Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.mft
File: uEWIWKHL3onJKQYPQvKw35JNTik.mft (raw, json)
Hash identifier: pn8GQfhlffYmvpelq5C15KVARWq6JBc0jfz5mJYQJ64=
Subject key identifier: 7B:E8:29:AA:67:46:68:6D:4E:66:13:01:A8:49:7E:B8:5A:83:09:3E
Authority key identifier: B8:45:88:58:A1:CB:DE:89:C9:29:06:0F:42:F2:B0:DF:92:4D:4E:29
Certificate issuer: /CN=b8458858a1cbde89c929060f42f2b0df924d4e29
Certificate serial: 019D37522C2BBDF7914BB1664DC5CCBBFCF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEWIWKHL3onJKQYPQvKw35JNTik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.mft
Manifest number: 0D0F
Signing time: Sun 29 Mar 2026 02:00:25 +0000
Manifest this update: Sun 29 Mar 2026 02:00:25 +0000
Manifest next update: Mon 30 Mar 2026 02:00:25 +0000
Files and hashes: 1: HqjPBLQP0k_ZWUi4re8PM7q9yeE.roa (hash: zWvSWnQ+ZhrAVivum98kmHRXOZE35K47bVLXG/JHPOg=)
2: uEWIWKHL3onJKQYPQvKw35JNTik.crl (hash: 68n6J2mCFD98iNoYtLM9TqVKA+nb9/RhP2eMMdQFLRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.mft
rsync://rpki.ripe.net/repository/DEFAULT/uEWIWKHL3onJKQYPQvKw35JNTik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:2c:2b:bd:f7:91:4b:b1:66:4d:c5:cc:bb:fc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8458858a1cbde89c929060f42f2b0df924d4e29
Validity
Not Before: Mar 29 02:00:25 2026 GMT
Not After : Mar 30 02:00:25 2026 GMT
Subject: CN=7be829aa6746686d4e661301a8497eb85a83093e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9c:48:63:f8:1f:29:54:60:44:f5:99:5d:f2:
61:d8:4a:fa:b1:df:2c:16:00:0b:63:5c:e2:80:3f:
5b:e3:da:51:15:c8:21:7d:ea:73:75:b2:a4:17:6e:
90:77:68:ac:7e:46:72:55:f8:dd:28:29:26:5c:f3:
fa:92:cb:ce:d0:c0:65:6b:01:e6:ef:c9:3d:ee:f8:
18:26:e6:a0:60:7f:72:ba:c1:1d:2d:d9:13:27:ce:
a1:86:9f:dc:cf:bd:83:ed:5f:09:dc:ca:24:21:38:
2a:03:c0:31:6a:8a:a9:5a:9a:03:cf:c1:47:b6:dc:
48:1d:03:4a:27:e3:43:f3:d1:4d:04:c0:7a:0b:68:
9a:bc:7b:c0:9e:95:38:15:ec:3c:15:76:12:99:38:
08:ea:c5:47:68:94:57:e7:dc:86:8f:16:80:2e:41:
f3:e3:3e:ce:33:03:99:cb:1f:df:76:cd:c7:cb:b0:
79:16:44:6a:96:e3:8a:67:d0:28:a1:96:49:16:92:
71:f7:90:c2:a2:4c:04:08:ce:ed:7f:50:86:00:1a:
51:a6:17:07:63:fd:47:7f:ff:45:25:c7:09:38:a2:
73:dc:8f:80:d2:7d:2c:99:f8:c3:0a:5b:83:ed:62:
ff:f3:95:55:84:ed:4b:da:a7:57:56:67:d2:85:76:
b6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E8:29:AA:67:46:68:6D:4E:66:13:01:A8:49:7E:B8:5A:83:09:3E
X509v3 Authority Key Identifier:
