Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.mft
File: UWHWKAvSDXvN_WUlEJpD4uo8Yq4.mft (raw, json)
Hash identifier: QvuLQ6O6dVsH2rrsPxLyDaUUf/Re9R2So89317l5sK8=
Subject key identifier: 40:15:51:92:53:5A:72:4C:0E:93:15:BE:14:F1:35:28:56:30:85:12
Authority key identifier: 51:61:D6:28:0B:D2:0D:7B:CD:FD:65:25:10:9A:43:E2:EA:3C:62:AE
Certificate issuer: /CN=5161d6280bd20d7bcdfd6525109a43e2ea3c62ae
Certificate serial: 019D382DCE4DC57F1113CA188250802CE419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.mft
Manifest number: 024C
Signing time: Sun 29 Mar 2026 06:00:19 +0000
Manifest this update: Sun 29 Mar 2026 06:00:19 +0000
Manifest next update: Mon 30 Mar 2026 06:00:19 +0000
Files and hashes: 1: UWHWKAvSDXvN_WUlEJpD4uo8Yq4.crl (hash: RiPyW3ElsxUV0kmbMIhMYLyhH2cFC+92eBxDNlhLrWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:ce:4d:c5:7f:11:13:ca:18:82:50:80:2c:e4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5161d6280bd20d7bcdfd6525109a43e2ea3c62ae
Validity
Not Before: Mar 29 06:00:19 2026 GMT
Not After : Mar 30 06:00:19 2026 GMT
Subject: CN=40155192535a724c0e9315be14f1352856308512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d1:6b:11:df:5d:7c:1e:f9:94:fb:29:db:01:
18:b9:33:f5:48:55:d9:1b:1b:40:86:b6:14:c0:cf:
53:1c:4e:c0:a3:31:b2:ed:71:d9:45:16:08:73:35:
53:06:df:23:d0:fe:8a:66:bb:07:60:c4:98:2b:b1:
bc:f8:55:73:2e:f6:0f:2a:3c:91:b1:6d:bc:bb:d4:
ee:12:ab:97:a5:ab:79:97:2a:c5:ef:d4:55:dc:14:
3d:b9:61:50:82:cf:3b:49:50:0d:ed:c3:d1:79:c5:
b7:67:7d:5a:78:70:9f:62:72:00:88:30:d1:61:9d:
c5:ad:05:ff:df:79:86:94:96:c4:6a:82:47:89:78:
79:9e:69:4e:99:5f:e9:36:7b:08:a6:41:b3:e9:00:
f1:52:3f:6a:a8:5e:ed:fb:ea:1a:ee:1a:7f:b9:c7:
93:8e:c1:76:eb:6f:34:6d:bc:dc:d4:2d:6d:15:16:
98:2e:f6:92:4a:db:59:5b:95:97:62:7e:57:64:54:
83:7a:67:8d:b9:f4:31:d9:9d:ee:13:cf:ed:47:e4:
57:1c:7d:67:9e:60:fa:de:83:59:78:d0:33:ab:02:
a5:f3:f5:f8:e1:a2:85:5c:41:64:06:41:3d:c3:24:
8e:ef:fd:cf:8e:41:76:11:cd:8a:44:9f:72:16:88:
00:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:15:51:92:53:5A:72:4C:0E:93:15:BE:14:F1:35:28:56:30:85:12
X509v3 Authority Key Identifier:
keyid:51:61:D6:28:0B:D2:0D:7B:CD:FD:65:25:10:9A:43:E2:EA:3C:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ee:30:0e:bf:da:47:0b:46:22:b1:33:a2:fd:73:ed:d6:a6:
60:fc:1e:28:e5:ac:e2:26:b0:08:2e:c6:5c:d7:7c:b2:38:1b:
