Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
File: UZpqm-tS7_KWRGWblDKgpZI3MUw.mft (raw, json)
Hash identifier: VffQtu6WX11f1eXKadqAvHpJYftzFicyLNQfxIwGyAA=
Subject key identifier: F2:97:33:DB:C7:CD:52:96:F0:D5:36:BC:53:5A:BE:AC:8E:8F:AF:21
Authority key identifier: 51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
Certificate issuer: /CN=519a6a9beb52eff29644659b9432a0a59237314c
Certificate serial: 019D394140927AA74F42E8C19E3658162EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
Manifest number: 15DB
Signing time: Sun 29 Mar 2026 11:01:10 +0000
Manifest this update: Sun 29 Mar 2026 11:01:10 +0000
Manifest next update: Mon 30 Mar 2026 11:01:10 +0000
Files and hashes: 1: UZpqm-tS7_KWRGWblDKgpZI3MUw.crl (hash: AdHSjO3VIv6eOhp8OIBG2TJ9BKL9unKw2JFmuHYQQ6E=)
2: gQeDlAB2b-yz40wa6y4f9jvVDIs.roa (hash: gxyp6+EX2f9gbDwhqzkUqdu0QE4bPoPhIRtQBnEAra0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:40:92:7a:a7:4f:42:e8:c1:9e:36:58:16:2e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519a6a9beb52eff29644659b9432a0a59237314c
Validity
Not Before: Mar 29 11:01:10 2026 GMT
Not After : Mar 30 11:01:10 2026 GMT
Subject: CN=f29733dbc7cd5296f0d536bc535abeac8e8faf21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:15:7c:70:83:fd:7d:b3:8b:b0:29:1a:a6:
54:f7:06:71:de:52:67:9a:3b:9d:55:73:d2:30:81:
df:bd:f4:6c:7d:a8:ae:d1:65:53:d3:bd:13:6e:dc:
92:60:8c:15:d7:91:49:7d:79:1a:85:ee:12:34:20:
e0:1d:9e:48:d3:c3:b5:0f:26:df:a0:67:d9:7c:0f:
6d:d2:68:24:99:e1:c7:e7:65:e2:a6:bc:e1:fd:70:
52:6c:36:cf:1f:b8:7f:10:a3:e3:c2:80:7f:68:8a:
94:ae:6a:28:d6:70:51:7f:40:e2:1c:35:66:01:26:
b1:83:b7:cb:87:9b:04:c2:8f:60:d7:d4:4e:ac:d6:
ca:73:ec:f0:c9:5b:5e:21:b7:d9:c5:d7:ee:7b:13:
23:40:86:8b:2d:12:cd:a2:e2:da:f2:71:00:4b:d7:
57:e4:e6:29:07:42:a6:c1:d9:24:bf:f2:7e:3b:64:
65:17:17:40:f4:4d:96:5d:ea:47:06:c2:55:c6:38:
87:8d:b3:7d:d0:8f:11:09:ff:15:26:0c:58:aa:7a:
e3:4f:a9:af:ba:44:5d:a9:3a:d8:71:dd:1b:f1:38:
b6:d5:ff:b3:09:4d:d3:62:e3:e8:06:67:6b:85:79:
8e:61:92:26:93:76:d9:ef:7e:70:01:7d:89:69:9f:
99:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:97:33:DB:C7:CD:52:96:F0:D5:36:BC:53:5A:BE:AC:8E:8F:AF:21
X509v3 Authority Key Identifier:
keyid:51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:6e:e2:71:2b:ec:08:06:ee:ba:a7:ce:bc:eb:bf:97:c3:9b:
0b:bb:aa:8b:90:ad:84:79:1c:8c:99:28:6f:0f:bc:db:67:7f:
ad:29:5f:03:13:e5:d1:17:5f:76:d9:8e:2b:cb:34:4b:94:75:
53:83:ea:ed:9c:1d:40:28:5e:f9:9b:4e:3f:cc:89:c2:2a:2d:
c7:a5:da:ca:c6:8c:47:e3:fa:4b:23:97:49:da:48:6d:15:e4:
69:c1:65:71:d4:5e:b0:48:78:33:2d:bd:f1:87:2e:69:1e:f3:
4f:d7:9e:c9:d5:b6:37:b8:aa:ae:19:c8:dc:77:6c:00:94:13:
f5:aa:26:2f:54:2f:2c:73:13:87:33:19:76:92:e4:04:34:85:
43:b0:bc:39:60:df:db:da:ab:29:47:50:35:87:53:9e:09:f9:
2a:6d:85:cf:ae:c8:6c:98:fa:eb:71:ee:df:43:1d:28:37:d3:
59:42:8c:c7:bf:c3:b6:30:4d:dc:bb:93:62:5a:40:5c:ad:25:
73:0f:0c:cc:54:f7:82:bc:6b:a2:15:8f:76:74:b5:e6:31:ca:
b2:14:3f:a1:cb:5c:ed:81:75:9c:0d:84:1d:48:4a:3d:3c:43:
44:cb:91:a4:b7:5c:b6:74:92:1c:fc:4f:3e:32:56:66:78:02:
4c:b8:35:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QUCSeqdPQujBnjZYFi6gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxOWE2YTliZWI1MmVmZjI5NjQ0NjU5Yjk0MzJhMGE1OTIz
NzMxNGMwHhcNMjYwMzI5MTEwMTEwWhcNMjYwMzMwMTEwMTEwWjAzMTEwLwYDVQQD
EyhmMjk3MzNkYmM3Y2Q1Mjk2ZjBkNTM2YmM1MzVhYmVhYzhlOGZhZjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLUVfHCD/X2zi7ApGqZU9wZx3lJn
mjudVXPSMIHfvfRsfaiu0WVT070TbtySYIwV15FJfXkahe4SNCDgHZ5I08O1Dybf
oGfZfA9t0mgkmeHH52Xiprzh/XBSbDbPH7h/EKPjwoB/aIqUrmoo1nBRf0DiHDVm
ASaxg7fLh5sEwo9g19ROrNbKc+zwyVteIbfZxdfuexMjQIaLLRLNouLa8nEAS9dX
5OYpB0Kmwdkkv/J+O2RlFxdA9E2WXepHBsJVxjiHjbN90I8RCf8VJgxYqnrjT6mv
ukRdqTrYcd0b8Ti21f+zCU3TYuPoBmdrhXmOYZImk3bZ735wAX2JaZ+ZsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKXM9vHzVKW8NU2vFNavqyOj68hMB8GA1UdIwQY
MBaAFFGaapvrUu/ylkRlm5QyoKWSNzFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVpwcW0tdFM3X0tXUkdXYmxES2dwWkkzTVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84NmQyM2UtNDAwYS00YWRjLTgwZTQt
OTA1ZDlkY2Y1MGFlLzEvVVpwcW0tdFM3X0tXUkdXYmxES2dwWkkzTVV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS84NmQyM2UtNDAwYS00YWRjLTgwZTQtOTA1ZDlkY2Y1MGFl
LzEvVVpwcW0tdFM3X0tXUkdXYmxES2dwWkkzTVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiG7icSvs
CAbuuqfOvOu/l8ObC7uqi5CthHkcjJkobw+822d/rSlfAxPl0RdfdtmOK8s0S5R1
U4Pq7ZwdQChe+ZtOP8yJwiotx6XaysaMR+P6SyOXSdpIbRXkacFlcdResEh4My29
8YcuaR7zT9eeydW2N7iqrhnI3HdsAJQT9aomL1QvLHMThzMZdpLkBDSFQ7C8OWDf
29qrKUdQNYdTngn5Km2Fz67IbJj663Hu30MdKDfTWUKMx7/DtjBN3LuTYlpAXK0l
cw8MzFT3grxrohWPdnS15jHKshQ/octc7YF1nA2EHUhKPTxDRMuRpLdctnSSHPxP
PjJWZngCTLg1og==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:13 2026 by rpki-client