Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
File: UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft (raw, json)
Hash identifier: Osh7LSkZ6+Faihhb75mRVJFTvzuleLDJK4GYoCFlJ5Y=
Subject key identifier: 1D:DC:F9:B0:85:A9:2D:52:E9:59:AD:66:DF:0C:16:E1:3A:68:84:59
Authority key identifier: 52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E
Certificate issuer: /CN=52e86b141c51c65eeabd6e62ea522edc5988526e
Certificate serial: 019D3941830DD31B285DABD789FEFAE800E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
Manifest number: 0C9D
Signing time: Sun 29 Mar 2026 11:01:27 +0000
Manifest this update: Sun 29 Mar 2026 11:01:27 +0000
Manifest next update: Mon 30 Mar 2026 11:01:27 +0000
Files and hashes: 1: HJPLxJxpfq1R9TzTgRQlYzUDbhs.roa (hash: OQoHpJCgdLNrLAKiPR4smDKveNyBf+LPF6Xo5G3zvkg=)
2: UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl (hash: GNvg6X5CMx6QI20WIwOypJoFBUSTU7qQEsp+0qbwkVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:83:0d:d3:1b:28:5d:ab:d7:89:fe:fa:e8:00:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e86b141c51c65eeabd6e62ea522edc5988526e
Validity
Not Before: Mar 29 11:01:27 2026 GMT
Not After : Mar 30 11:01:27 2026 GMT
Subject: CN=1ddcf9b085a92d52e959ad66df0c16e13a688459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:00:16:ca:ec:9e:54:f4:f3:73:22:ec:b5:
70:2f:7b:78:cb:9f:47:91:50:ad:86:0b:ec:20:ab:
82:f0:e8:cb:58:7a:d5:1a:78:b4:07:92:7f:4a:d3:
13:34:08:53:89:db:cc:ab:8f:46:75:60:e3:a6:9e:
2d:38:cd:36:79:1d:d3:cc:9a:2d:32:b5:97:22:c2:
d5:ce:4b:88:e2:06:10:82:a2:29:ec:45:b3:1b:29:
a4:b1:3e:60:41:7d:51:e6:c0:d0:40:64:a2:b0:5b:
de:11:65:38:ad:99:d8:6a:a3:21:37:50:60:6b:41:
50:24:94:74:45:57:72:e5:05:96:de:6d:28:06:98:
17:b6:4b:28:88:84:17:3a:f3:32:1f:27:3f:e5:0f:
fd:a0:0a:4d:c1:92:40:6c:34:37:e2:f1:4c:68:63:
af:77:c1:2a:36:00:9f:ee:a2:66:49:00:31:aa:e5:
5f:46:87:fd:48:86:f8:9a:d2:ca:37:5b:2e:53:9b:
5d:77:34:dd:f2:a0:dc:d9:4c:5e:53:43:5d:63:54:
53:6b:da:07:5a:a0:24:3d:91:d4:81:82:a7:14:b8:
88:48:1d:0b:78:64:f9:c0:95:2a:35:05:30:2e:ed:
69:83:05:4b:ab:43:59:7c:e6:74:45:d2:0d:41:db:
d8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DC:F9:B0:85:A9:2D:52:E9:59:AD:66:DF:0C:16:E1:3A:68:84:59
X509v3 Authority Key Identifier:
keyid:52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8d:6d:bf:b9:72:c6:1d:25:e2:3c:71:6d:87:7b:3a:0a:b2:
43:cc:f9:8e:1a:7b:3a:f4:2c:69:1e:76:0f:c4:a5:cd:f8:68:
