Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
File: UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft (raw, json)
Hash identifier: 0CaGAIPQWcVYh6Ks4aqYvTEZa+ZzYseERISjjTFXhj4=
Subject key identifier: FC:FF:D3:9E:95:E1:0F:F0:87:90:54:C5:6A:C3:4B:9B:87:8B:4D:99
Authority key identifier: 51:3B:DF:EC:55:B0:48:B0:D2:F0:3B:43:BF:66:E3:E6:7E:86:55:3F
Certificate issuer: /CN=513bdfec55b048b0d2f03b43bf66e3e67e86553f
Certificate serial: 019D371BFFD408138C4B6B54A372851EC484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
Manifest number: 1631
Signing time: Sun 29 Mar 2026 01:01:14 +0000
Manifest this update: Sun 29 Mar 2026 01:01:14 +0000
Manifest next update: Mon 30 Mar 2026 01:01:14 +0000
Files and hashes: 1: UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl (hash: fxug6ixGRWO3mlKMS28Rr6YUkj08aNjSQS9hSVwXEsw=)
2: xhHlMs8V-oVtGZTag2-dr0XM40o.roa (hash: 7w/XbPL00KDOhcqVYw/WDbhjmiBSuWyGqB7xgQc6Wmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:ff:d4:08:13:8c:4b:6b:54:a3:72:85:1e:c4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=513bdfec55b048b0d2f03b43bf66e3e67e86553f
Validity
Not Before: Mar 29 01:01:14 2026 GMT
Not After : Mar 30 01:01:14 2026 GMT
Subject: CN=fcffd39e95e10ff0879054c56ac34b9b878b4d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:2d:a8:56:71:e8:31:54:4b:45:dd:3e:ef:
1a:cf:7a:8a:db:b7:9f:6a:c4:eb:4c:f3:e9:91:8d:
36:40:b6:7e:cd:55:c2:d6:02:0d:4b:18:b8:1d:6f:
ab:ac:2f:cc:0b:21:ea:0a:0e:08:f9:2f:73:f3:ed:
f9:7d:32:40:bc:22:71:f9:3f:7e:d5:09:74:2f:70:
74:c5:ff:03:44:8f:a3:ea:fe:20:3a:11:2c:38:db:
23:30:22:35:69:3a:79:25:f3:bc:f6:41:7c:ec:19:
e8:b8:fd:8b:c2:62:99:29:b2:01:7a:3f:19:df:63:
59:1b:ba:2c:e8:e5:3d:51:b9:fc:77:b2:74:eb:fe:
f2:70:86:84:92:dd:e3:22:e5:51:c4:06:95:6a:a5:
c8:fa:ce:0b:ba:a1:65:03:63:43:27:88:ec:98:eb:
93:83:67:a4:f7:59:f1:28:e3:f6:62:2d:ae:4d:71:
9c:2d:e4:06:0d:41:a2:9b:7e:5d:cb:b8:77:6d:f1:
5b:c7:83:0e:ee:88:48:d5:c8:9f:21:00:2c:5d:93:
86:3e:59:13:5b:f4:dd:89:78:4e:70:59:f3:b3:20:
d5:29:07:0c:1b:e3:35:d8:bf:a0:44:e9:1f:64:c2:
74:80:f0:28:7b:48:d9:6c:e8:50:8a:5a:95:24:2c:
99:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FF:D3:9E:95:E1:0F:F0:87:90:54:C5:6A:C3:4B:9B:87:8B:4D:99
X509v3 Authority Key Identifier:
keyid:51:3B:DF:EC:55:B0:48:B0:D2:F0:3B:43:BF:66:E3:E6:7E:86:55:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:44:ac:48:43:cb:39:b4:1d:45:0e:35:fc:df:37:52:cc:3b:
4f:7c:89:ac:3a:e9:3e:00:9b:b4:fd:11:cf:11:66:11:6d:ce:
28:42:53:81:31:2e:9f:7c:06:29:b5:cc:57:1d:78:9d:dd:b5:
31:13:28:d8:94:84:3b:e8:86:f5:dd:8b:ee:e6:fc:5d:d8:5c:
fa:7d:09:93:2f:0e:d3:3b:a3:32:a8:7e:90:02:d4:57:f3:75:
c2:65:2c:12:d4:de:83:f7:5c:32:65:7c:32:aa:2f:6d:82:cb:
dd:29:80:55:39:3b:1d:c9:be:74:fc:62:f5:0c:ca:38:85:4e:
4b:b5:42:b7:70:9c:69:fc:95:6b:0c:fc:53:b5:72:7f:85:45:
5d:67:98:71:58:9d:60:61:64:32:5d:14:39:46:a1:8d:3c:41:
f5:08:ad:a7:f7:62:59:4a:4d:60:4a:8d:4b:73:33:f0:5f:d3:
1e:24:19:88:1a:76:eb:68:e5:ee:79:d4:ea:d0:45:95:aa:27:
91:70:7d:37:f1:5f:21:bf:92:ed:c2:01:f7:72:6b:13:1a:36:
e4:31:e3:b2:9c:33:c8:c0:aa:13:c0:24:a6:74:4b:6d:ed:1e:
14:0e:c5:b2:5f:a0:41:d1:e6:e8:e0:4e:e1:8d:6f:40:f4:cf:
59:53:9b:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G//UCBOMS2tUo3KFHsSEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxM2JkZmVjNTViMDQ4YjBkMmYwM2I0M2JmNjZlM2U2N2U4
NjU1M2YwHhcNMjYwMzI5MDEwMTE0WhcNMjYwMzMwMDEwMTE0WjAzMTEwLwYDVQQD
EyhmY2ZmZDM5ZTk1ZTEwZmYwODc5MDU0YzU2YWMzNGI5Yjg3OGI0ZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr50tqFZx6DFUS0XdPu8az3qK27ef
asTrTPPpkY02QLZ+zVXC1gINSxi4HW+rrC/MCyHqCg4I+S9z8+35fTJAvCJx+T9+
1Ql0L3B0xf8DRI+j6v4gOhEsONsjMCI1aTp5JfO89kF87BnouP2LwmKZKbIBej8Z
32NZG7os6OU9Ubn8d7J06/7ycIaEkt3jIuVRxAaVaqXI+s4LuqFlA2NDJ4jsmOuT
g2ek91nxKOP2Yi2uTXGcLeQGDUGim35dy7h3bfFbx4MO7ohI1cifIQAsXZOGPlkT
W/TdiXhOcFnzsyDVKQcMG+M12L+gROkfZMJ0gPAoe0jZbOhQilqVJCyZPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPz/056V4Q/wh5BUxWrDS5uHi02ZMB8GA1UdIwQY
MBaAFFE73+xVsEiw0vA7Q79m4+Z+hlU/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVR2ZjdGV3dTTERTOER0RHYyYmo1bjZHVlQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jYmU2OTUtZDJkOS00ZDZmLTg3ZTIt
YTFjY2U2ZjgwY2EzLzEvVVR2ZjdGV3dTTERTOER0RHYyYmo1bjZHVlQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9jYmU2OTUtZDJkOS00ZDZmLTg3ZTItYTFjY2U2ZjgwY2Ez
LzEvVVR2ZjdGV3dTTERTOER0RHYyYmo1bjZHVlQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxkSsSEPL
ObQdRQ41/N83Usw7T3yJrDrpPgCbtP0RzxFmEW3OKEJTgTEun3wGKbXMVx14nd21
MRMo2JSEO+iG9d2L7ub8Xdhc+n0Jky8O0zujMqh+kALUV/N1wmUsEtTeg/dcMmV8
MqovbYLL3SmAVTk7Hcm+dPxi9QzKOIVOS7VCt3CcafyVawz8U7Vyf4VFXWeYcVid
YGFkMl0UOUahjTxB9Qitp/diWUpNYEqNS3Mz8F/THiQZiBp262jl7nnU6tBFlaon
kXB9N/FfIb+S7cIB93JrExo25DHjspwzyMCqE8AkpnRLbe0eFA7Fsl+gQdHm6OBO
4Y1vQPTPWVObJg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:34 2026 by rpki-client