Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
File: UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft (raw, json)
Hash identifier: QTb63HbYkeq4KjUC42uReKxpuw54bbqPYh3zbh0JiKo=
Subject key identifier: BC:BF:A5:47:84:84:46:B1:19:60:C7:0A:83:8E:2E:E2:62:90:4D:5B
Authority key identifier: 51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE
Certificate issuer: /CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe
Certificate serial: 019D375339CDA9E26CFDBFD48B4E7536406C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 02:01:34 +0000
Manifest this update: Sun 29 Mar 2026 02:01:34 +0000
Manifest next update: Mon 30 Mar 2026 02:01:34 +0000
Files and hashes: 1: RvPXibU4IJdU5hTTfX_WgU4WFrs.roa (hash: BAJBHUxXZILofCz3HDfw/DI14FkTIJLYrtl/LlZ0ZAs=)
2: UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl (hash: rDCpe/xCTlhHS/XDFzrb7zeL/F1W6XMZiEat9N67jAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:39:cd:a9:e2:6c:fd:bf:d4:8b:4e:75:36:40:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe
Validity
Not Before: Mar 29 02:01:34 2026 GMT
Not After : Mar 30 02:01:34 2026 GMT
Subject: CN=bcbfa547848446b11960c70a838e2ee262904d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7e:9e:f0:32:7f:ce:04:58:42:15:c1:3e:ac:
5a:e3:00:43:bc:5a:58:4b:34:95:19:f7:4b:36:11:
68:0b:cd:c8:ec:c1:87:68:56:33:77:98:e2:9c:0a:
c7:94:80:b4:2c:8b:a7:91:5a:a5:fe:a7:8a:aa:2a:
e8:10:fe:3a:a7:42:7f:53:61:00:70:28:cb:ff:62:
e0:a6:01:f7:19:10:91:7f:c2:50:7a:63:da:0b:d7:
b1:42:f2:de:ac:22:08:c4:ec:49:a1:34:d1:7a:e8:
94:f8:03:68:eb:19:ab:56:46:ad:55:37:2b:3b:fc:
25:de:58:76:89:81:0b:92:e7:1b:7f:6a:5f:81:19:
fd:df:27:eb:4f:26:1d:b5:4e:bb:f3:6f:ad:4d:93:
c3:1a:b4:2e:82:00:ec:b2:97:73:a0:2f:10:55:e2:
0b:03:4b:12:83:4c:6d:22:0f:ad:db:38:55:47:6f:
54:15:bc:42:c1:f0:77:ee:c8:2e:58:d2:4c:65:8a:
d8:1e:e4:7a:b5:8c:c4:78:bd:53:e2:85:b0:a5:4e:
6c:c4:a5:74:9c:f8:98:d1:ed:5a:be:e4:3e:ba:2e:
9e:a0:67:dc:f0:9f:fe:82:7f:b9:6d:2f:01:9b:e9:
b0:fa:be:cb:d1:3c:b9:33:25:c0:1d:4b:40:9c:5a:
6c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BF:A5:47:84:84:46:B1:19:60:C7:0A:83:8E:2E:E2:62:90:4D:5B
X509v3 Authority Key Identifier:
keyid:51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e4:17:47:b2:1c:db:39:3e:ef:71:75:46:1b:e5:ff:fe:55:
8d:38:9c:0f:0a:cf:d0:04:09:75:45:0e:29:be:8b:58:7a:16:
e5:e7:b0:c4:48:a7:5b:ba:c9:3f:97:84:a8:83:6b:6a:24:71:
28:ff:3b:75:f6:9a:33:36:f8:65:0b:09:b2:c3:4b:1c:9f:0d:
b8:0e:16:f9:1f:21:40:4e:11:9f:79:45:96:a8:2d:3e:d6:4e:
ac:6e:30:1f:6c:88:31:02:91:12:ea:93:07:7f:94:42:bf:9b:
06:94:08:57:4c:3b:97:32:9a:5a:21:30:80:c1:25:cb:19:1d:
04:47:a2:8a:ad:81:ba:b4:b3:cd:a3:a7:33:be:cd:60:88:f1:
0b:b1:85:90:04:88:ff:b3:a5:94:99:ed:f6:14:33:48:fb:f8:
68:72:29:af:ed:df:ae:2e:4c:f0:ec:ba:c3:da:9a:96:34:27:
ee:16:ec:11:20:f2:7c:bb:e3:d2:ed:a2:c4:86:00:20:cd:a9:
66:d4:f9:b3:b4:43:53:e8:a4:7b:f8:1c:0c:b0:64:84:97:a5:
33:f8:50:9f:f7:75:80:47:45:e9:d2:19:38:7b:c3:d8:1c:f0:
54:5c:0c:52:e2:21:e0:ae:d3:e8:12:72:01:da:0e:39:ed:ba:
94:0f:5b:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UznNqeJs/b/Ui051NkBsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxN2Q1OTQzOGNjMjAxZGNhMmZjMWNlN2E2ODc3M2JkNzFi
ZTBlYmUwHhcNMjYwMzI5MDIwMTM0WhcNMjYwMzMwMDIwMTM0WjAzMTEwLwYDVQQD
EyhiY2JmYTU0Nzg0ODQ0NmIxMTk2MGM3MGE4MzhlMmVlMjYyOTA0ZDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4X6e8DJ/zgRYQhXBPqxa4wBDvFpY
SzSVGfdLNhFoC83I7MGHaFYzd5jinArHlIC0LIunkVql/qeKqiroEP46p0J/U2EA
cCjL/2LgpgH3GRCRf8JQemPaC9exQvLerCIIxOxJoTTReuiU+ANo6xmrVkatVTcr
O/wl3lh2iYELkucbf2pfgRn93yfrTyYdtU6782+tTZPDGrQuggDsspdzoC8QVeIL
A0sSg0xtIg+t2zhVR29UFbxCwfB37sguWNJMZYrYHuR6tYzEeL1T4oWwpU5sxKV0
nPiY0e1avuQ+ui6eoGfc8J/+gn+5bS8Bm+mw+r7L0Ty5MyXAHUtAnFpscQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLy/pUeEhEaxGWDHCoOOLuJikE1bMB8GA1UdIwQY
MBaAFFF9WUOMwgHcovwc56aHc71xvg6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVgxWlE0ekNBZHlpX0J6bnBvZHp2WEctRHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi81MGY1YmEtYmRmNC00YTcxLWE4MzYt
OGIzMWUyMzM4MmRhLzEvVVgxWlE0ekNBZHlpX0J6bnBvZHp2WEctRHI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi81MGY1YmEtYmRmNC00YTcxLWE4MzYtOGIzMWUyMzM4MmRh
LzEvVVgxWlE0ekNBZHlpX0J6bnBvZHp2WEctRHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+QXR7Ic
2zk+73F1Rhvl//5VjTicDwrP0AQJdUUOKb6LWHoW5eewxEinW7rJP5eEqINraiRx
KP87dfaaMzb4ZQsJssNLHJ8NuA4W+R8hQE4Rn3lFlqgtPtZOrG4wH2yIMQKREuqT
B3+UQr+bBpQIV0w7lzKaWiEwgMElyxkdBEeiiq2BurSzzaOnM77NYIjxC7GFkASI
/7OllJnt9hQzSPv4aHIpr+3fri5M8Oy6w9qaljQn7hbsESDyfLvj0u2ixIYAIM2p
ZtT5s7RDU+ike/gcDLBkhJelM/hQn/d1gEdF6dIZOHvD2BzwVFwMUuIh4K7T6BJy
AdoOOe26lA9bBA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:42 2026 by rpki-client