Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
File: UltwWpHbww7RDrciK3eXuDTgGGM.mft (raw, json)
Hash identifier: yjp5Wsw4SW9h8aXRkcCvthS2NH6hvEq0Z9dC4mMtSO0=
Subject key identifier: C6:EB:3D:70:83:DD:BD:1A:55:8B:CB:0D:94:E2:08:0B:B9:08:75:9B
Authority key identifier: 52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
Certificate issuer: /CN=525b705a91dbc30ed10eb7222b7797b834e01863
Certificate serial: 019E86EC1E93BE2518217C1717EC7F8ADE1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
Manifest number: 1941
Signing time: Tue 02 Jun 2026 06:01:21 +0000
Manifest this update: Tue 02 Jun 2026 06:01:21 +0000
Manifest next update: Wed 03 Jun 2026 06:01:21 +0000
Files and hashes: 1: KlL1K6iOrdNgSybgFClw1upWqbU.roa (hash: W7OttyGx9EuMgenKXewm+r+hTp3kZdfJ3JB/6T3yysg=)
2: UltwWpHbww7RDrciK3eXuDTgGGM.crl (hash: bZz0w+ge0JvN45CPHXbLNGAUoghmE4WInV5Btl7bty8=)
3: pa_3nrQU9sw7OgTjd5yx0VmvRCA.roa (hash: RO+47JjxuCYnZ9Bz/vNN2VIRL6JJUsDg7rwYhEHWFsY=)
4: zNKUtHAFTtLYqLumLGcRzG27f7Y.roa (hash: 872Fq4m0qhsFSDlfogdNcIFhv8haNEfuUjtryb/YTr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:86:ec:1e:93:be:25:18:21:7c:17:17:ec:7f:8a:de:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525b705a91dbc30ed10eb7222b7797b834e01863
Validity
Not Before: Jun 2 06:01:21 2026 GMT
Not After : Jun 3 06:01:21 2026 GMT
Subject: CN=c6eb3d7083ddbd1a558bcb0d94e2080bb908759b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6d:6d:5b:2c:59:ba:e0:a5:6e:49:9d:d5:e8:
2d:fb:7b:e0:df:dc:cb:1b:0a:ce:1c:8e:f6:e9:a4:
41:25:4f:d9:f2:6c:f4:98:cb:7d:5e:71:d3:68:cb:
9b:7b:67:cd:36:34:7b:5e:ff:75:9c:3d:58:0a:08:
af:b0:5a:40:37:29:18:77:20:fd:8e:9c:0c:5a:94:
cf:30:8b:f2:33:75:49:37:79:f1:f6:53:7e:e6:de:
ca:bd:a2:2e:7b:86:d5:d1:cb:f3:e0:f2:34:ed:55:
d7:f3:ca:13:ff:e4:fd:40:46:e9:88:e3:3c:56:3a:
a1:8e:e9:13:9f:93:ee:00:e3:f3:90:56:1f:3d:71:
d3:91:3d:33:19:4d:3f:46:d9:36:c8:51:3b:a1:e4:
e7:29:e8:0c:09:d2:d2:f8:bd:02:95:53:04:fd:50:
b6:f6:33:b1:1e:ff:d7:e2:35:31:4b:ce:38:cf:bb:
9b:f0:1a:2f:b4:dd:5c:f8:63:1d:64:8f:50:93:bb:
84:aa:59:76:32:8f:4a:28:6c:a8:2f:7e:a3:dd:ad:
54:aa:19:25:a5:f2:6c:d7:ba:db:66:bb:b7:36:a7:
ec:e5:48:81:be:2e:1b:f9:73:58:de:b6:0d:63:a7:
99:b2:9a:a6:2b:68:a1:7a:9d:62:f6:5c:54:0f:aa:
58:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EB:3D:70:83:DD:BD:1A:55:8B:CB:0D:94:E2:08:0B:B9:08:75:9B
X509v3 Authority Key Identifier:
keyid:52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:10:32:b1:75:63:7f:06:eb:47:bb:d4:2a:e5:14:d4:b9:b1:
