Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
File: UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft (raw, json)
Hash identifier: 8fdh9J7/EYxfYFgkX3V/NbJVcMHDRjzrJIb3liZHH7A=
Subject key identifier: 5B:A6:33:2A:AB:A5:F2:51:AE:10:22:32:88:F7:B7:35:3D:06:9C:1E
Authority key identifier: 50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
Certificate issuer: /CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Certificate serial: 019D3940DDAADB0477D9C0538A8C6C165339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
Manifest number: 0F96
Signing time: Sun 29 Mar 2026 11:00:45 +0000
Manifest this update: Sun 29 Mar 2026 11:00:45 +0000
Manifest next update: Mon 30 Mar 2026 11:00:45 +0000
Files and hashes: 1: 5qnMhOIBTwB8o6XInGR4S35zi8o.roa (hash: y7FafzXY95fqgAjLfPP4p+mKq1OIvDb5CLfvYqhV8ro=)
2: UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl (hash: /t8IfHe0BoPwKTXb0SwnRfxlu/e6yPCilST24a0qJFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:dd:aa:db:04:77:d9:c0:53:8a:8c:6c:16:53:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Validity
Not Before: Mar 29 11:00:45 2026 GMT
Not After : Mar 30 11:00:45 2026 GMT
Subject: CN=5ba6332aaba5f251ae10223288f7b7353d069c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:26:42:76:32:9b:59:42:50:42:09:51:16:9e:
ea:97:6c:91:3d:a7:5e:81:12:28:b6:eb:55:ab:fc:
ad:fa:79:49:83:3b:36:6a:56:eb:52:7f:4b:7a:69:
0e:f4:a8:5c:05:d0:1a:6e:ef:f8:90:4a:30:7b:83:
39:c8:be:ae:5e:cd:a2:70:f7:ad:33:fb:4c:d5:c8:
72:2b:d9:1f:29:24:d6:18:0f:f2:a6:53:7d:87:8c:
40:8b:50:f6:aa:b5:2d:a8:05:c3:7f:46:cc:33:66:
51:ac:43:fc:1f:0e:8e:d7:0f:f1:3c:ca:a4:89:2c:
52:45:a8:21:3f:a3:b9:20:36:57:aa:a9:64:16:50:
a6:87:eb:e3:f6:46:54:24:9b:d0:dc:73:1f:e9:1f:
d4:c5:4a:b4:14:03:f8:a9:03:8e:af:e2:5b:f6:be:
be:3f:38:62:d6:16:af:54:4f:06:c1:0c:0a:c9:30:
db:71:da:6b:1a:bc:65:fa:cd:d4:be:8e:15:23:da:
93:b4:26:7c:91:19:bf:11:1e:05:18:12:8d:20:28:
bc:ef:11:d1:ef:6e:26:80:c8:81:3d:9b:c4:f7:34:
9d:d6:c4:08:d2:43:af:a2:03:24:f4:83:29:8b:d1:
c9:bc:70:4f:d9:ae:8b:ef:89:1d:20:ac:07:e2:af:
f8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A6:33:2A:AB:A5:F2:51:AE:10:22:32:88:F7:B7:35:3D:06:9C:1E
X509v3 Authority Key Identifier:
keyid:50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:31:b5:ac:8e:93:00:2b:ee:1d:4d:db:25:3d:b5:c8:b1:57:
ab:de:b1:e5:6d:51:10:5a:31:4c:8e:95:8c:19:e1:f5:17:19:
21:cb:53:4d:ac:db:a9:90:38:b5:08:6b:b1:eb:94:7f:6a:b8:
29:92:a7:e1:33:5e:2a:5e:ed:f3:9c:d8:0c:d0:e0:98:0f:1a:
f6:dd:60:45:1e:10:f6:71:12:e8:88:4a:8e:f8:3f:c6:61:75:
52:9b:8a:2b:b3:3a:fa:5b:4c:8c:0b:9e:21:52:a3:77:66:aa:
e3:c1:c1:cb:f9:b0:09:fa:b8:31:e5:9f:30:fe:6d:e2:94:9b:
08:41:de:b3:9a:44:43:2c:fa:fd:e0:da:35:d6:7d:cb:38:d7:
f6:b0:a0:97:0c:bd:5b:43:28:9b:2f:8e:06:d9:71:e9:89:2f:
a5:a4:7c:9c:ee:d2:cf:80:e5:db:e5:4e:9c:56:5a:84:cb:42:
a9:4d:f2:c4:1d:43:85:45:32:a3:c4:ba:b0:33:6d:f6:e4:73:
9c:61:8b:87:c6:4c:b2:14:a9:4f:21:b2:7e:f4:16:ea:ee:05:
73:55:98:fc:73:65:ee:9e:6b:02:42:af:19:70:b4:30:57:73:
54:57:fc:2f:04:0f:7a:1d:57:86:6a:33:bb:4e:3c:d1:a2:ae:
3b:ed:1b:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QN2q2wR32cBTioxsFlM5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYWE5OWViOGMxYjE4YjFhYTdkNDI0NWNlNDgxZmI4ODhm
YmYyNTQwHhcNMjYwMzI5MTEwMDQ1WhcNMjYwMzMwMTEwMDQ1WjAzMTEwLwYDVQQD
Eyg1YmE2MzMyYWFiYTVmMjUxYWUxMDIyMzI4OGY3YjczNTNkMDY5YzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyZCdjKbWUJQQglRFp7ql2yRPade
gRIotutVq/yt+nlJgzs2albrUn9LemkO9KhcBdAabu/4kEowe4M5yL6uXs2icPet
M/tM1chyK9kfKSTWGA/yplN9h4xAi1D2qrUtqAXDf0bMM2ZRrEP8Hw6O1w/xPMqk
iSxSRaghP6O5IDZXqqlkFlCmh+vj9kZUJJvQ3HMf6R/UxUq0FAP4qQOOr+Jb9r6+
Pzhi1havVE8GwQwKyTDbcdprGrxl+s3Uvo4VI9qTtCZ8kRm/ER4FGBKNICi87xHR
724mgMiBPZvE9zSd1sQI0kOvogMk9IMpi9HJvHBP2a6L74kdIKwH4q/46wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFumMyqrpfJRrhAiMoj3tzU9BpweMB8GA1UdIwQY
MBaAFFCqmeuMGxixqn1CRc5IH7iI+/JUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUtxWjY0d2JHTEdxZlVKRnprZ2Z1SWo3OGxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wODg2NzctODBiZS00MTMwLWIzNjAt
MWNmNmZkOWY4MGZhLzEvVUtxWjY0d2JHTEdxZlVKRnprZ2Z1SWo3OGxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wODg2NzctODBiZS00MTMwLWIzNjAtMWNmNmZkOWY4MGZh
LzEvVUtxWjY0d2JHTEdxZlVKRnprZ2Z1SWo3OGxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbTG1rI6T
ACvuHU3bJT21yLFXq96x5W1REFoxTI6VjBnh9RcZIctTTazbqZA4tQhrseuUf2q4
KZKn4TNeKl7t85zYDNDgmA8a9t1gRR4Q9nES6IhKjvg/xmF1UpuKK7M6+ltMjAue
IVKjd2aq48HBy/mwCfq4MeWfMP5t4pSbCEHes5pEQyz6/eDaNdZ9yzjX9rCglwy9
W0Momy+OBtlx6YkvpaR8nO7Sz4Dl2+VOnFZahMtCqU3yxB1DhUUyo8S6sDNt9uRz
nGGLh8ZMshSpTyGyfvQW6u4Fc1WY/HNl7p5rAkKvGXC0MFdzVFf8LwQPeh1Xhmoz
u0480aKuO+0b+A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:11 2026 by rpki-client