Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
File: M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft (raw, json)
Hash identifier: NUKIj05TQxZTW7E86d+IRhAgQqiH3rHyNswumgtS00U=
Subject key identifier: A6:FA:5F:AF:3E:2F:20:E1:23:BC:33:80:1D:50:F0:05:3E:97:54:26
Authority key identifier: 33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8
Certificate issuer: /CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8
Certificate serial: 019D3865FB31EF6EB1681EA2E3C2DA386600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
Manifest number: 161C
Signing time: Sun 29 Mar 2026 07:01:40 +0000
Manifest this update: Sun 29 Mar 2026 07:01:40 +0000
Manifest next update: Mon 30 Mar 2026 07:01:40 +0000
Files and hashes: 1: M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl (hash: UHTai3zlgcqGlMUolILIrX8pJH6kJqmnRij4WTatJw4=)
2: Zy79mWZxVkZBlZ2rnp-zcouMF8Y.roa (hash: 3dKfDLWPx4SPhtrGmyl80Hv9zqYxVlUTJ6doGiqefpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:fb:31:ef:6e:b1:68:1e:a2:e3:c2:da:38:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8
Validity
Not Before: Mar 29 07:01:40 2026 GMT
Not After : Mar 30 07:01:40 2026 GMT
Subject: CN=a6fa5faf3e2f20e123bc33801d50f0053e975426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:f0:bb:c8:f1:19:4c:2b:dd:92:91:4e:51:
35:2a:c9:49:2a:15:08:30:10:6a:84:5e:d5:eb:2e:
22:0d:a0:9e:17:42:ed:68:a4:6a:33:78:82:b4:0c:
63:52:69:1e:a3:d3:48:ba:a0:cb:1a:b6:1b:61:9f:
50:f3:6b:46:48:9d:fc:a5:d5:48:65:79:d3:7e:d8:
f5:1c:5d:29:b9:42:38:c6:a0:11:09:77:eb:fd:45:
8d:32:1a:50:42:03:4f:cb:cb:49:55:10:4f:e2:42:
4b:43:3e:b4:b0:c6:7b:f7:95:fb:86:a7:f4:6d:9e:
e0:ee:ef:44:58:6a:be:f2:0e:3b:79:2f:bb:3d:2c:
e9:72:cc:49:1f:64:11:07:3d:46:bd:68:51:db:24:
c9:20:0f:12:34:ae:9b:9d:c5:b8:c8:89:99:ab:d8:
97:08:70:f0:df:71:af:c0:1e:f1:c0:9c:54:2d:3f:
d6:57:ec:42:6c:65:52:57:7a:2c:a8:4f:a0:7e:64:
ef:27:fe:22:2e:f7:49:d2:51:96:c5:a5:5e:15:e6:
96:77:9e:95:f9:c2:42:60:39:a8:59:4c:61:92:10:
56:26:f7:91:51:62:32:f8:bf:31:bc:f6:5a:9b:a7:
a4:0a:9d:2c:57:38:44:e9:8e:88:5a:41:63:b6:c8:
34:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FA:5F:AF:3E:2F:20:E1:23:BC:33:80:1D:50:F0:05:3E:97:54:26
X509v3 Authority Key Identifier:
keyid:33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1e:ef:89:d1:a0:79:b2:63:a3:5e:63:65:76:16:a8:02:9f:
3a:c6:0a:f3:24:26:6e:f8:25:df:31:85:25:b8:59:64:3e:db:
96:d9:25:0c:df:25:5c:69:97:b9:ae:f3:ac:63:33:67:f8:26:
59:db:3c:00:4e:5e:41:79:1f:97:da:01:1b:4f:cd:02:50:2d:
84:af:50:ef:ce:ac:f8:f0:31:8e:ad:67:3d:c5:d4:1e:fd:a4:
4c:49:ff:6a:ea:85:4f:4e:2c:aa:47:16:7b:ef:a3:7f:1a:6f:
dc:e6:18:e4:1b:3e:35:d9:5d:d3:18:35:72:74:36:c4:a6:b5:
05:30:7a:27:c6:70:90:0f:cc:de:f7:e2:d6:a1:f1:fc:5f:f2:
a8:80:ec:15:b1:b2:4e:1f:07:53:e1:b2:00:8a:fa:9a:7a:7c:
df:cd:f3:ab:f2:ba:25:23:c5:4b:17:b8:f5:b0:32:7f:50:3f:
16:20:a4:5f:9a:95:25:0e:2d:20:b0:da:94:5f:32:be:4f:13:
f0:da:e4:9f:b7:bf:e3:3b:b2:fe:7a:b1:a6:d4:88:1a:66:e6:
67:de:70:74:e5:ef:2e:bd:9b:ce:08:6e:bf:05:39:7c:3d:53:
95:bc:57:d5:5c:a0:4a:a2:af:25:23:62:56:ae:33:cd:fd:f7:
67:8c:4b:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zfsx726xaB6i48LaOGYAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZjUwYThkZTk3MWY4NTQ3ZjViNTZjOTdjMzZjMjg3ZWY1
NGJkYjgwHhcNMjYwMzI5MDcwMTQwWhcNMjYwMzMwMDcwMTQwWjAzMTEwLwYDVQQD
EyhhNmZhNWZhZjNlMmYyMGUxMjNiYzMzODAxZDUwZjAwNTNlOTc1NDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqbwu8jxGUwr3ZKRTlE1KslJKhUI
MBBqhF7V6y4iDaCeF0LtaKRqM3iCtAxjUmkeo9NIuqDLGrYbYZ9Q82tGSJ38pdVI
ZXnTftj1HF0puUI4xqARCXfr/UWNMhpQQgNPy8tJVRBP4kJLQz60sMZ795X7hqf0
bZ7g7u9EWGq+8g47eS+7PSzpcsxJH2QRBz1GvWhR2yTJIA8SNK6bncW4yImZq9iX
CHDw33GvwB7xwJxULT/WV+xCbGVSV3osqE+gfmTvJ/4iLvdJ0lGWxaVeFeaWd56V
+cJCYDmoWUxhkhBWJveRUWIy+L8xvPZam6ekCp0sVzhE6Y6IWkFjtsg0sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKb6X68+LyDhI7wzgB1Q8AU+l1QmMB8GA1UdIwQY
MBaAFDP1Co3pcfhUf1tWyXw2wofvVL24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTV9VS2plbHgtRlJfVzFiSmZEYkNoLTlVdmJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jOGZkMDctZDVjNy00ZWQzLTgwNzUt
Mjc0ZjEwYTVlMWUzLzEvTV9VS2plbHgtRlJfVzFiSmZEYkNoLTlVdmJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9jOGZkMDctZDVjNy00ZWQzLTgwNzUtMjc0ZjEwYTVlMWUz
LzEvTV9VS2plbHgtRlJfVzFiSmZEYkNoLTlVdmJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAih7vidGg
ebJjo15jZXYWqAKfOsYK8yQmbvgl3zGFJbhZZD7bltklDN8lXGmXua7zrGMzZ/gm
Wds8AE5eQXkfl9oBG0/NAlAthK9Q786s+PAxjq1nPcXUHv2kTEn/auqFT04sqkcW
e++jfxpv3OYY5Bs+Ndld0xg1cnQ2xKa1BTB6J8ZwkA/M3vfi1qHx/F/yqIDsFbGy
Th8HU+GyAIr6mnp8383zq/K6JSPFSxe49bAyf1A/FiCkX5qVJQ4tILDalF8yvk8T
8Nrkn7e/4zuy/nqxptSIGmbmZ95wdOXvLr2bzghuvwU5fD1TlbxX1VygSqKvJSNi
Vq4zzf33Z4xL4g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:10 2026 by rpki-client