0e:70:c4:d0:64:1f:2b:64:1f:f8:68:1c:e0:c6:a1:38:44:95:
60:5d:86:0a:4a:2e:19:1d:16:c2:d8:fc:43:9f:b6:ce:1d:2d:
9a:48:04:3d:41:99:65:24:c8:d9:88:0b:72:78:00:2b:e6:f5:
de:9f:78:0b:f6:d0:07:c9:4b:d8:4f:91:63:51:53:3a:be:0f:
ba:17:11:bc:95:fc:18:3e:e0:2b:38:89:56:d1:8f:58:c4:5e:
17:e7:9a:d4:79:38:da:27:16:c6:26:68:65:e0:f1:09:51:c6:
98:b1:46:29:10:9a:73:9c:97:a7:35:24:2b:84:e0:da:f6:76:
0d:9d:b0:0d:08:c1:15:10:28:a5:9b:46:0b:d1:e4:db:87:80:
99:26:97:68:0c:c8:63:bb:07:0e:d2:ed:5a:08:46:1e:49:3e:
8e:03:a4:d6:cb:55:98:f7:4e:33:f8:75:5e:8f:31:c6:58:bf:
02:04:7d:9c:ef:88:bc:af:62:ce:7c:4a:8c:5c:c0:25:b7:8f:
bc:76:ce:97:ae:f7:d0:81:dc:3f:20:ed:d5:a4:2f:63:55:e0:
36:c9:b6:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lc5NxX8RE8oYglCALOQZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNjFkNjI4MGJkMjBkN2JjZGZkNjUyNTEwOWE0M2UyZWEz
YzYyYWUwHhcNMjYwMzI5MDYwMDE5WhcNMjYwMzMwMDYwMDE5WjAzMTEwLwYDVQQD
Eyg0MDE1NTE5MjUzNWE3MjRjMGU5MzE1YmUxNGYxMzUyODU2MzA4NTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntFrEd9dfB75lPsp2wEYuTP1SFXZ
GxtAhrYUwM9THE7AozGy7XHZRRYIczVTBt8j0P6KZrsHYMSYK7G8+FVzLvYPKjyR
sW28u9TuEquXpat5lyrF79RV3BQ9uWFQgs87SVAN7cPRecW3Z31aeHCfYnIAiDDR
YZ3FrQX/33mGlJbEaoJHiXh5nmlOmV/pNnsIpkGz6QDxUj9qqF7t++oa7hp/uceT
jsF26280bbzc1C1tFRaYLvaSSttZW5WXYn5XZFSDemeNufQx2Z3uE8/tR+RXHH1n
nmD63oNZeNAzqwKl8/X44aKFXEFkBkE9wySO7/3PjkF2Ec2KRJ9yFogAiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAVUZJTWnJMDpMVvhTxNShWMIUSMB8GA1UdIwQY
MBaAFFFh1igL0g17zf1lJRCaQ+LqPGKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVdIV0tBdlNEWHZOX1dVbEVKcEQ0dW84WXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84ZWMxMjAtYWNhNy00NDQ1LTlhNjkt
YTBhMTBlY2I0MmE5LzEvVVdIV0tBdlNEWHZOX1dVbEVKcEQ0dW84WXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84ZWMxMjAtYWNhNy00NDQ1LTlhNjktYTBhMTBlY2I0MmE5
LzEvVVdIV0tBdlNEWHZOX1dVbEVKcEQ0dW84WXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv+4wDr/a
RwtGIrEzov1z7damYPweKOWs4iawCC7GXNd8sjgbDnDE0GQfK2Qf+Ggc4MahOESV
YF2GCkouGR0Wwtj8Q5+2zh0tmkgEPUGZZSTI2YgLcngAK+b13p94C/bQB8lL2E+R
Y1FTOr4PuhcRvJX8GD7gKziJVtGPWMReF+ea1Hk42icWxiZoZeDxCVHGmLFGKRCa
c5yXpzUkK4Tg2vZ2DZ2wDQjBFRAopZtGC9Hk24eAmSaXaAzIY7sHDtLtWghGHkk+
jgOk1stVmPdOM/h1Xo8xxli/AgR9nO+IvK9iznxKjFzAJbePvHbOl6730IHcPyDt
1aQvY1XgNsm2Qg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:46 2026 by rpki-client