dc:1f:d6:42:e1:36:9b:a7:2d:ae:90:96:5f:06:13:10:2e:ca:
1f:65:ea:3d:ca:23:46:b4:f6:90:c0:23:89:45:05:11:5d:83:
f6:db:b5:b8:43:77:ec:7a:1d:7e:50:92:b8:2b:52:28:7e:8f:
43:89:e0:31:2e:23:bc:49:65:b5:fd:49:e0:8f:64:35:b3:52:
4e:fd:21:21:6e:a1:16:b2:15:64:8a:ac:d0:af:72:42:11:56:
40:6e:a7:c4:da:01:1f:10:34:78:d2:20:80:ed:d5:70:7d:27:
69:dd:00:d9:88:e2:f5:8f:35:a5:c8:b1:d1:48:2e:b6:1b:60:
39:5e:29:4a:40:e4:5a:ef:40:33:50:e4:1e:e8:a1:d7:4f:a0:
74:07:4c:c0:58:d1:89:15:c7:e3:2e:67:d3:67:68:d4:22:8f:
41:49:27:b0:53:ef:db:02:f5:3d:2a:d0:ab:d0:33:99:09:07:
67:59:c9:b9:b2:ca:e2:c6:05:bd:d5:65:35:6e:ed:21:c8:96:
d3:92:00:4e:f8:45:32:9d:97:b0:cd:4f:ed:10:28:9e:3e:d4:
34:b7:7b:27:a2:bd:05:00:09:e7:21:d5:af:2f:34:49:cf:da:
cd:5e:84:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6G7B6TviUYIXwXF+x/it4bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNWI3MDVhOTFkYmMzMGVkMTBlYjcyMjJiNzc5N2I4MzRl
MDE4NjMwHhcNMjYwNjAyMDYwMTIxWhcNMjYwNjAzMDYwMTIxWjAzMTEwLwYDVQQD
EyhjNmViM2Q3MDgzZGRiZDFhNTU4YmNiMGQ5NGUyMDgwYmI5MDg3NTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW1tWyxZuuClbkmd1egt+3vg39zL
GwrOHI726aRBJU/Z8mz0mMt9XnHTaMube2fNNjR7Xv91nD1YCgivsFpANykYdyD9
jpwMWpTPMIvyM3VJN3nx9lN+5t7KvaIue4bV0cvz4PI07VXX88oT/+T9QEbpiOM8
VjqhjukTn5PuAOPzkFYfPXHTkT0zGU0/Rtk2yFE7oeTnKegMCdLS+L0ClVME/VC2
9jOxHv/X4jUxS844z7ub8BovtN1c+GMdZI9Qk7uEqll2Mo9KKGyoL36j3a1Uqhkl
pfJs17rbZru3Nqfs5UiBvi4b+XNY3rYNY6eZspqmK2ihep1i9lxUD6pYAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbrPXCD3b0aVYvLDZTiCAu5CHWbMB8GA1UdIwQY
MBaAFFJbcFqR28MO0Q63Iit3l7g04BhjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWx0d1dwSGJ3dzdSRHJjaUszZVh1RFRnR0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNDYyZGMtOWU1OS00ZThkLTljNmQt
ZjQ2ODg3ZGY5ODYzLzEvVWx0d1dwSGJ3dzdSRHJjaUszZVh1RFRnR0dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNDYyZGMtOWU1OS00ZThkLTljNmQtZjQ2ODg3ZGY5ODYz
LzEvVWx0d1dwSGJ3dzdSRHJjaUszZVh1RFRnR0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBAysXVj
fwbrR7vUKuUU1Lmx3B/WQuE2m6ctrpCWXwYTEC7KH2XqPcojRrT2kMAjiUUFEV2D
9tu1uEN37HodflCSuCtSKH6PQ4ngMS4jvElltf1J4I9kNbNSTv0hIW6hFrIVZIqs
0K9yQhFWQG6nxNoBHxA0eNIggO3VcH0nad0A2Yji9Y81pcix0UguthtgOV4pSkDk
Wu9AM1DkHuih10+gdAdMwFjRiRXH4y5n02do1CKPQUknsFPv2wL1PSrQq9AzmQkH
Z1nJubLK4sYFvdVlNW7tIciW05IATvhFMp2XsM1P7RAonj7UNLd7J6K9BQAJ5yHV
ry80Sc/azV6E5g==
-----END CERTIFICATE-----
Generated at Tue Jun 2 13:02:31 2026 by rpki-client