Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
File: UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft (raw, json)
Hash identifier: 35UoIZdeV78aHWN020JYOVkqtRnHrxiKhR9NxxZyJ70=
Subject key identifier: 2B:3A:4E:F9:94:D0:77:17:6D:77:C8:25:37:43:52:46:53:4E:F7:18
Authority key identifier: 51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC
Certificate issuer: /CN=51e0dfc9371a9491caa858700fd9452366d9eddc
Certificate serial: 019D390A15168AC58E06778600AC03C02AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
Manifest number: 0449
Signing time: Sun 29 Mar 2026 10:00:55 +0000
Manifest this update: Sun 29 Mar 2026 10:00:55 +0000
Manifest next update: Mon 30 Mar 2026 10:00:55 +0000
Files and hashes: 1: 0rNoESpAqZ7s2Ti898AnDHcoBRY.roa (hash: k1laR98RBM1pgcBRG/JSlPGQHjYS4qfoYBq8kh6MnD8=)
2: UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl (hash: fwACfGbx2pfvMYhNZOwiLt6OAopZ5gG1bbZcLgld2sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:15:16:8a:c5:8e:06:77:86:00:ac:03:c0:2a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e0dfc9371a9491caa858700fd9452366d9eddc
Validity
Not Before: Mar 29 10:00:55 2026 GMT
Not After : Mar 30 10:00:55 2026 GMT
Subject: CN=2b3a4ef994d077176d77c82537435246534ef718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ae:f1:e0:a3:84:49:18:a9:1a:87:a6:09:d4:
e7:c8:8c:6e:ac:dc:68:16:17:03:80:d0:71:17:64:
09:e6:c2:a6:90:eb:bb:f2:2a:fa:87:1f:29:85:89:
eb:12:a7:f0:b5:6d:26:08:38:fb:33:b3:fd:b6:07:
98:ef:81:49:f8:06:10:fc:a7:3a:f3:ae:4d:a7:1c:
8e:9a:89:89:4f:06:1a:e1:d5:51:46:54:b8:7e:89:
59:23:2e:4e:36:6b:3a:93:19:38:96:9a:9c:80:fa:
51:0e:bc:ef:9f:98:6c:3f:3d:62:82:58:fa:fb:60:
43:79:9e:95:f7:04:d8:bb:cc:b8:2b:78:ce:3b:27:
47:12:01:e3:25:cd:ba:4d:2e:29:1a:15:1c:d9:f6:
b0:90:b3:90:a9:13:95:28:bc:55:23:dc:60:9d:2c:
8e:7d:22:f1:81:55:b1:1c:08:9c:b4:27:a7:e4:d0:
83:77:7e:f7:6a:f1:8e:83:24:21:ec:19:de:28:cc:
27:2e:a1:6f:ac:b7:73:bf:14:7b:8d:38:8f:e4:c6:
1c:e8:9d:98:e7:8e:cb:42:38:94:ff:90:ef:6a:c7:
a0:be:db:45:c1:0d:ec:8d:6f:24:5b:70:4d:2a:c6:
ed:f5:3e:54:1b:f1:52:c6:62:ee:63:c4:bc:fb:b1:
e5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3A:4E:F9:94:D0:77:17:6D:77:C8:25:37:43:52:46:53:4E:F7:18
X509v3 Authority Key Identifier:
keyid:51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ff:09:de:0e:4c:aa:e1:c1:3b:1d:f7:45:5e:8a:03:37:6b:
35:ce:c0:56:81:f7:2a:7c:da:07:ac:46:68:30:da:1b:bb:cc:
