Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
File: uUTKLZktd4WAC91VJNPhE4PZ8d4.mft (raw, json)
Hash identifier: IIu/5keD8I0IoR/vgkdMPFq9zLCExaeQfIukp6Gugdc=
Subject key identifier: 65:E5:E9:E7:0F:72:FD:62:89:E1:D0:53:6D:EE:29:11:9D:E9:A8:A0
Authority key identifier: B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
Certificate issuer: /CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Certificate serial: 019D382E2F72E0B5743E47773B6645C9DDFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
Manifest number: 14C4
Signing time: Sun 29 Mar 2026 06:00:44 +0000
Manifest this update: Sun 29 Mar 2026 06:00:44 +0000
Manifest next update: Mon 30 Mar 2026 06:00:44 +0000
Files and hashes: 1: UhAbETd73I_RNmPinYlIjwaxS5A.roa (hash: 72Y1aXwOgGGk1TvFfLXba73tNjzJqcFFrwUxU2i0lEg=)
2: uUTKLZktd4WAC91VJNPhE4PZ8d4.crl (hash: N2pBwtNb29vpabtbB3UEUAGl/ZRkHrQRlIsMhuJpnfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:2f:72:e0:b5:74:3e:47:77:3b:66:45:c9:dd:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Validity
Not Before: Mar 29 06:00:44 2026 GMT
Not After : Mar 30 06:00:44 2026 GMT
Subject: CN=65e5e9e70f72fd6289e1d0536dee29119de9a8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:e2:61:4e:1e:a5:ea:bc:67:ec:32:2a:3a:
76:7b:b5:63:49:6e:5d:d2:e4:20:fb:ee:c7:46:c3:
dd:5c:c5:12:0d:89:2d:20:39:ff:88:4a:57:1a:2e:
4e:bd:3a:35:b7:19:75:37:23:a2:88:03:ee:04:b0:
16:87:59:69:60:23:7d:ef:d7:84:80:c5:96:d0:2d:
1b:02:93:07:09:de:fd:9c:af:53:65:d8:ec:63:13:
6e:74:1f:78:c2:5a:bd:b2:f3:41:c9:64:a7:bc:39:
4c:2d:ba:cc:f9:a5:12:4a:ba:83:51:85:9d:7f:d4:
d3:e5:59:09:b5:92:ef:89:31:fe:da:3c:e6:59:1a:
50:e2:0c:a1:cc:56:3c:2e:7e:3e:13:a8:c6:8d:fc:
1b:39:74:66:24:6a:e5:45:b9:77:42:ea:38:ff:bc:
ea:34:32:b1:2d:d1:64:b4:27:0c:c4:2b:77:a6:10:
ad:f8:5e:50:f7:b3:68:cf:74:fc:4d:ad:38:59:9a:
02:89:96:51:36:00:4c:43:d9:05:06:9f:be:b2:f1:
3b:aa:ea:9e:57:f0:5b:0a:69:b2:09:d7:f2:6f:06:
5a:19:1d:a0:2b:8f:89:aa:d1:38:7b:e9:3a:72:a6:
fc:eb:09:cf:81:23:6b:b0:2e:37:4a:67:a8:e8:6a:
04:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E5:E9:E7:0F:72:FD:62:89:E1:D0:53:6D:EE:29:11:9D:E9:A8:A0
X509v3 Authority Key Identifier:
keyid:B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:0c:71:3f:99:31:a2:4b:dc:c7:99:f6:20:fc:b1:4c:7d:04:
8b:24:b2:72:85:98:01:d1:c5:26:ef:9c:91:b2:90:a1:1f:62:
