Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
File: UxKdBI3rLgv2InE5mgkLkBAWCzk.mft (raw, json)
Hash identifier: dBHdOHCme5H+q+ts92mNTajQ8/3EEzpyWqX3nEb4aQA=
Subject key identifier: 3C:55:13:8B:84:66:0E:9B:68:2B:9A:4D:C2:C5:B2:41:F0:88:39:80
Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39
Certificate serial: 019D2B84D54BFBFF2CBA90955E332A48D1DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
Manifest number: 085F
Signing time: Thu 26 Mar 2026 19:00:18 +0000
Manifest this update: Thu 26 Mar 2026 19:00:18 +0000
Manifest next update: Fri 27 Mar 2026 19:00:18 +0000
Files and hashes: 1: GGelaebdyv7wKj2s1MaS_yeYfsg.roa (hash: t1/+9CRFTy7pepvLSNI7FD84YDz6M4/rIVe2xaAkI2w=)
2: UxKdBI3rLgv2InE5mgkLkBAWCzk.crl (hash: 7asBCeGYEuVg8mIo1bUpQ9P0qXcx9UAOzm94IRQvvmU=)
3: ZiID9bA4kVJXaS6I_e7XfY_pEWQ.roa (hash: Si+JLMLd7OiqxpqpbnGko1NX7RV2TJpWFgx4YxD8Q9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 19:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:84:d5:4b:fb:ff:2c:ba:90:95:5e:33:2a:48:d1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39
Validity
Not Before: Mar 26 19:00:18 2026 GMT
Not After : Mar 27 19:00:18 2026 GMT
Subject: CN=3c55138b84660e9b682b9a4dc2c5b241f0883980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0e:0e:bc:8f:ff:84:77:91:da:15:81:ab:58:
a1:b9:8d:e8:3b:e0:16:c8:e6:4f:65:77:74:0a:31:
45:fa:f6:a8:14:24:4c:17:9e:53:e6:60:41:42:51:
33:68:91:01:0d:94:44:4a:b3:d5:b1:e8:66:d9:3a:
17:fb:f5:a3:25:1c:1e:0a:66:ed:34:f7:cd:bf:77:
a6:64:b1:7b:b5:ed:1d:da:02:3b:45:16:cd:08:a6:
b0:a8:25:aa:57:bc:29:8f:18:e8:0d:df:1a:39:11:
a9:ca:fd:12:c2:86:c6:19:d6:70:7f:cf:07:17:21:
d0:64:8e:b7:24:36:ee:d3:56:70:e2:e0:96:78:0b:
fb:8d:36:d3:8e:0d:45:1c:da:60:ee:d3:40:df:f4:
cc:68:46:f5:9e:18:ad:af:3a:b4:50:f0:25:74:05:
fd:9b:47:85:7f:aa:07:09:3c:31:2e:94:90:42:b6:
1e:b1:f3:32:29:72:93:27:27:85:f4:b1:de:ed:c6:
dc:ec:b4:5a:92:90:11:76:8f:04:dd:92:47:87:ce:
db:c6:88:8b:53:71:4a:b7:4d:1f:f3:f7:f4:71:2f:
6a:c2:a8:94:20:39:49:3c:f9:be:69:0d:f8:ba:f0:
70:9c:2f:95:a4:61:e7:3e:ee:24:ff:4e:c2:40:e3:
aa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:55:13:8B:84:66:0E:9B:68:2B:9A:4D:C2:C5:B2:41:F0:88:39:80
X509v3 Authority Key Identifier:
keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:fa:0c:26:b7:f4:bc:ad:2b:4c:6f:8a:39:09:92:32:d2:f5:
29:de:21:a2:4f:0c:06:45:ce:d5:a8:fc:92:cf:85:00:4d:a6:
a0:43:a3:f0:af:6c:a9:9f:41:42:07:cd:e1:b7:13:82:07:81:
2a:d8:f5:76:aa:76:65:fc:15:b9:54:85:48:e6:ec:6d:3f:df:
07:3b:c5:d9:6f:c2:30:96:76:43:63:ed:31:c2:04:f3:94:d1:
e9:4d:e3:97:bc:f6:68:0b:14:38:37:a7:19:6b:ab:17:6a:9e:
b7:d2:b8:3f:0c:e3:49:65:b2:92:77:e4:77:95:b6:b6:99:9c:
2d:83:a0:5b:33:1a:94:7c:02:47:53:06:83:23:02:c2:29:46:
a7:32:d6:53:d8:27:c0:41:60:c6:d8:9e:ba:52:39:2c:71:e9:
4f:8f:a6:8b:b3:92:83:64:bf:fd:d1:fa:f8:8b:19:cf:73:d5:
ef:b8:a3:80:ed:a5:2c:b4:bf:7a:de:17:d8:34:b0:20:12:b2:
70:9a:c7:40:42:88:65:9e:71:e4:06:fa:30:96:bc:44:23:bd:
38:68:37:bd:be:d3:c1:f2:1c:3c:44:3a:6a:f1:9d:57:79:18:
94:21:0e:59:e7:11:c7:38:03:9b:9d:64:76:6c:ea:c4:a5:56:
4d:8b:43:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rhNVL+/8supCVXjMqSNHdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMTI5ZDA0OGRlYjJlMGJmNjIyNzEzOTlhMDkwYjkwMTAx
NjBiMzkwHhcNMjYwMzI2MTkwMDE4WhcNMjYwMzI3MTkwMDE4WjAzMTEwLwYDVQQD
EygzYzU1MTM4Yjg0NjYwZTliNjgyYjlhNGRjMmM1YjI0MWYwODgzOTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0A4OvI//hHeR2hWBq1ihuY3oO+AW
yOZPZXd0CjFF+vaoFCRMF55T5mBBQlEzaJEBDZRESrPVsehm2ToX+/WjJRweCmbt
NPfNv3emZLF7te0d2gI7RRbNCKawqCWqV7wpjxjoDd8aORGpyv0SwobGGdZwf88H
FyHQZI63JDbu01Zw4uCWeAv7jTbTjg1FHNpg7tNA3/TMaEb1nhitrzq0UPAldAX9
m0eFf6oHCTwxLpSQQrYesfMyKXKTJyeF9LHe7cbc7LRakpARdo8E3ZJHh87bxoiL
U3FKt00f8/f0cS9qwqiUIDlJPPm+aQ34uvBwnC+VpGHnPu4k/07CQOOqGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxVE4uEZg6baCuaTcLFskHwiDmAMB8GA1UdIwQY
MBaAFFMSnQSN6y4L9iJxOZoJC5AQFgs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXhLZEJJM3JMZ3YySW5FNW1na0xrQkFXQ3prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS84ZDU4ZTQtODhmNi00YWVkLWJhNDMt
N2FlNjM1OWQzMTEwLzEvVXhLZEJJM3JMZ3YySW5FNW1na0xrQkFXQ3prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS84ZDU4ZTQtODhmNi00YWVkLWJhNDMtN2FlNjM1OWQzMTEw
LzEvVXhLZEJJM3JMZ3YySW5FNW1na0xrQkFXQ3prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmPoMJrf0
vK0rTG+KOQmSMtL1Kd4hok8MBkXO1aj8ks+FAE2moEOj8K9sqZ9BQgfN4bcTggeB
Ktj1dqp2ZfwVuVSFSObsbT/fBzvF2W/CMJZ2Q2PtMcIE85TR6U3jl7z2aAsUODen
GWurF2qet9K4PwzjSWWyknfkd5W2tpmcLYOgWzMalHwCR1MGgyMCwilGpzLWU9gn
wEFgxtieulI5LHHpT4+mi7OSg2S//dH6+IsZz3PV77ijgO2lLLS/et4X2DSwIBKy
cJrHQEKIZZ5x5Ab6MJa8RCO9OGg3vb7TwfIcPEQ6avGdV3kYlCEOWecRxzgDm51k
dmzqxKVWTYtD7A==
-----END CERTIFICATE-----
Generated at Fri Mar 27 04:14:59 2026 by rpki-client