02:74:b4:c3:78:57:58:37:2b:76:03:1c:f6:4b:1f:e6:0a:dd:
53:46:13:a6:20:48:08:63:c3:31:27:62:59:67:b7:b1:2e:7c:
47:16:09:47:20:c2:19:28:31:66:a7:a7:c7:a8:b1:e4:d6:8a:
84:33:f0:d8:56:22:f3:e1:9b:21:af:f6:7a:83:c0:e9:40:aa:
f4:79:c6:1e:70:af:5d:43:33:2c:7e:ac:66:d6:68:93:12:8e:
b1:1c:5a:af:ae:9f:e9:fd:c0:bf:cb:08:14:d3:15:9a:f4:64:
14:51:da:87:7f:7d:c5:84:58:d8:dd:9f:e1:c1:3f:b2:3a:97:
5e:4f:fc:57:d4:11:3f:74:6b:f4:01:ee:66:43:bc:66:1f:e8:
75:4d:c4:ff:2c:9d:82:cc:6e:ce:a7:fc:2d:27:ea:d4:f3:0f:
43:d7:d5:13:54:94:c0:90:99:6a:1c:57:30:7b:ed:97:ae:f9:
d8:8b:46:87:7a:9f:2c:59:b9:8b:8e:f2:51:10:c2:15:8d:73:
0b:e0:3a:7b:d0:90:77:78:d0:df:4a:b7:38:58:ec:01:03:c4:
d3:8f:b8:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05ChUWisWOBneGAKwDwCr6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZTBkZmM5MzcxYTk0OTFjYWE4NTg3MDBmZDk0NTIzNjZk
OWVkZGMwHhcNMjYwMzI5MTAwMDU1WhcNMjYwMzMwMTAwMDU1WjAzMTEwLwYDVQQD
EygyYjNhNGVmOTk0ZDA3NzE3NmQ3N2M4MjUzNzQzNTI0NjUzNGVmNzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy67x4KOESRipGoemCdTnyIxurNxo
FhcDgNBxF2QJ5sKmkOu78ir6hx8phYnrEqfwtW0mCDj7M7P9tgeY74FJ+AYQ/Kc6
865NpxyOmomJTwYa4dVRRlS4folZIy5ONms6kxk4lpqcgPpRDrzvn5hsPz1iglj6
+2BDeZ6V9wTYu8y4K3jOOydHEgHjJc26TS4pGhUc2fawkLOQqROVKLxVI9xgnSyO
fSLxgVWxHAictCen5NCDd373avGOgyQh7BneKMwnLqFvrLdzvxR7jTiP5MYc6J2Y
547LQjiU/5DvasegvttFwQ3sjW8kW3BNKsbt9T5UG/FSxmLuY8S8+7HlIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCs6TvmU0HcXbXfIJTdDUkZTTvcYMB8GA1UdIwQY
MBaAFFHg38k3GpSRyqhYcA/ZRSNm2e3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWVEZnlUY2FsSkhLcUZod0Q5bEZJMmJaN2R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zYWJlMjAtMWU3NS00YWJlLTllODkt
NmFjMzUzNzBmZDczLzEvVWVEZnlUY2FsSkhLcUZod0Q5bEZJMmJaN2R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8zYWJlMjAtMWU3NS00YWJlLTllODktNmFjMzUzNzBmZDcz
LzEvVWVEZnlUY2FsSkhLcUZod0Q5bEZJMmJaN2R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/8J3g5M
quHBOx33RV6KAzdrNc7AVoH3KnzaB6xGaDDaG7vMAnS0w3hXWDcrdgMc9ksf5grd
U0YTpiBICGPDMSdiWWe3sS58RxYJRyDCGSgxZqenx6ix5NaKhDPw2FYi8+GbIa/2
eoPA6UCq9HnGHnCvXUMzLH6sZtZokxKOsRxar66f6f3Av8sIFNMVmvRkFFHah399
xYRY2N2f4cE/sjqXXk/8V9QRP3Rr9AHuZkO8Zh/odU3E/yydgsxuzqf8LSfq1PMP
Q9fVE1SUwJCZahxXMHvtl6752ItGh3qfLFm5i47yURDCFY1zC+A6e9CQd3jQ30q3
OFjsAQPE04+4ig==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:57 2026 by rpki-client