keyid:B8:45:88:58:A1:CB:DE:89:C9:29:06:0F:42:F2:B0:DF:92:4D:4E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEWIWKHL3onJKQYPQvKw35JNTik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:cc:09:a4:59:57:35:8a:4d:c6:b5:c0:ed:c9:0d:6b:1d:33:
1b:7b:54:fa:0c:59:7d:fb:8b:22:28:42:cc:ba:4b:a1:43:41:
f1:03:80:f5:03:39:f5:ff:df:1e:6a:0f:b0:c7:c5:42:17:40:
8d:a9:a7:ad:41:5e:27:67:37:60:50:9d:99:21:8e:cc:96:f8:
d5:6d:9c:7e:3e:7a:01:fc:a0:e5:47:94:fa:7c:82:5e:c0:05:
ed:a9:d6:4e:56:fc:ab:c4:41:31:30:82:7b:9b:91:e7:fe:cc:
6a:cc:04:53:95:52:ac:87:5e:70:cf:62:26:d4:3a:f1:da:02:
1e:a6:5c:8e:c4:44:28:f0:5e:18:5d:cb:a2:2e:3a:6a:31:9d:
81:bf:a7:da:fb:65:21:5c:d4:52:aa:24:57:4d:36:be:68:1e:
fc:f1:5a:fa:74:f1:18:28:6e:6d:fa:0c:5c:18:fa:d8:f8:72:
19:81:1f:a1:65:00:21:33:f6:f4:f4:12:d0:16:b2:7d:95:ed:
c8:1a:60:94:49:91:a2:23:95:f4:cc:53:26:03:ed:e5:eb:81:
23:b9:cd:34:22:d5:ce:38:70:bd:8d:69:53:cd:6a:46:94:22:
ae:de:a8:79:03:4b:6e:a7:e8:6f:ee:18:de:f2:a4:29:f4:ab:
57:aa:ee:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UiwrvfeRS7FmTcXMu/zxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NDU4ODU4YTFjYmRlODljOTI5MDYwZjQyZjJiMGRmOTI0
ZDRlMjkwHhcNMjYwMzI5MDIwMDI1WhcNMjYwMzMwMDIwMDI1WjAzMTEwLwYDVQQD
Eyg3YmU4MjlhYTY3NDY2ODZkNGU2NjEzMDFhODQ5N2ViODVhODMwOTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5xIY/gfKVRgRPWZXfJh2Er6sd8s
FgALY1zigD9b49pRFcghfepzdbKkF26Qd2isfkZyVfjdKCkmXPP6ksvO0MBlawHm
78k97vgYJuagYH9yusEdLdkTJ86hhp/cz72D7V8J3MokITgqA8AxaoqpWpoDz8FH
ttxIHQNKJ+ND89FNBMB6C2iavHvAnpU4Few8FXYSmTgI6sVHaJRX59yGjxaALkHz
4z7OMwOZyx/fds3Hy7B5FkRqluOKZ9AooZZJFpJx95DCokwECM7tf1CGABpRphcH
Y/1Hf/9FJccJOKJz3I+A0n0smfjDCluD7WL/85VVhO1L2qdXVmfShXa2AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvoKapnRmhtTmYTAahJfrhagwk+MB8GA1UdIwQY
MBaAFLhFiFihy96JySkGD0LysN+STU4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUVXSVdLSEwzb25KS1FZUFF2S3czNUpOVGlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lNjc0ZmItMjY4My00Y2Y0LTk2N2It
YjdjNjdlYWNjM2E1LzEvdUVXSVdLSEwzb25KS1FZUFF2S3czNUpOVGlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9lNjc0ZmItMjY4My00Y2Y0LTk2N2ItYjdjNjdlYWNjM2E1
LzEvdUVXSVdLSEwzb25KS1FZUFF2S3czNUpOVGlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb8wJpFlX
NYpNxrXA7ckNax0zG3tU+gxZffuLIihCzLpLoUNB8QOA9QM59f/fHmoPsMfFQhdA
jamnrUFeJ2c3YFCdmSGOzJb41W2cfj56Afyg5UeU+nyCXsAF7anWTlb8q8RBMTCC
e5uR5/7MaswEU5VSrIdecM9iJtQ68doCHqZcjsREKPBeGF3Loi46ajGdgb+n2vtl
IVzUUqokV002vmge/PFa+nTxGChubfoMXBj62PhyGYEfoWUAITP29PQS0BayfZXt
yBpglEmRoiOV9MxTJgPt5euBI7nNNCLVzjhwvY1pU81qRpQirt6oeQNLbqfob+4Y
3vKkKfSrV6ruZg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:28 2026 by rpki-client