57:80:83:6d:12:4c:6a:87:d5:a8:3d:e3:c4:40:3c:43:82:e6:
21:a1:4f:2d:b5:1f:96:52:c6:97:76:c4:db:f5:f2:b0:39:4b:
e5:58:a5:88:62:bd:22:47:11:ac:2c:c8:fb:b9:f2:5f:35:98:
13:5c:b4:9a:a8:71:a9:61:ad:28:91:7c:35:8e:d9:93:7b:c3:
b0:1c:5a:17:a4:b8:a0:50:19:5f:c9:28:bc:d1:89:dc:4d:e3:
4e:f1:66:2d:2d:63:03:29:df:4f:d4:6c:e7:87:ea:b9:b5:ef:
01:d2:d8:e8:2e:5d:17:c4:44:cd:c5:ca:58:32:7e:ea:c2:30:
f4:65:03:61:8e:41:a8:b9:bc:f6:e4:d9:b4:3c:60:14:b2:2f:
77:f8:6e:41:3a:d2:3f:69:11:92:6c:cb:18:00:e4:56:9f:5a:
61:90:63:b4:4a:52:42:21:7a:c6:27:3a:ff:4d:75:10:87:a8:
2e:4c:b6:b6:c4:9f:19:9d:a4:a2:9d:e5:2a:d3:39:bf:31:ed:
43:7b:ab:66:09:69:3d:85:d8:de:9f:0b:4a:7b:39:0d:2d:5e:
60:11:36:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Li9y4LV0Pkd3O2ZFyd3+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDRjYTJkOTkyZDc3ODU4MDBiZGQ1NTI0ZDNlMTEzODNk
OWYxZGUwHhcNMjYwMzI5MDYwMDQ0WhcNMjYwMzMwMDYwMDQ0WjAzMTEwLwYDVQQD
Eyg2NWU1ZTllNzBmNzJmZDYyODllMWQwNTM2ZGVlMjkxMTlkZTlhOGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw7iYU4epeq8Z+wyKjp2e7VjSW5d
0uQg++7HRsPdXMUSDYktIDn/iEpXGi5OvTo1txl1NyOiiAPuBLAWh1lpYCN979eE
gMWW0C0bApMHCd79nK9TZdjsYxNudB94wlq9svNByWSnvDlMLbrM+aUSSrqDUYWd
f9TT5VkJtZLviTH+2jzmWRpQ4gyhzFY8Ln4+E6jGjfwbOXRmJGrlRbl3Quo4/7zq
NDKxLdFktCcMxCt3phCt+F5Q97Noz3T8Ta04WZoCiZZRNgBMQ9kFBp++svE7quqe
V/BbCmmyCdfybwZaGR2gK4+JqtE4e+k6cqb86wnPgSNrsC43Smeo6GoEAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXl6ecPcv1iieHQU23uKRGd6aigMB8GA1UdIwQY
MBaAFLlEyi2ZLXeFgAvdVSTT4ROD2fHeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVUS0xaa3RkNFdBQzkxVkpOUGhFNFBaOGQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iMzRhMzMtMDYyYi00YjcwLWJhNTEt
MDJhMTJiODYxODBkLzEvdVVUS0xaa3RkNFdBQzkxVkpOUGhFNFBaOGQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9iMzRhMzMtMDYyYi00YjcwLWJhNTEtMDJhMTJiODYxODBk
LzEvdVVUS0xaa3RkNFdBQzkxVkpOUGhFNFBaOGQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwgxxP5kx
okvcx5n2IPyxTH0EiySycoWYAdHFJu+ckbKQoR9iV4CDbRJMaofVqD3jxEA8Q4Lm
IaFPLbUfllLGl3bE2/XysDlL5ViliGK9IkcRrCzI+7nyXzWYE1y0mqhxqWGtKJF8
NY7Zk3vDsBxaF6S4oFAZX8kovNGJ3E3jTvFmLS1jAynfT9Rs54fqubXvAdLY6C5d
F8REzcXKWDJ+6sIw9GUDYY5BqLm89uTZtDxgFLIvd/huQTrSP2kRkmzLGADkVp9a
YZBjtEpSQiF6xic6/011EIeoLky2tsSfGZ2kop3lKtM5vzHtQ3urZglpPYXY3p8L
Sns5DS1eYBE23g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:01 2026 by rpki-client