Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
File: Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft (raw, json)
Hash identifier: eYd829Rlz3F+pzoI0kcEY0wNjX/byTi9s5vOYOoeJMo=
Subject key identifier: 49:B6:F9:69:A1:10:F4:D1:B2:4D:77:1D:DC:63:44:6D:82:41:09:9C
Authority key identifier: 53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
Certificate issuer: /CN=533eead413a1705fbfcb2adbe90c69f055e275da
Certificate serial: 019D39AF2B5A076DF3140D15EA5BC3351975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 13:01:14 +0000
Manifest this update: Sun 29 Mar 2026 13:01:14 +0000
Manifest next update: Mon 30 Mar 2026 13:01:14 +0000
Files and hashes: 1: S85KGuABcO7n_bO4AIe1ewK8q8g.roa (hash: DRQavnwTOz4wK0AYi2a4Xmr2tC3b2FoHqOFT/oiiTE8=)
2: Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl (hash: ng/0RmwaKh0p9BXVMWyq86a1VNcBeg1zqxqstHKY+k0=)
3: kERmId2DFd_EibfHqh4MCSjy0OI.roa (hash: mbtYNWIZ4W0nIasRUXPcBW6WvJKBeXzkM/oxx5kKexM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:2b:5a:07:6d:f3:14:0d:15:ea:5b:c3:35:19:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533eead413a1705fbfcb2adbe90c69f055e275da
Validity
Not Before: Mar 29 13:01:14 2026 GMT
Not After : Mar 30 13:01:14 2026 GMT
Subject: CN=49b6f969a110f4d1b24d771ddc63446d8241099c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:97:c9:66:7e:a3:90:4a:03:51:83:2d:e5:93:
32:3a:52:01:93:d7:df:c9:f4:96:b7:1d:28:63:fe:
f8:09:8e:ca:47:13:43:3a:0f:32:ee:ff:9c:1e:f1:
d4:f6:c0:3f:03:2d:1e:34:61:15:3f:02:36:0d:38:
b5:3c:02:af:fb:fe:13:e8:f4:9d:6d:c8:e7:6b:8f:
89:af:20:30:91:ba:fc:24:91:8b:73:a5:06:81:32:
a7:cb:8a:5b:0b:40:92:27:bd:31:99:ae:90:e3:89:
fc:da:b4:a3:34:aa:6a:36:b0:50:44:87:78:f1:4f:
ac:4f:93:88:5e:95:0e:e5:82:e9:86:3c:93:b6:3f:
be:b8:68:04:4e:7e:2b:66:ab:d0:2b:17:a0:7a:c7:
07:24:6a:27:80:a7:1c:f3:b6:39:c7:27:59:e5:68:
78:75:5a:d7:a2:a3:7c:7a:05:75:b8:d7:9d:9f:86:
d0:0e:d3:cb:34:8d:1e:60:6b:ce:3f:66:e7:61:56:
e3:95:d2:ee:24:7f:46:e1:00:89:e2:29:9b:ef:9f:
c8:85:47:0a:30:0b:8a:e8:39:f3:57:c9:3f:03:aa:
9c:7b:3a:cc:6b:e2:cd:28:02:0b:49:62:c3:3a:a2:
66:d1:00:36:cb:6a:a5:c2:e6:34:b9:b2:00:51:2c:
43:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B6:F9:69:A1:10:F4:D1:B2:4D:77:1D:DC:63:44:6D:82:41:09:9C
X509v3 Authority Key Identifier:
keyid:53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:62:0b:0f:c0:c3:48:37:7d:b3:4a:5c:e5:16:80:a7:bb:82:
54:2c:d3:81:99:04:22:c8:51:11:bc:83:9c:64:9c:24:b2:cd:
6f:6a:35:64:65:7e:38:4c:af:e4:f6:e8:90:1f:28:3d:6b:59:
8f:fd:26:4d:b6:45:ec:0d:b6:22:56:ef:73:8b:be:6d:42:ea:
ea:7c:b0:c3:b3:72:06:28:70:dc:de:7b:b5:0f:d8:27:4d:c2:
62:98:c5:1d:27:b7:b1:19:ba:b2:7b:e7:1c:89:37:89:7d:f1:
4e:04:c4:bc:bc:1c:0a:2a:3f:a0:5d:95:39:48:34:4e:4c:de:
79:79:b8:84:e1:30:35:48:8d:53:3a:7a:49:2c:c8:ac:11:33:
d7:df:ff:e7:53:82:d2:34:93:60:38:d9:e6:ff:9e:e0:15:45:
b0:f3:d4:24:36:b6:c7:ce:8b:fb:64:e4:ba:fa:66:64:88:63:
f4:44:e9:33:5f:f4:8a:05:e5:5a:63:76:64:a9:81:73:9b:76:
66:2d:26:09:d1:f8:d7:90:b8:b5:62:82:80:13:41:c5:37:81:
67:f3:8a:c8:78:97:c8:84:15:ac:81:a4:1d:ee:ae:f9:0b:16:
0e:24:a4:6e:1c:70:b9:54:e7:ab:66:38:09:e7:59:2c:cf:dd:
12:e0:fd:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rytaB23zFA0V6lvDNRl1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzM2VlYWQ0MTNhMTcwNWZiZmNiMmFkYmU5MGM2OWYwNTVl
Mjc1ZGEwHhcNMjYwMzI5MTMwMTE0WhcNMjYwMzMwMTMwMTE0WjAzMTEwLwYDVQQD
Eyg0OWI2Zjk2OWExMTBmNGQxYjI0ZDc3MWRkYzYzNDQ2ZDgyNDEwOTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpfJZn6jkEoDUYMt5ZMyOlIBk9ff
yfSWtx0oY/74CY7KRxNDOg8y7v+cHvHU9sA/Ay0eNGEVPwI2DTi1PAKv+/4T6PSd
bcjna4+JryAwkbr8JJGLc6UGgTKny4pbC0CSJ70xma6Q44n82rSjNKpqNrBQRId4
8U+sT5OIXpUO5YLphjyTtj++uGgETn4rZqvQKxegescHJGongKcc87Y5xydZ5Wh4
dVrXoqN8egV1uNedn4bQDtPLNI0eYGvOP2bnYVbjldLuJH9G4QCJ4imb75/IhUcK
MAuK6DnzV8k/A6qcezrMa+LNKAILSWLDOqJm0QA2y2qlwuY0ubIAUSxDiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEm2+WmhEPTRsk13HdxjRG2CQQmcMB8GA1UdIwQY
MBaAFFM+6tQToXBfv8sq2+kMafBV4nXaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXo3cTFCT2hjRi1feXlyYjZReHA4RlhpZGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi80OGYxYzYtMTEzNC00OTY5LWFmNjAt
ZDAxN2MxNzU5NjM5LzEvVXo3cTFCT2hjRi1feXlyYjZReHA4RlhpZGRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi80OGYxYzYtMTEzNC00OTY5LWFmNjAtZDAxN2MxNzU5NjM5
LzEvVXo3cTFCT2hjRi1feXlyYjZReHA4RlhpZGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWILD8DD
SDd9s0pc5RaAp7uCVCzTgZkEIshREbyDnGScJLLNb2o1ZGV+OEyv5PbokB8oPWtZ
j/0mTbZF7A22Ilbvc4u+bULq6nyww7NyBihw3N57tQ/YJ03CYpjFHSe3sRm6snvn
HIk3iX3xTgTEvLwcCio/oF2VOUg0TkzeeXm4hOEwNUiNUzp6SSzIrBEz19//51OC
0jSTYDjZ5v+e4BVFsPPUJDa2x86L+2TkuvpmZIhj9ETpM1/0igXlWmN2ZKmBc5t2
Zi0mCdH415C4tWKCgBNBxTeBZ/OKyHiXyIQVrIGkHe6u+QsWDiSkbhxwuVTnq2Y4
CedZLM/dEuD9hw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 22:57:39 2026 by rpki-client