Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
File: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft (raw, json)
Hash identifier: UfZus7ZdvOAcZNik3M3mKGWeSVRjGvJrn6dZHJM+BRo=
Subject key identifier: D5:12:B4:F0:B7:F3:6E:EB:6E:62:F2:F6:68:55:C2:EB:67:53:38:1A
Authority key identifier: 52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
Certificate issuer: /CN=52302a45d0568486051a7ec466f03108c320b4c4
Certificate serial: 019D38D339714A90FE82B1D528371F945D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
Manifest number: 1740
Signing time: Sun 29 Mar 2026 09:00:59 +0000
Manifest this update: Sun 29 Mar 2026 09:00:59 +0000
Manifest next update: Mon 30 Mar 2026 09:00:59 +0000
Files and hashes: 1: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl (hash: h7KY9XMoNvrkoGgIJr+Dyj2ozkuHN3+gkQKaNQBoOeE=)
2: tPGHq-xonUhjbc0GPXfgpubi7fg.roa (hash: enO+XevnxDfW0eM48CipaEGSZTkfKHUjYqxFWFDkOZ4=)
3: wRc3Z7cAWkuH8qIX0DCtlZppJxw.roa (hash: LxXQG3jteUBxRZiT3TEKB78O1uWlhGbpoLQr0jkRBdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:39:71:4a:90:fe:82:b1:d5:28:37:1f:94:5d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52302a45d0568486051a7ec466f03108c320b4c4
Validity
Not Before: Mar 29 09:00:59 2026 GMT
Not After : Mar 30 09:00:59 2026 GMT
Subject: CN=d512b4f0b7f36eeb6e62f2f66855c2eb6753381a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:19:ff:d8:e1:0e:8f:81:81:a4:30:24:0f:
2e:52:0c:2c:55:c7:bd:27:27:92:6b:35:4c:c5:00:
7f:3b:05:67:1a:2a:11:70:2a:2e:71:b5:d3:42:67:
00:ea:6b:42:af:d6:e4:0c:34:61:47:96:06:af:01:
de:18:85:38:f0:16:2d:97:f7:77:52:79:b4:1e:10:
b9:51:5d:bf:51:95:d9:c6:da:55:0a:e4:94:70:f1:
07:18:ae:e5:71:63:84:52:53:c4:9d:fa:da:00:55:
c3:b1:71:b5:6c:9f:c4:49:0b:36:fb:d6:44:9e:a9:
40:01:ae:f3:76:68:bd:e9:82:99:13:43:97:98:f1:
5c:40:8a:a7:34:bb:8d:02:8c:8f:96:77:47:76:7b:
ff:6d:bb:bb:9e:5c:96:0d:ba:d2:ce:26:d8:bc:86:
50:a2:49:dc:69:51:54:f0:91:0b:8a:24:b6:b0:ae:
23:0a:89:ea:0e:9c:01:7d:63:42:c9:56:42:b3:6e:
5c:fa:3d:12:3d:c9:b3:0a:f8:f2:ad:56:9a:69:24:
63:5f:62:89:fa:aa:f3:f1:e6:d8:8d:be:87:be:49:
a7:2a:9e:eb:58:73:5a:38:a3:99:26:e9:76:90:3a:
a0:f3:12:d6:a1:2f:57:18:e0:ca:87:9b:94:26:87:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:12:B4:F0:B7:F3:6E:EB:6E:62:F2:F6:68:55:C2:EB:67:53:38:1A
X509v3 Authority Key Identifier:
keyid:52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ca:fe:a4:3d:37:f7:09:72:51:7a:6d:c8:56:5a:27:fe:bf:
36:12:64:46:0b:41:91:47:63:12:ef:02:09:e0:0e:0f:78:8d:
0f:83:77:65:50:41:e0:99:3c:f3:5e:0f:9f:91:64:47:fa:c7:
3c:93:ce:94:5c:6b:7d:ad:ac:45:9a:78:93:7f:fc:08:70:d3:
eb:96:be:b1:e9:20:67:b6:a0:f2:97:31:60:5b:f0:2a:03:a3:
24:4d:9e:c1:41:8c:f5:92:df:80:f8:1b:10:12:ce:e5:e8:e4:
99:4a:b4:e9:d6:79:04:a4:28:d3:c0:38:6e:81:6e:55:48:64:
72:db:11:45:c6:f6:c2:79:a5:aa:76:4f:38:27:95:b1:69:4b:
ba:75:2c:29:e6:db:39:19:f3:dc:1e:6a:e3:63:dd:56:1c:78:
8b:85:1b:04:96:b0:1b:c6:93:3c:60:05:a3:a9:6c:b1:90:6c:
e2:0b:e3:4c:04:33:eb:33:0b:08:6b:75:84:b8:13:ae:28:1e:
6e:54:99:9e:a0:00:81:cb:45:2f:1d:76:46:a1:4c:cd:ba:9a:
97:c4:57:86:b7:d9:31:fb:63:bb:cc:f0:38:22:5a:52:13:eb:
49:54:f1:f3:86:ab:a9:5a:bb:ca:34:0a:26:c7:a9:b0:5b:2c:
34:6d:9b:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040zlxSpD+grHVKDcflF0aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMzAyYTQ1ZDA1Njg0ODYwNTFhN2VjNDY2ZjAzMTA4YzMy
MGI0YzQwHhcNMjYwMzI5MDkwMDU5WhcNMjYwMzMwMDkwMDU5WjAzMTEwLwYDVQQD
EyhkNTEyYjRmMGI3ZjM2ZWViNmU2MmYyZjY2ODU1YzJlYjY3NTMzODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskgZ/9jhDo+BgaQwJA8uUgwsVce9
JyeSazVMxQB/OwVnGioRcCoucbXTQmcA6mtCr9bkDDRhR5YGrwHeGIU48BYtl/d3
Unm0HhC5UV2/UZXZxtpVCuSUcPEHGK7lcWOEUlPEnfraAFXDsXG1bJ/ESQs2+9ZE
nqlAAa7zdmi96YKZE0OXmPFcQIqnNLuNAoyPlndHdnv/bbu7nlyWDbrSzibYvIZQ
okncaVFU8JELiiS2sK4jConqDpwBfWNCyVZCs25c+j0SPcmzCvjyrVaaaSRjX2KJ
+qrz8ebYjb6HvkmnKp7rWHNaOKOZJul2kDqg8xLWoS9XGODKh5uUJofwbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUStPC3827rbmLy9mhVwutnUzgaMB8GA1UdIwQY
MBaAFFIwKkXQVoSGBRp+xGbwMQjDILTEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWpBcVJkQldoSVlGR243RVp2QXhDTU1ndE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS83NWJhNzItZDdiMi00MjgzLTlmMGIt
ZTNlNWZhMzZiYjJmLzEvVWpBcVJkQldoSVlGR243RVp2QXhDTU1ndE1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS83NWJhNzItZDdiMi00MjgzLTlmMGItZTNlNWZhMzZiYjJm
LzEvVWpBcVJkQldoSVlGR243RVp2QXhDTU1ndE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8r+pD03
9wlyUXptyFZaJ/6/NhJkRgtBkUdjEu8CCeAOD3iND4N3ZVBB4Jk8814Pn5FkR/rH
PJPOlFxrfa2sRZp4k3/8CHDT65a+sekgZ7ag8pcxYFvwKgOjJE2ewUGM9ZLfgPgb
EBLO5ejkmUq06dZ5BKQo08A4boFuVUhkctsRRcb2wnmlqnZPOCeVsWlLunUsKebb
ORnz3B5q42PdVhx4i4UbBJawG8aTPGAFo6lssZBs4gvjTAQz6zMLCGt1hLgTrige
blSZnqAAgctFLx12RqFMzbqal8RXhrfZMftju8zwOCJaUhPrSVTx84arqVq7yjQK
JsepsFssNG2b+g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:57:09 2026 by rpki-client