c9:4d:81:a9:5c:64:7b:18:fb:e0:9d:27:d4:04:c9:d4:e5:30:
9e:ea:6d:a0:f5:7c:9d:18:12:cb:09:42:fe:15:fe:f7:d6:49:
68:2e:2f:8c:ba:c5:6a:7a:85:36:7a:4d:71:0a:0e:66:d0:e8:
72:ea:42:f5:83:cb:60:68:34:74:52:c1:83:4c:1a:8d:9e:00:
06:97:cf:01:bd:39:a7:dd:49:5f:67:35:af:29:b8:fb:b7:16:
3a:1f:76:bd:c4:86:6a:33:3d:8b:10:dc:80:7e:61:fb:47:5a:
e9:76:5a:3c:73:15:6e:ae:5f:3e:b6:3a:3b:9c:77:84:1b:96:
da:ed:cd:05:26:3c:a3:89:56:84:cb:2d:55:94:a3:f9:97:db:
19:26:b1:e3:d2:07:66:69:32:64:84:ef:c6:01:59:58:d0:be:
79:3e:71:6e:2e:77:46:19:a3:47:6d:03:08:87:8c:25:6f:17:
0f:69:44:c7:eb:88:08:3c:ea:22:6d:f2:90:18:2d:cc:2c:e3:
7c:80:20:b6:92:a4:c5:04:af:68:b0:13:a1:fa:d9:35:1f:32:
b6:ed:1c:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QYMN0xsoXavXif766ADmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZTg2YjE0MWM1MWM2NWVlYWJkNmU2MmVhNTIyZWRjNTk4
ODUyNmUwHhcNMjYwMzI5MTEwMTI3WhcNMjYwMzMwMTEwMTI3WjAzMTEwLwYDVQQD
EygxZGRjZjliMDg1YTkyZDUyZTk1OWFkNjZkZjBjMTZlMTNhNjg4NDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbAAFsrsnlT083Mi7LVwL3t4y59H
kVCthgvsIKuC8OjLWHrVGni0B5J/StMTNAhTidvMq49GdWDjpp4tOM02eR3TzJot
MrWXIsLVzkuI4gYQgqIp7EWzGymksT5gQX1R5sDQQGSisFveEWU4rZnYaqMhN1Bg
a0FQJJR0RVdy5QWW3m0oBpgXtksoiIQXOvMyHyc/5Q/9oApNwZJAbDQ34vFMaGOv
d8EqNgCf7qJmSQAxquVfRof9SIb4mtLKN1suU5tddzTd8qDc2UxeU0NdY1RTa9oH
WqAkPZHUgYKnFLiISB0LeGT5wJUqNQUwLu1pgwVLq0NZfOZ0RdINQdvYUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3c+bCFqS1S6VmtZt8MFuE6aIRZMB8GA1UdIwQY
MBaAFFLoaxQcUcZe6r1uYupSLtxZiFJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXVockZCeFJ4bDdxdlc1aTZsSXUzRm1JVW00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81ZjQ1YTUtNzI4OC00NTM3LTg5ZGQt
YzY4N2U3OTJiMjVkLzEvVXVockZCeFJ4bDdxdlc1aTZsSXUzRm1JVW00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81ZjQ1YTUtNzI4OC00NTM3LTg5ZGQtYzY4N2U3OTJiMjVk
LzEvVXVockZCeFJ4bDdxdlc1aTZsSXUzRm1JVW00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADo1tv7ly
xh0l4jxxbYd7OgqyQ8z5jhp7OvQsaR52D8SlzfhoyU2BqVxkexj74J0n1ATJ1OUw
nuptoPV8nRgSywlC/hX+99ZJaC4vjLrFanqFNnpNcQoOZtDocupC9YPLYGg0dFLB
g0wajZ4ABpfPAb05p91JX2c1rym4+7cWOh92vcSGajM9ixDcgH5h+0da6XZaPHMV
bq5fPrY6O5x3hBuW2u3NBSY8o4lWhMstVZSj+ZfbGSax49IHZmkyZITvxgFZWNC+
eT5xbi53RhmjR20DCIeMJW8XD2lEx+uICDzqIm3ykBgtzCzjfIAgtpKkxQSvaLAT
ofrZNR8ytu0cTg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:16 2026 by rpki-client