Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
File: UFbHUIQP5cAQOn9RAix87qj-lps.mft (raw, json)
Hash identifier: rQGivFP3mGFSEmUyizI4dmemTcUi5iYL8GEZaKfzD/8=
Subject key identifier: E7:9A:BE:4A:24:35:1C:70:DD:66:C6:1D:F5:03:B5:A7:37:47:A7:83
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Certificate issuer: /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial: 019CE47EE13E7495A548C31F71902D7D8658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
Manifest number: 1863
Signing time: Fri 13 Mar 2026 00:00:46 +0000
Manifest this update: Fri 13 Mar 2026 00:00:46 +0000
Manifest next update: Sat 14 Mar 2026 00:00:46 +0000
Files and hashes: 1: 3pROUsGuo7256asAZirwtFY6aCY.roa (hash: ceI+qtS5lvi6YoUYDhE0QVXLVsFmdB8++Mmxjm4VsCg=)
2: 4MWEzdPSupDJZ_Gz5zFt8fSfRP8.roa (hash: fzAcdI2YeHgptFoCa+cHCUdnXZqAYdQFW10Ox2+xnFU=)
3: UFbHUIQP5cAQOn9RAix87qj-lps.crl (hash: 4WW7i4AyzNlix9MCPkWl4jHGQ/XfAH2ZvTpCBNK1i3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7e:e1:3e:74:95:a5:48:c3:1f:71:90:2d:7d:86:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Validity
Not Before: Mar 13 00:00:46 2026 GMT
Not After : Mar 14 00:00:46 2026 GMT
Subject: CN=e79abe4a24351c70dd66c61df503b5a73747a783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:0d:ff:36:38:e6:73:db:74:e4:b6:65:aa:
10:07:b9:a8:6b:4b:cc:26:9e:58:f7:88:86:4a:96:
bd:eb:47:1f:a5:13:1a:bc:3f:e7:84:94:3b:5b:8b:
df:1c:0e:f0:73:e0:97:88:12:7e:1d:60:5f:04:0c:
e7:d1:94:84:b3:48:0e:1a:31:8b:17:b5:9c:a9:08:
dc:9f:20:27:60:46:2a:90:a5:82:dd:94:1c:1c:8f:
e2:44:fc:9a:5c:4b:da:ab:8f:c1:95:df:36:e6:21:
01:16:39:3d:0b:6e:5b:66:f3:8d:98:8b:ad:a5:33:
92:98:f6:c3:df:33:ae:b0:55:8e:52:b1:ff:05:fd:
47:9c:90:65:ca:5b:cc:c4:42:94:86:96:25:ee:7b:
92:9e:7a:af:65:e4:e9:40:d5:bf:c7:69:2f:ad:6f:
59:e0:b3:cc:49:42:41:e6:e1:1e:58:99:0d:29:0e:
54:e9:f9:c8:5d:f0:3f:95:51:93:3e:47:b5:1d:31:
c5:17:14:b3:d5:27:fe:4d:db:99:20:bd:d9:37:74:
95:bd:9a:5e:be:28:a5:82:19:89:42:6d:f3:59:85:
85:ff:84:54:03:1c:ae:5d:65:8f:0e:72:86:33:8e:
b8:13:6c:a6:ad:f6:64:38:e1:8d:a0:b5:ff:ca:7b:
95:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9A:BE:4A:24:35:1C:70:DD:66:C6:1D:F5:03:B5:A7:37:47:A7:83
X509v3 Authority Key Identifier:
keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:96:46:82:a0:0d:37:80:b7:ff:ba:ee:ed:ff:6b:d7:3d:63:
6c:81:2f:f5:7e:87:f8:34:a2:74:13:83:f6:a1:f4:49:23:1b:
