2Y/8Mc5hR9BYTMLcYZz7+7cE6+KZGrmy3I4tBcRVJR9wrS0YXJguVKOeKEztV
KbfcQ1/vo4MlWi8WMKZq7KZCP6jk2CsOLq5PsaTglMPzV2lf2wpVeKA1ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXbA5ELLfilqlPHHBU6sYGa6uYhMB8GA1UdIwQY
MBaAFFGI3trNwkC0sveG8SNC4Kg9iugPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVlqZTJzM0NRTFN5OTRieEkwTGdxRDJLNkE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xZmFhM2UtODg0Yy00NDVmLTg0NWQt
NzliM2RiNjU5ZGZjLzEvVVlqZTJzM0NRTFN5OTRieEkwTGdxRDJLNkE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xZmFhM2UtODg0Yy00NDVmLTg0NWQtNzliM2RiNjU5ZGZj
LzEvVVlqZTJzM0NRTFN5OTRieEkwTGdxRDJLNkE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACrklbZL9
Y+mHTMiJftr0S/cpEJENogDnaEryDTnFDBhBa+M20RkJdal1eBAdY4POIP/82rre
9Gs/5gOciymNus+iffFRfzbZ7/9ivOfk4BbB61RGirpZW70Xqs+Jj/xPt/6Y+N7k
+tmPfU6aYjpEiUfMEMdCXnHWfPcuuTD1xInnfNj+acE72o9kEUyEmucIhDjDbHDA
gXLy3QmAkAz7X2ZgwJ/rCzhqiAvxANmyysv8+OnIXYbJsnOaXRgndM6hesh2Xb73
DNu6Bt45Lun6kbP5OchuNEd40a7gmfjGnbOUhAa8UTVzARzjgj9XggU+Wg9NMGTM
B+TaXOa2e42Jnw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:01 2025 by rpki-client