Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/bcc468-bd66-4c34-ad37-0efb99724d99/1/UVtUV3FxT4lre0FxJcklQWItDd0.mft
File: UVtUV3FxT4lre0FxJcklQWItDd0.mft (raw, json)
Hash identifier: XZTzViuaaWqQkCIpaOUlnWOQstKLkjCeY3afDsXNfpc=
Subject key identifier: BA:4F:D4:66:78:78:4D:A7:59:8E:52:C5:B0:36:BC:AC:A5:3D:0F:51
Authority key identifier: 51:5B:54:57:71:71:4F:89:6B:7B:41:71:25:C9:25:41:62:2D:0D:DD
Certificate issuer: /CN=515b545771714f896b7b417125c92541622d0ddd
Certificate serial: 019D38661834E61010EA920EEEEFAA6765C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVtUV3FxT4lre0FxJcklQWItDd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/bcc468-bd66-4c34-ad37-0efb99724d99/1/UVtUV3FxT4lre0FxJcklQWItDd0.mft
Manifest number: 1F
Signing time: Sun 29 Mar 2026 07:01:48 +0000
Manifest this update: Sun 29 Mar 2026 07:01:48 +0000
Manifest next update: Mon 30 Mar 2026 07:01:48 +0000
Files and hashes: 1: UL8oCh7jC8MrhaCkeuIjsE-ENXk.roa (hash: EzyQeu5N9vyCieYirP7cUQDe+vJjtb3I3PrNd+S1+Zc=)
2: UVtUV3FxT4lre0FxJcklQWItDd0.crl (hash: 6SW1dWxFvb2ccWCGjL4lSZ/4WITHMEyMOQtwtoqAcec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/bcc468-bd66-4c34-ad37-0efb99724d99/1/UVtUV3FxT4lre0FxJcklQWItDd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/bcc468-bd66-4c34-ad37-0efb99724d99/1/UVtUV3FxT4lre0FxJcklQWItDd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVtUV3FxT4lre0FxJcklQWItDd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:18:34:e6:10:10:ea:92:0e:ee:ef:aa:67:65:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=515b545771714f896b7b417125c92541622d0ddd
Validity
Not Before: Mar 29 07:01:48 2026 GMT
Not After : Mar 30 07:01:48 2026 GMT
Subject: CN=ba4fd46678784da7598e52c5b036bcaca53d0f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ff:ab:12:08:1a:7c:60:7d:c4:f7:d1:5e:20:
15:a8:09:76:35:67:2b:3d:b1:6d:91:23:0c:8f:d7:
93:3e:5e:20:da:79:dd:5c:b9:93:1d:de:f5:83:02:
43:77:da:f7:4b:24:8b:de:4e:b9:b7:09:23:bf:5f:
5c:ec:49:fa:71:5b:46:78:c9:4a:3e:75:07:b2:f2:
87:c7:95:61:24:04:03:7b:9d:69:b7:bc:23:06:d2:
f1:c6:c3:1b:8c:b7:41:80:85:fd:ab:a8:32:49:50:
a6:52:dc:e6:fb:ac:6c:35:41:56:ae:0f:d2:fc:f0:
7f:ad:75:af:a9:25:49:fd:1f:a4:1e:fd:fc:a6:1a:
fd:af:b8:89:6e:98:9b:b0:7a:ae:fe:aa:c9:86:df:
e2:af:7a:31:3b:66:e5:5b:67:d6:29:4a:ed:9d:ce:
d3:3d:2a:dd:6b:82:01:71:c8:c5:cf:67:ea:71:8d:
5f:39:f2:94:15:db:0b:fd:d8:64:1f:18:59:8e:ea:
7a:24:d4:86:c7:07:1e:f7:b7:2f:7e:65:92:94:89:
80:95:cf:9a:7e:21:78:41:7b:2e:bb:3c:ae:2d:61:
e7:e9:77:b6:e4:6a:09:f6:1f:ae:5b:53:22:d6:97:
ff:66:bc:f3:72:19:0e:80:77:72:61:93:ba:52:62:
ad:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4F:D4:66:78:78:4D:A7:59:8E:52:C5:B0:36:BC:AC:A5:3D:0F:51
X509v3 Authority Key Identifier:
keyid:51:5B:54:57:71:71:4F:89:6B:7B:41:71:25:C9:25:41:62:2D:0D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVtUV3FxT4lre0FxJcklQWItDd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/bcc468-bd66-4c34-ad37-0efb99724d99/1/UVtUV3FxT4lre0FxJcklQWItDd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/bcc468-bd66-4c34-ad37-0efb99724d99/1/UVtUV3FxT4lre0FxJcklQWItDd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:6f:30:3f:0e:ba:9d:cb:8e:dd:ad:17:c2:bb:4e:a0:db:39:
8c:f8:c6:4a:62:e6:77:9c:44:ef:57:51:bd:01:69:cf:1a:cb:
59:77:db:e8:4c:e4:fb:53:69:3f:4e:99:31:d8:b5:fb:2d:0c:
83:d2:f9:ca:ea:7c:81:10:69:1e:6d:b5:cd:c5:7f:b5:d7:e8:
d3:9c:af:71:10:4c:29:38:10:a1:5b:6d:a5:c4:52:ca:3a:42:
df:3d:66:39:66:37:0d:fd:37:11:89:52:f2:ab:6e:b1:81:e1:
06:79:54:9b:fe:cd:fa:ed:bc:7e:bd:41:2a:77:9a:3d:a2:6b:
6f:fe:1b:ea:5d:d9:e8:e7:76:21:65:37:df:c4:9a:0c:67:ab:
10:f2:87:66:87:cf:2f:93:a6:31:39:11:c9:75:a8:ee:74:1d:
5a:e7:f0:5c:39:1f:2f:7a:a1:58:94:bc:cb:17:d8:32:da:5c:
4d:25:99:44:a7:5b:3d:32:7f:96:11:88:1d:cf:83:83:a2:54:
65:bb:96:d2:82:e1:04:fb:3b:66:90:87:03:e2:72:7b:7a:84:
d6:71:45:0e:19:01:2a:ba:b0:ff:d6:07:ec:26:89:b4:3b:4b:
84:66:43:7c:c4:a5:c4:a1:aa:82:be:6d:d4:11:44:a1:96:ba:
bb:98:8c:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zhg05hAQ6pIO7u+qZ2XCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNWI1NDU3NzE3MTRmODk2YjdiNDE3MTI1YzkyNTQxNjIy
ZDBkZGQwHhcNMjYwMzI5MDcwMTQ4WhcNMjYwMzMwMDcwMTQ4WjAzMTEwLwYDVQQD
EyhiYTRmZDQ2Njc4Nzg0ZGE3NTk4ZTUyYzViMDM2YmNhY2E1M2QwZjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/+rEggafGB9xPfRXiAVqAl2NWcr
PbFtkSMMj9eTPl4g2nndXLmTHd71gwJDd9r3SySL3k65twkjv19c7En6cVtGeMlK
PnUHsvKHx5VhJAQDe51pt7wjBtLxxsMbjLdBgIX9q6gySVCmUtzm+6xsNUFWrg/S
/PB/rXWvqSVJ/R+kHv38phr9r7iJbpibsHqu/qrJht/ir3oxO2blW2fWKUrtnc7T
PSrda4IBccjFz2fqcY1fOfKUFdsL/dhkHxhZjup6JNSGxwce97cvfmWSlImAlc+a
fiF4QXsuuzyuLWHn6Xe25GoJ9h+uW1Mi1pf/ZrzzchkOgHdyYZO6UmKtkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpP1GZ4eE2nWY5SxbA2vKylPQ9RMB8GA1UdIwQY
MBaAFFFbVFdxcU+Ja3tBcSXJJUFiLQ3dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVZ0VVYzRnhUNGxyZTBGeEpja2xRV0l0RGQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9iY2M0NjgtYmQ2Ni00YzM0LWFkMzct
MGVmYjk5NzI0ZDk5LzEvVVZ0VVYzRnhUNGxyZTBGeEpja2xRV0l0RGQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9iY2M0NjgtYmQ2Ni00YzM0LWFkMzctMGVmYjk5NzI0ZDk5
LzEvVVZ0VVYzRnhUNGxyZTBGeEpja2xRV0l0RGQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApG8wPw66
ncuO3a0XwrtOoNs5jPjGSmLmd5xE71dRvQFpzxrLWXfb6Ezk+1NpP06ZMdi1+y0M
g9L5yup8gRBpHm21zcV/tdfo05yvcRBMKTgQoVttpcRSyjpC3z1mOWY3Df03EYlS
8qtusYHhBnlUm/7N+u28fr1BKneaPaJrb/4b6l3Z6Od2IWU338SaDGerEPKHZofP
L5OmMTkRyXWo7nQdWufwXDkfL3qhWJS8yxfYMtpcTSWZRKdbPTJ/lhGIHc+Dg6JU
ZbuW0oLhBPs7ZpCHA+Jye3qE1nFFDhkBKrqw/9YH7CaJtDtLhGZDfMSlxKGqgr5t
1BFEoZa6u5iMbQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:38:57 2026 by rpki-client