Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.mft
File: UW2UBk9zhVXozjZaGVfWnnaICcQ.mft (raw, json)
Hash identifier: gIV3W1tuRS3zwZM0bBn4lllp/0JiIebuwOE1GFQyx0o=
Subject key identifier: 57:F8:6C:F1:14:2F:E0:77:05:7E:FA:44:63:DF:57:D4:EA:63:0F:D4
Authority key identifier: 51:6D:94:06:4F:73:85:55:E8:CE:36:5A:19:57:D6:9E:76:88:09:C4
Certificate issuer: /CN=516d94064f738555e8ce365a1957d69e768809c4
Certificate serial: 019D3865F8D447ECAD6D5239DD894FC39D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UW2UBk9zhVXozjZaGVfWnnaICcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.mft
Manifest number: 0870
Signing time: Sun 29 Mar 2026 07:01:40 +0000
Manifest this update: Sun 29 Mar 2026 07:01:40 +0000
Manifest next update: Mon 30 Mar 2026 07:01:40 +0000
Files and hashes: 1: UW2UBk9zhVXozjZaGVfWnnaICcQ.crl (hash: 4IBRNrHQJiAhVQE7Osz2KBIGiYYPsaPSzFK8IySloWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UW2UBk9zhVXozjZaGVfWnnaICcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f8:d4:47:ec:ad:6d:52:39:dd:89:4f:c3:9d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=516d94064f738555e8ce365a1957d69e768809c4
Validity
Not Before: Mar 29 07:01:40 2026 GMT
Not After : Mar 30 07:01:40 2026 GMT
Subject: CN=57f86cf1142fe077057efa4463df57d4ea630fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:29:cc:4c:fc:e7:99:e2:32:5a:8c:15:7b:6f:
fc:b2:57:2f:a2:b4:59:6e:ec:3f:db:c3:6c:a6:ed:
5c:f9:32:e9:5e:8d:d0:3c:c6:ee:bd:2a:f3:bf:0d:
ed:cc:a0:06:73:37:70:93:2b:46:a4:87:6d:90:a2:
43:0f:89:af:2d:4f:0a:ba:2a:1f:cf:31:00:c2:49:
ce:f7:65:2f:7c:42:ae:c0:69:63:54:f5:32:62:3c:
fe:07:68:e3:4f:5e:99:1f:2e:84:7f:39:ec:aa:62:
75:d2:bc:38:44:aa:a8:10:d8:a0:0c:be:00:97:a2:
17:f9:66:22:b4:da:79:29:9a:6c:6b:f9:a0:30:b8:
ba:22:34:5f:88:70:19:64:c0:0e:09:6b:c7:7b:3d:
b0:17:f1:3d:22:7f:ea:b0:8e:4a:4d:44:85:e4:cf:
e0:57:74:73:66:dc:2c:cb:e0:77:69:30:ed:c5:d7:
81:c4:66:e5:90:af:06:d6:3c:09:ea:fc:c6:30:41:
7b:ae:08:82:f9:89:82:a3:39:6c:40:f6:06:79:6a:
ef:4e:3f:0a:a4:dd:1b:8d:b3:7a:26:2b:64:ea:94:
fe:65:2d:db:f3:4c:02:65:88:df:af:64:76:07:4c:
ec:30:f1:28:da:ce:f6:47:5d:4c:bf:36:a4:e7:62:
b4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F8:6C:F1:14:2F:E0:77:05:7E:FA:44:63:DF:57:D4:EA:63:0F:D4
X509v3 Authority Key Identifier:
keyid:51:6D:94:06:4F:73:85:55:E8:CE:36:5A:19:57:D6:9E:76:88:09:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UW2UBk9zhVXozjZaGVfWnnaICcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:49:12:54:a0:08:85:b8:77:51:73:23:16:46:4b:61:66:37:
50:b2:5a:52:fd:ff:01:1d:eb:46:ba:d7:a9:de:0e:b8:27:5d:
1b:36:2b:fe:3d:48:ec:dd:20:91:ff:cb:27:5b:45:cf:78:9c:
52:ec:1a:fb:2c:12:bd:e4:23:8a:b4:50:9d:06:a7:53:45:75:
64:b9:5f:39:c4:bf:62:18:6d:95:fd:f4:67:0b:c4:ef:69:8b:
56:eb:69:d4:75:cc:35:7c:ee:77:a8:04:b5:34:06:72:79:56:
48:32:f0:65:64:5d:1c:29:7e:49:48:f6:63:95:24:c6:c5:51:
22:4b:03:4d:83:7b:f6:d5:8c:ce:8b:13:9d:cc:01:52:94:8e:
98:36:01:b4:0b:a8:01:0f:09:7b:94:4c:65:45:18:3b:92:62:
67:ed:4d:d1:7c:82:09:01:f6:48:6e:04:20:81:08:70:af:2f:
9a:8b:4a:4a:e6:16:16:62:f7:13:93:53:8e:04:f2:7b:d0:83:
86:c0:7b:77:f4:81:7b:1a:f5:6d:b2:c0:4e:6a:f8:30:e7:a3:
6d:1a:c1:96:85:de:88:28:d8:07:19:60:d5:be:b1:ac:4a:e4:
80:83:21:d7:dd:34:d1:be:2a:0b:01:ca:9e:58:7d:fa:95:46:
e4:dd:12:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZfjUR+ytbVI53YlPw50BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNmQ5NDA2NGY3Mzg1NTVlOGNlMzY1YTE5NTdkNjllNzY4
ODA5YzQwHhcNMjYwMzI5MDcwMTQwWhcNMjYwMzMwMDcwMTQwWjAzMTEwLwYDVQQD
Eyg1N2Y4NmNmMTE0MmZlMDc3MDU3ZWZhNDQ2M2RmNTdkNGVhNjMwZmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SnMTPznmeIyWowVe2/8slcvorRZ
buw/28Nspu1c+TLpXo3QPMbuvSrzvw3tzKAGczdwkytGpIdtkKJDD4mvLU8Kuiof
zzEAwknO92UvfEKuwGljVPUyYjz+B2jjT16ZHy6EfznsqmJ10rw4RKqoENigDL4A
l6IX+WYitNp5KZpsa/mgMLi6IjRfiHAZZMAOCWvHez2wF/E9In/qsI5KTUSF5M/g
V3RzZtwsy+B3aTDtxdeBxGblkK8G1jwJ6vzGMEF7rgiC+YmCozlsQPYGeWrvTj8K
pN0bjbN6Jitk6pT+ZS3b80wCZYjfr2R2B0zsMPEo2s72R11Mvzak52K0lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFf4bPEUL+B3BX76RGPfV9TqYw/UMB8GA1UdIwQY
MBaAFFFtlAZPc4VV6M42WhlX1p52iAnEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVcyVUJrOXpoVlhvempaYUdWZldubmFJQ2NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iODE4OTUtYzYwNS00MWUyLWIyODMt
YzA1NjVmYTg0MGQ0LzEvVVcyVUJrOXpoVlhvempaYUdWZldubmFJQ2NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9iODE4OTUtYzYwNS00MWUyLWIyODMtYzA1NjVmYTg0MGQ0
LzEvVVcyVUJrOXpoVlhvempaYUdWZldubmFJQ2NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0kSVKAI
hbh3UXMjFkZLYWY3ULJaUv3/AR3rRrrXqd4OuCddGzYr/j1I7N0gkf/LJ1tFz3ic
Uuwa+ywSveQjirRQnQanU0V1ZLlfOcS/Yhhtlf30ZwvE72mLVutp1HXMNXzud6gE
tTQGcnlWSDLwZWRdHCl+SUj2Y5UkxsVRIksDTYN79tWMzosTncwBUpSOmDYBtAuo
AQ8Je5RMZUUYO5JiZ+1N0XyCCQH2SG4EIIEIcK8vmotKSuYWFmL3E5NTjgTye9CD
hsB7d/SBexr1bbLATmr4MOejbRrBloXeiCjYBxlg1b6xrErkgIMh19000b4qCwHK
nlh9+pVG5N0SRw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:57 2026 by rpki-client