Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
File: UjC2XWEW1LYNNv33tsbV5blUY54.mft (raw, json)
Hash identifier: HYwlG37OrC7xAYZA8cAnQqkVVMG9dbITi8y3vFH9BUs=
Subject key identifier: ED:BB:1C:98:95:D0:D1:27:7F:15:50:32:46:BB:77:2E:E9:F7:8D:AB
Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Certificate serial: 019E3072C31033325765FD8D741DFBAB0521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
Manifest number: 1913
Signing time: Sat 16 May 2026 11:01:27 +0000
Manifest this update: Sat 16 May 2026 11:01:27 +0000
Manifest next update: Sun 17 May 2026 11:01:27 +0000
Files and hashes: 1: UjC2XWEW1LYNNv33tsbV5blUY54.crl (hash: Xp8V82uDIphqcGI8dJJEdafYN8pVhPHSN19oSQJAtSY=)
2: YDTabDi8KIiVn2g5g0ARZ4FOj6Y.roa (hash: 4uSS/xcfK9YISuyI1M3a8VYQt60GXuC8eBgPt3hFnMw=)
3: sLh8Z3ykKeKmTd5LP1t35ARuEh0.roa (hash: g77XM78yPqe/jsFF9utIzh8pLf0nSfOh1N48HUcncso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:c3:10:33:32:57:65:fd:8d:74:1d:fb:ab:05:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Validity
Not Before: May 16 11:01:27 2026 GMT
Not After : May 17 11:01:27 2026 GMT
Subject: CN=edbb1c9895d0d1277f15503246bb772ee9f78dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c3:72:28:9e:89:57:86:99:f8:6b:e9:6d:48:
98:f0:61:2a:a6:78:c3:af:f9:ec:0a:c2:9c:02:24:
fc:a0:89:30:64:4d:01:55:86:22:cf:33:52:4e:db:
1f:60:60:3e:4d:cc:62:d4:f2:9d:a0:72:04:35:bc:
f1:77:ca:75:84:a7:3c:33:28:e4:8b:8e:2d:27:a6:
18:bb:52:be:16:49:af:ee:85:49:00:97:7b:75:e8:
a1:49:87:08:4e:2a:7d:2d:c0:58:f6:5b:a3:d3:bc:
e7:4b:56:6a:3f:e1:48:9c:66:6c:63:d4:3f:d9:79:
86:13:50:7e:84:44:4d:1e:ff:43:3f:dc:b3:cf:21:
2c:b1:ff:f0:91:5d:a8:6e:8e:ca:2d:8c:51:77:55:
62:c8:b4:13:5c:20:f2:61:45:b2:0a:7f:03:8a:ed:
42:86:60:5c:5a:51:09:24:37:60:e5:72:b6:31:3f:
39:e1:a5:22:a7:29:16:aa:ef:1c:f1:e8:bb:16:bb:
3c:9f:9d:02:88:51:a8:96:fa:f9:7d:d0:69:9c:c6:
82:5b:e6:36:fb:0a:ca:2b:b4:09:b1:24:c5:70:02:
63:d1:b2:27:cb:06:ec:22:64:d6:6e:18:98:5b:0f:
f9:d2:ed:0e:35:80:a2:ba:44:86:67:d5:0a:f9:78:
8c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BB:1C:98:95:D0:D1:27:7F:15:50:32:46:BB:77:2E:E9:F7:8D:AB
X509v3 Authority Key Identifier:
keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fc:11:49:14:7e:5f:73:27:4b:4d:a7:93:dd:70:fa:d0:a4:
70:f8:73:e4:77:00:c8:7f:34:4e:5a:51:a8:33:71:00:b3:cc:
c3:10:d7:2e:ed:7d:9a:42:12:2c:9f:72:19:08:5b:cb:d6:59:
94:36:f9:ef:09:8b:3a:49:ec:8c:79:41:7e:f0:57:0f:c3:16:
e2:74:d3:48:04:c4:78:c5:52:bb:5f:3e:17:3f:5a:1d:2a:db:
72:df:ad:1b:09:4d:98:37:68:58:99:69:fe:cf:cb:ca:aa:52:
38:5e:e9:0f:0e:2a:38:4a:c1:17:a7:ff:f9:0e:61:f3:4f:de:
03:26:dc:81:f7:dc:76:0f:a1:16:3d:a4:5e:46:89:44:39:ea:
76:54:59:eb:73:dc:be:47:18:15:28:ac:f2:23:a1:85:9e:e5:
36:dc:5a:e6:4d:be:a9:1f:78:8a:bc:af:48:d8:31:5b:f1:dc:
c1:bb:83:9c:0c:a9:d6:d4:bf:69:7e:70:28:e1:1f:7a:63:9a:
c0:01:47:c2:79:12:65:d9:22:87:e2:89:94:2b:df:3c:15:4c:
36:3b:6f:97:56:c0:2a:c3:49:6b:4a:26:8c:b6:fc:65:b1:f9:
e0:ed:9b:1b:b6:80:b8:eb:f3:e4:b6:a0:f1:a0:5c:a9:7c:65:
6d:08:fd:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wcsMQMzJXZf2NdB37qwUhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMzBiNjVkNjExNmQ0YjYwZDM2ZmRmN2I2YzZkNWU1Yjk1
NDYzOWUwHhcNMjYwNTE2MTEwMTI3WhcNMjYwNTE3MTEwMTI3WjAzMTEwLwYDVQQD
EyhlZGJiMWM5ODk1ZDBkMTI3N2YxNTUwMzI0NmJiNzcyZWU5Zjc4ZGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MNyKJ6JV4aZ+GvpbUiY8GEqpnjD
r/nsCsKcAiT8oIkwZE0BVYYizzNSTtsfYGA+Tcxi1PKdoHIENbzxd8p1hKc8Myjk
i44tJ6YYu1K+Fkmv7oVJAJd7deihSYcITip9LcBY9luj07znS1ZqP+FInGZsY9Q/
2XmGE1B+hERNHv9DP9yzzyEssf/wkV2obo7KLYxRd1ViyLQTXCDyYUWyCn8Diu1C
hmBcWlEJJDdg5XK2MT854aUipykWqu8c8ei7Frs8n50CiFGolvr5fdBpnMaCW+Y2
+wrKK7QJsSTFcAJj0bInywbsImTWbhiYWw/50u0ONYCiukSGZ9UK+XiMpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO27HJiV0NEnfxVQMka7dy7p942rMB8GA1UdIwQY
MBaAFFIwtl1hFtS2DTb997bG1eW5VGOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mYWRmZjYtNWNjMC00Njk0LTljNjIt
MTM1OGMyYjVkNTQxLzEvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9mYWRmZjYtNWNjMC00Njk0LTljNjItMTM1OGMyYjVkNTQx
LzEvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPwRSRR+
X3MnS02nk91w+tCkcPhz5HcAyH80TlpRqDNxALPMwxDXLu19mkISLJ9yGQhby9ZZ
lDb57wmLOknsjHlBfvBXD8MW4nTTSATEeMVSu18+Fz9aHSrbct+tGwlNmDdoWJlp
/s/LyqpSOF7pDw4qOErBF6f/+Q5h80/eAybcgffcdg+hFj2kXkaJRDnqdlRZ63Pc
vkcYFSis8iOhhZ7lNtxa5k2+qR94iryvSNgxW/HcwbuDnAyp1tS/aX5wKOEfemOa
wAFHwnkSZdkih+KJlCvfPBVMNjtvl1bAKsNJa0omjLb8ZbH54O2bG7aAuOvz5Lag
8aBcqXxlbQj9AA==
-----END CERTIFICATE-----
Generated at Sat May 16 21:12:46 2026 by rpki-client