ad:a6:d2:b2:49:04:31:3c:9e:5d:70:ce:2b:71:b2:77:e1:4f:
4a:a4:06:20:aa:a6:96:1d:af:ae:c6:02:8b:57:d4:49:97:7d:
18:29:15:c2:df:66:cf:24:ed:2f:97:60:cb:2f:46:e1:3b:3a:
00:d5:5b:05:1a:df:16:81:84:dc:e0:0c:4a:ee:78:94:4c:f2:
33:37:8b:1b:81:b0:ad:46:1c:a8:b9:b6:fa:f6:d3:8a:a0:e9:
89:6e:97:e2:ad:64:15:67:87:7b:32:08:2d:58:15:a2:23:b5:
83:d0:21:79:5f:58:ea:c8:59:48:0b:dc:ce:cb:3f:81:86:94:
43:0f:4c:eb:b1:36:72:4a:70:5d:bb:79:9d:08:29:39:c0:da:
51:5c:71:8c:6c:7a:91:a4:1c:ef:ef:45:9a:6b:db:86:cb:65:
8e:d4:67:9e:fa:25:55:e8:9a:8d:b0:cc:9f:c5:0c:cd:14:f8:
fa:ed:e8:17:c9:20:c4:df:ed:c7:e8:db:54:cc:40:e7:bb:24:
c4:3c:09:be:99:d8:a4:07:b6:3c:51:9e:18:ae:07:cb:5b:70:
22:a3:11:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkfuE+dJWlSMMfcZAtfYZYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTZjNzUwODQwZmU1YzAxMDNhN2Y1MTAyMmM3Y2VlYThm
ZTk2OWIwHhcNMjYwMzEzMDAwMDQ2WhcNMjYwMzE0MDAwMDQ2WjAzMTEwLwYDVQQD
EyhlNzlhYmU0YTI0MzUxYzcwZGQ2NmM2MWRmNTAzYjVhNzM3NDdhNzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6AN/zY45nPbdOS2ZaoQB7moa0vM
Jp5Y94iGSpa960cfpRMavD/nhJQ7W4vfHA7wc+CXiBJ+HWBfBAzn0ZSEs0gOGjGL
F7WcqQjcnyAnYEYqkKWC3ZQcHI/iRPyaXEvaq4/Bld825iEBFjk9C25bZvONmIut
pTOSmPbD3zOusFWOUrH/Bf1HnJBlylvMxEKUhpYl7nuSnnqvZeTpQNW/x2kvrW9Z
4LPMSUJB5uEeWJkNKQ5U6fnIXfA/lVGTPke1HTHFFxSz1Sf+TduZIL3ZN3SVvZpe
viilghmJQm3zWYWF/4RUAxyuXWWPDnKGM464E2ymrfZkOOGNoLX/ynuVtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOeavkokNRxw3WbGHfUDtac3R6eDMB8GA1UdIwQY
MBaAFFBWx1CED+XAEDp/UQIsfO6o/pabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZiSFVJUVA1Y0FRT245UkFpeDg3cWotbHBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8yNTI5NjgtYjhiYS00ZTE5LTg0ZDct
MzIyODI4NmRhNjAxLzEvVUZiSFVJUVA1Y0FRT245UkFpeDg3cWotbHBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8yNTI5NjgtYjhiYS00ZTE5LTg0ZDctMzIyODI4NmRhNjAx
LzEvVUZiSFVJUVA1Y0FRT245UkFpeDg3cWotbHBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi5ZGgqAN
N4C3/7ru7f9r1z1jbIEv9X6H+DSidBOD9qH0SSMbrabSskkEMTyeXXDOK3Gyd+FP
SqQGIKqmlh2vrsYCi1fUSZd9GCkVwt9mzyTtL5dgyy9G4Ts6ANVbBRrfFoGE3OAM
Su54lEzyMzeLG4GwrUYcqLm2+vbTiqDpiW6X4q1kFWeHezIILVgVoiO1g9AheV9Y
6shZSAvczss/gYaUQw9M67E2ckpwXbt5nQgpOcDaUVxxjGx6kaQc7+9Fmmvbhstl
jtRnnvolVeiajbDMn8UMzRT4+u3oF8kgxN/tx+jbVMxA57skxDwJvpnYpAe2PFGe
GK4Hy1twIqMReg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 07:07:05 2026 by rpki-client