Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
File: UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft (raw, json)
Hash identifier: sxmxdraHDL4XzuA8xnhuH/7FmwmCJxyQNJJRBU+dExA=
Subject key identifier: F1:34:9D:9E:25:C9:E2:3A:77:35:B0:07:B2:40:ED:EF:8E:76:F6:AE
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial: 019D390A3AFD14AAB57D2DCE69ECBAA9EA74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
Manifest number: 13B5
Signing time: Sun 29 Mar 2026 10:01:04 +0000
Manifest this update: Sun 29 Mar 2026 10:01:04 +0000
Manifest next update: Mon 30 Mar 2026 10:01:04 +0000
Files and hashes: 1: 5LP1tFsYxrSifJx4g3QCwnwqEE0.roa (hash: KN3CpVDHemmKFo5Hvty6pP9rTH9gXzF1gwHa0T5DRaI=)
2: Oyp5RiUIb7ZqQLR77tkeZhEy5Y4.roa (hash: pR+eHKxdsqOeJhrr2qYTxhhUH69JVErIDEpF2ZKp/Bc=)
3: UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl (hash: mD0MMeEeHIbbmloSkNM1KPzxtNDpe18yQju638VxmL8=)
4: Vvg_eRMXx1wM0ykfa7tuZT2JbiU.roa (hash: y54xWJIZgynMkSzzpbyHXRwEQLJEaYo5XZHrl4z8vdo=)
5: XEGrGY29N2_6fdEZQllMn9S3ctY.roa (hash: FoInU+oGSpZKQRSWi66xB6iIQ2i/avIu/9TIfHo6uB0=)
6: c72wk2piK98wT4mJw8_ZtS1RplA.roa (hash: sWf1C2L00m53zAy7UBc4ltRNb1KloYEQlgh8zb6I1Tg=)
7: q5ijRhsoQMXQqvexZ__tLFhWfbE.roa (hash: RKODKNUK1hXqxPnqoVYe1vULFOrntBOl4JYsmeK1KQ4=)
8: uUz_sLM3KsC9uXXY3-UTgKhMUC0.roa (hash: 3lqaJbLuu76YzS5K2R73vb0E1obPhoOUMrSjJHQL5uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:3a:fd:14:aa:b5:7d:2d:ce:69:ec:ba:a9:ea:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
Validity
Not Before: Mar 29 10:01:04 2026 GMT
Not After : Mar 30 10:01:04 2026 GMT
Subject: CN=f1349d9e25c9e23a7735b007b240edef8e76f6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:ad:a9:86:e7:1c:a3:c3:3c:1d:a2:50:39:
82:e4:5e:47:4f:cf:95:d3:85:6e:8b:bd:7b:fa:a0:
4d:70:f2:59:14:94:85:48:50:05:6b:50:17:88:16:
57:8d:38:1c:a6:b4:a9:69:a1:f9:05:e0:7d:3b:eb:
88:10:00:3f:c8:bf:9c:23:1c:8d:85:6a:1e:1e:ef:
77:d0:89:95:91:b3:9f:15:e3:17:2d:ce:e7:0f:94:
5b:91:bb:8b:56:72:ec:3c:66:33:20:04:c5:d7:e4:
79:ad:d0:2c:86:1a:8f:9d:d7:38:ee:0c:07:b1:05:
a5:38:43:2b:3c:5a:3a:e3:06:be:05:9c:ec:a5:44:
96:48:33:11:93:f5:7c:98:05:86:37:98:d0:97:a1:
9a:29:d4:d1:d7:5b:a0:90:24:e7:9b:03:0b:13:27:
f6:8e:43:1a:90:4d:cc:d5:8f:13:03:6a:e8:1e:67:
17:8d:70:be:d3:37:fb:55:41:0d:18:51:bb:51:09:
1f:95:72:0a:99:3c:d2:a6:73:4c:ab:95:3f:f3:9c:
b8:2f:cd:06:27:ea:23:fa:26:e5:ec:c6:7c:1e:c7:
35:26:eb:72:ce:10:a2:53:27:2d:df:c4:85:b8:75:
c0:0a:e8:e1:d2:9c:bf:cd:67:f9:74:a5:a4:a8:83:
d3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:34:9D:9E:25:C9:E2:3A:77:35:B0:07:B2:40:ED:EF:8E:76:F6:AE
X509v3 Authority Key Identifier:
keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9d:76:ad:6a:8d:4a:dc:33:f1:5f:b7:dc:c7:4f:b7:ea:36:
76:26:44:d5:8c:59:fc:69:b1:2e:ac:6a:84:73:88:90:ce:9e:
ff:90:16:fb:37:f0:a8:ae:10:e8:40:69:9e:ba:92:38:81:24:
df:c9:93:3a:75:9e:0e:47:f0:7f:d8:ab:0a:8c:e1:b4:31:26:
a3:0d:e5:57:a6:d9:99:be:1d:9b:2b:46:e2:e3:51:67:7a:77:
10:5d:16:27:d5:2a:3b:0b:36:94:53:89:ba:f1:1d:a7:f9:d6:
6f:f5:75:31:fc:8e:ed:61:38:09:f4:e9:84:5a:78:66:c2:45:
bf:9a:80:e0:b9:0c:b8:09:c0:2f:e4:e5:e3:2b:ce:a2:a1:5c:
ea:33:1e:50:2f:a4:63:bf:75:9e:34:26:83:ba:15:d1:fe:b5:
a3:9f:fc:2d:24:e5:81:35:42:06:ef:4a:4a:89:48:53:30:45:
d6:1f:69:a4:0e:20:21:3e:03:1d:9d:64:bb:c9:8f:5e:81:4b:
f4:db:4d:8f:f2:0e:4b:37:ea:31:e4:47:93:3a:ac:3d:2e:50:
0b:20:33:21:54:1d:a6:61:19:8d:de:a7:f3:fe:89:d5:2e:4f:
f0:d1:e0:e1:e5:df:d8:e6:48:ca:71:36:61:98:e5:dd:e7:6c:
28:7d:58:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Cjr9FKq1fS3Oaey6qep0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMGI0MTlmMGMxN2I0YzhiZTIxN2Y2NDM4OGQyNjhkMTRk
YzI2MWUwHhcNMjYwMzI5MTAwMTA0WhcNMjYwMzMwMTAwMTA0WjAzMTEwLwYDVQQD
EyhmMTM0OWQ5ZTI1YzllMjNhNzczNWIwMDdiMjQwZWRlZjhlNzZmNmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7atqYbnHKPDPB2iUDmC5F5HT8+V
04Vui717+qBNcPJZFJSFSFAFa1AXiBZXjTgcprSpaaH5BeB9O+uIEAA/yL+cIxyN
hWoeHu930ImVkbOfFeMXLc7nD5RbkbuLVnLsPGYzIATF1+R5rdAshhqPndc47gwH
sQWlOEMrPFo64wa+BZzspUSWSDMRk/V8mAWGN5jQl6GaKdTR11ugkCTnmwMLEyf2
jkMakE3M1Y8TA2roHmcXjXC+0zf7VUENGFG7UQkflXIKmTzSpnNMq5U/85y4L80G
J+oj+ibl7MZ8Hsc1JutyzhCiUyct38SFuHXACujh0py/zWf5dKWkqIPTywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPE0nZ4lyeI6dzWwB7JA7e+OdvauMB8GA1UdIwQY
MBaAFFELQZ8MF7TIviF/ZDiNJo0U3CYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYt
MTRhMDk5OTNkNjcxLzEvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYtMTRhMDk5OTNkNjcx
LzEvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZ12rWqN
Stwz8V+33MdPt+o2diZE1YxZ/GmxLqxqhHOIkM6e/5AW+zfwqK4Q6EBpnrqSOIEk
38mTOnWeDkfwf9irCozhtDEmow3lV6bZmb4dmytG4uNRZ3p3EF0WJ9UqOws2lFOJ
uvEdp/nWb/V1MfyO7WE4CfTphFp4ZsJFv5qA4LkMuAnAL+Tl4yvOoqFc6jMeUC+k
Y791njQmg7oV0f61o5/8LSTlgTVCBu9KSolIUzBF1h9ppA4gIT4DHZ1ku8mPXoFL
9NtNj/IOSzfqMeRHkzqsPS5QCyAzIVQdpmEZjd6n8/6J1S5P8NHg4eXf2OZIynE2
YZjl3edsKH1Ykg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:29 2026 by rpki-client