Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
File: Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft (raw, json)
Hash identifier: IRo5SLtFD1yxnsZrstcUfYKRs0gIT80imWHHxOLZsvI=
Subject key identifier: 2B:8B:D5:16:94:B0:0A:D4:29:EB:F6:43:2D:5D:57:41:53:F6:51:50
Authority key identifier: 52:4E:5F:79:61:22:5F:BF:E3:41:F6:BF:D6:BE:8E:1A:21:EF:8C:0F
Certificate issuer: /CN=524e5f7961225fbfe341f6bfd6be8e1a21ef8c0f
Certificate serial: 019D37F70CB16CDDFCAD554F7A349ECEEADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
Manifest number: 0EFA
Signing time: Sun 29 Mar 2026 05:00:30 +0000
Manifest this update: Sun 29 Mar 2026 05:00:30 +0000
Manifest next update: Mon 30 Mar 2026 05:00:30 +0000
Files and hashes: 1: QhRLDpCA8okURdA4C54ftPnnfT8.roa (hash: +BEAp9sAudWy6A/smDJICmamsmKPRmKsTiVNouNzZXg=)
2: Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl (hash: wCWUeun8llp1mPU+OrZiu+L3VqOG6VEATtofI1qvI20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:0c:b1:6c:dd:fc:ad:55:4f:7a:34:9e:ce:ea:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=524e5f7961225fbfe341f6bfd6be8e1a21ef8c0f
Validity
Not Before: Mar 29 05:00:30 2026 GMT
Not After : Mar 30 05:00:30 2026 GMT
Subject: CN=2b8bd51694b00ad429ebf6432d5d574153f65150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:49:5f:6c:1b:0a:41:12:c5:c4:97:99:5d:f8:
bc:87:f0:5d:52:9d:0f:5a:d2:ae:ec:e6:b3:02:13:
18:6d:32:5a:08:46:27:52:70:c2:f9:ec:10:8f:97:
c2:31:c5:4b:eb:a9:fe:fb:90:1b:15:5f:f9:9c:79:
82:5c:56:f5:8d:c6:1b:87:5f:8b:30:53:c6:28:8e:
e6:61:60:05:6e:b7:62:c3:50:1c:1d:37:23:1d:2c:
03:b4:31:52:b7:3c:42:e8:96:86:f7:b8:ad:cb:a8:
9c:2f:e4:68:a4:90:61:11:10:63:05:3b:c9:14:93:
f1:d5:f0:62:ad:ee:67:8b:9a:08:11:d3:95:40:0c:
26:ca:ef:ba:7f:ff:34:c1:08:7f:96:96:9d:7f:45:
cf:31:d3:3a:f2:2b:f3:1a:d1:f5:78:3b:a5:13:41:
9a:fd:7d:68:72:39:d4:32:44:83:a7:08:f0:74:25:
b8:e4:df:5f:ad:5e:e0:ef:89:8d:dd:c2:9a:7b:3e:
06:64:a2:41:55:56:39:8e:e1:f4:a4:ec:89:ce:dd:
e9:8b:27:66:f3:53:ea:35:46:8a:db:df:c7:6a:92:
68:f7:79:20:60:a3:d6:75:92:ec:93:66:a7:50:9c:
04:a1:4e:96:e0:92:ad:02:0e:35:ca:f0:fb:16:84:
da:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8B:D5:16:94:B0:0A:D4:29:EB:F6:43:2D:5D:57:41:53:F6:51:50
X509v3 Authority Key Identifier:
keyid:52:4E:5F:79:61:22:5F:BF:E3:41:F6:BF:D6:BE:8E:1A:21:EF:8C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:26:1b:70:f9:d4:9a:39:b3:43:ed:ea:96:25:f2:f2:29:a7:
b5:14:e1:2f:ff:67:0f:0b:13:b1:ec:06:47:d4:52:b9:7d:e8:
7d:d1:b5:e0:22:8f:29:ea:32:24:59:67:ae:24:74:d7:ab:e9:
ea:4d:57:65:1f:8d:25:af:d0:45:f4:d4:77:79:76:e5:5a:52:
1f:fa:7d:e9:51:33:3e:ad:57:2c:29:4c:90:0e:73:6b:40:72:
59:1d:11:92:d7:28:0c:f8:53:0a:d5:5e:ce:3b:7e:01:f5:9d:
fc:2c:fe:4e:aa:49:17:61:37:7a:7f:d7:5b:0a:fe:4c:05:51:
a2:3a:59:c4:a8:99:17:61:34:13:ad:ed:ae:99:57:73:31:93:
02:41:c0:4a:02:be:83:c7:1c:de:31:d2:f7:e8:69:01:2a:ca:
2f:92:5a:57:2e:34:d5:bf:70:4a:e7:52:52:64:f9:40:46:dc:
44:c3:19:87:c1:a9:a5:79:4d:ee:17:c0:9f:14:51:11:e7:65:
28:eb:a2:17:62:21:3a:19:c4:2f:16:cb:26:f9:de:f0:5e:de:
2f:00:95:25:42:35:fd:f0:c9:be:96:b1:e0:92:fb:fa:48:37:
da:81:8f:cc:56:0f:8b:bd:40:e6:73:b0:b7:23:1d:52:ae:0d:
a5:34:7b:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039wyxbN38rVVPejSezurfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNGU1Zjc5NjEyMjVmYmZlMzQxZjZiZmQ2YmU4ZTFhMjFl
ZjhjMGYwHhcNMjYwMzI5MDUwMDMwWhcNMjYwMzMwMDUwMDMwWjAzMTEwLwYDVQQD
EygyYjhiZDUxNjk0YjAwYWQ0MjllYmY2NDMyZDVkNTc0MTUzZjY1MTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApElfbBsKQRLFxJeZXfi8h/BdUp0P
WtKu7OazAhMYbTJaCEYnUnDC+ewQj5fCMcVL66n++5AbFV/5nHmCXFb1jcYbh1+L
MFPGKI7mYWAFbrdiw1AcHTcjHSwDtDFStzxC6JaG97ity6icL+RopJBhERBjBTvJ
FJPx1fBire5ni5oIEdOVQAwmyu+6f/80wQh/lpadf0XPMdM68ivzGtH1eDulE0Ga
/X1ocjnUMkSDpwjwdCW45N9frV7g74mN3cKaez4GZKJBVVY5juH0pOyJzt3piydm
81PqNUaK29/HapJo93kgYKPWdZLsk2anUJwEoU6W4JKtAg41yvD7FoTaCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuL1RaUsArUKev2Qy1dV0FT9lFQMB8GA1UdIwQY
MBaAFFJOX3lhIl+/40H2v9a+jhoh74wPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWs1ZmVXRWlYN19qUWZhXzFyNk9HaUh2akE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi85YzY1NDYtNTgxMS00MTk0LWJmZWIt
MmFiOTA0NmViYzExLzEvVWs1ZmVXRWlYN19qUWZhXzFyNk9HaUh2akE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi85YzY1NDYtNTgxMS00MTk0LWJmZWItMmFiOTA0NmViYzEx
LzEvVWs1ZmVXRWlYN19qUWZhXzFyNk9HaUh2akE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCYbcPnU
mjmzQ+3qliXy8imntRThL/9nDwsTsewGR9RSuX3ofdG14CKPKeoyJFlnriR016vp
6k1XZR+NJa/QRfTUd3l25VpSH/p96VEzPq1XLClMkA5za0ByWR0RktcoDPhTCtVe
zjt+AfWd/Cz+TqpJF2E3en/XWwr+TAVRojpZxKiZF2E0E63trplXczGTAkHASgK+
g8cc3jHS9+hpASrKL5JaVy401b9wSudSUmT5QEbcRMMZh8GppXlN7hfAnxRREedl
KOuiF2IhOhnELxbLJvne8F7eLwCVJUI1/fDJvpax4JL7+kg32oGPzFYPi71A5nOw
tyMdUq4NpTR72w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:35 2026 by rpki-client