Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft
File: UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft (raw, json)
Hash identifier: FzEYa/rq60XE9ODqwL9oEaHbGOOdtBr1m95wRfLPf4A=
Subject key identifier: 78:C7:7A:14:0A:5A:24:8D:C8:E4:CE:00:A9:F9:CD:0B:08:E8:1F:73
Authority key identifier: 51:40:B5:CB:59:86:08:41:26:F6:8D:60:32:31:6D:3B:1B:57:69:6E
Certificate issuer: /CN=5140b5cb5986084126f68d6032316d3b1b57696e
Certificate serial: 019D37C0AAF187D9F99C6FCAD0EDE89AD9EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 04:01:06 +0000
Manifest this update: Sun 29 Mar 2026 04:01:06 +0000
Manifest next update: Mon 30 Mar 2026 04:01:06 +0000
Files and hashes: 1: BU-lqOTzhTE1FvYIzC5QIIuVdd4.roa (hash: URaXV7GxrC/TlLgNF/7cDgKoz0MGZy0H3auR+9Eshag=)
2: UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl (hash: CtawmLIwEw0aPSLEvUlGMSoiDEFGAC3ggHe7k7a1Rv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:aa:f1:87:d9:f9:9c:6f:ca:d0:ed:e8:9a:d9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5140b5cb5986084126f68d6032316d3b1b57696e
Validity
Not Before: Mar 29 04:01:06 2026 GMT
Not After : Mar 30 04:01:06 2026 GMT
Subject: CN=78c77a140a5a248dc8e4ce00a9f9cd0b08e81f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:99:9e:e5:e4:98:3e:1e:7c:00:ab:b7:b4:
6f:eb:d4:01:87:71:d0:24:02:9b:31:60:1f:78:3e:
4e:97:8a:36:cb:9e:be:21:41:a7:82:8c:54:a0:5b:
31:a5:ca:55:58:ae:44:0f:8b:b1:78:ec:9b:b8:e9:
3d:9f:f5:36:2b:a9:27:8b:8b:ac:2d:c5:ec:f8:7b:
50:d5:fd:cf:18:6f:d6:ea:63:b3:e2:fa:bc:8b:cb:
06:35:4d:30:e7:10:d3:8b:2c:32:ff:5f:63:fc:91:
e1:71:63:c0:f4:db:6e:30:d2:85:b1:68:01:7e:e0:
4b:55:83:4f:dc:fe:c2:d6:8c:a5:04:3d:74:ce:97:
f6:69:fe:a3:a7:0b:55:26:cc:22:7b:7b:dd:75:bb:
0d:a8:e4:ba:32:be:c5:01:ed:15:c4:97:27:e8:db:
63:00:38:3c:66:65:6a:31:0f:19:04:1c:95:36:0e:
df:1c:2f:73:3b:10:2e:74:51:4f:66:8c:ae:ef:04:
b1:ed:cd:6b:71:e2:7c:b7:42:c6:6e:2d:b8:05:68:
87:d6:1d:4b:18:0a:2b:08:a5:1f:16:e3:06:42:58:
0d:30:53:59:11:d0:6d:8b:0a:89:9a:0a:88:7e:6b:
96:87:8a:40:da:2b:00:f5:a3:14:94:d3:8a:3d:6f:
9d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C7:7A:14:0A:5A:24:8D:C8:E4:CE:00:A9:F9:CD:0B:08:E8:1F:73
X509v3 Authority Key Identifier:
keyid:51:40:B5:CB:59:86:08:41:26:F6:8D:60:32:31:6D:3B:1B:57:69:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:52:05:d0:61:12:3d:24:f8:30:df:5c:cb:93:09:b4:7c:d6:
38:51:8d:74:9d:fc:7c:78:d5:25:48:66:b2:5e:32:e4:07:53:
0c:e1:42:dd:dc:9d:23:af:6d:b7:ea:84:42:92:2f:6b:e9:80:
93:b3:6b:ba:56:86:66:16:d9:2f:8a:1a:f3:94:aa:e5:6a:cc:
54:a2:82:5e:9b:01:98:09:75:62:1e:0b:b8:b1:54:24:c4:7a:
68:c0:0e:9e:6d:df:43:10:97:4f:77:d0:76:c5:67:be:07:64:
a8:ae:e9:bb:81:fa:5f:dd:52:a7:c3:0f:9b:69:a1:35:74:81:
44:d2:dc:ab:37:e8:ef:9e:22:12:0c:34:90:c6:38:5e:09:6c:
97:e1:79:90:7a:e0:60:f6:72:52:c4:dc:d4:fe:a7:d1:03:a9:
92:b1:5a:39:5c:b8:c6:53:5f:ed:81:1c:be:99:bd:bf:2f:34:
51:ea:3a:b8:29:09:e3:cd:c2:be:81:35:9e:f0:4c:3b:f0:f1:
77:b9:7f:a3:4f:e2:31:e8:83:2e:ac:43:b7:d0:47:6c:e8:ab:
a3:44:bc:3d:a4:08:73:4e:4c:d8:5d:6c:52:e5:18:50:0e:09:
c5:11:ab:69:6f:06:1b:99:20:e0:fd:64:fc:0b:c0:73:ee:a8:
01:1f:b7:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wKrxh9n5nG/K0O3omtnvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNDBiNWNiNTk4NjA4NDEyNmY2OGQ2MDMyMzE2ZDNiMWI1
NzY5NmUwHhcNMjYwMzI5MDQwMTA2WhcNMjYwMzMwMDQwMTA2WjAzMTEwLwYDVQQD
Eyg3OGM3N2ExNDBhNWEyNDhkYzhlNGNlMDBhOWY5Y2QwYjA4ZTgxZjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNaZnuXkmD4efACrt7Rv69QBh3HQ
JAKbMWAfeD5Ol4o2y56+IUGngoxUoFsxpcpVWK5ED4uxeOybuOk9n/U2K6kni4us
LcXs+HtQ1f3PGG/W6mOz4vq8i8sGNU0w5xDTiywy/19j/JHhcWPA9NtuMNKFsWgB
fuBLVYNP3P7C1oylBD10zpf2af6jpwtVJswie3vddbsNqOS6Mr7FAe0VxJcn6Ntj
ADg8ZmVqMQ8ZBByVNg7fHC9zOxAudFFPZoyu7wSx7c1rceJ8t0LGbi24BWiH1h1L
GAorCKUfFuMGQlgNMFNZEdBtiwqJmgqIfmuWh4pA2isA9aMUlNOKPW+dDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjHehQKWiSNyOTOAKn5zQsI6B9zMB8GA1UdIwQY
MBaAFFFAtctZhghBJvaNYDIxbTsbV2luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVVDMXkxbUdDRUVtOW8xZ01qRnRPeHRYYVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9kMTlmMmQtOTY1OS00OGIxLWIxZTgt
ZGUxM2E1NTJkZjYzLzEvVVVDMXkxbUdDRUVtOW8xZ01qRnRPeHRYYVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9kMTlmMmQtOTY1OS00OGIxLWIxZTgtZGUxM2E1NTJkZjYz
LzEvVVVDMXkxbUdDRUVtOW8xZ01qRnRPeHRYYVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVIF0GES
PST4MN9cy5MJtHzWOFGNdJ38fHjVJUhmsl4y5AdTDOFC3dydI69tt+qEQpIva+mA
k7NrulaGZhbZL4oa85Sq5WrMVKKCXpsBmAl1Yh4LuLFUJMR6aMAOnm3fQxCXT3fQ
dsVnvgdkqK7pu4H6X91Sp8MPm2mhNXSBRNLcqzfo754iEgw0kMY4Xglsl+F5kHrg
YPZyUsTc1P6n0QOpkrFaOVy4xlNf7YEcvpm9vy80Ueo6uCkJ483CvoE1nvBMO/Dx
d7l/o0/iMeiDLqxDt9BHbOiro0S8PaQIc05M2F1sUuUYUA4JxRGraW8GG5kg4P1k
/AvAc+6oAR+3sQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:42 2026 by rpki-client