Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
File: uUhRCuQauFZ3msGG8EcJkfWipQ8.mft (raw, json)
Hash identifier: mBlXD2MA+1ZxE/99Z4/mtdPmjdnD1OizrvaHtxWNi0M=
Subject key identifier: E8:2D:2B:35:B5:92:9B:9D:AD:C0:7C:08:4E:CC:69:B8:E9:10:90:B2
Authority key identifier: B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F
Certificate issuer: /CN=b948510ae41ab856779ac186f0470991f5a2a50f
Certificate serial: 019D40FB2838CDFE45678030C39FA5F3D66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
Manifest number: 0ED5
Signing time: Mon 30 Mar 2026 23:01:34 +0000
Manifest this update: Mon 30 Mar 2026 23:01:34 +0000
Manifest next update: Tue 31 Mar 2026 23:01:34 +0000
Files and hashes: 1: OMDj7S7H5Znb54o4B4mYw4OI1xA.roa (hash: QwhdgA5D4IFqcLTQvjEb7OBJC7e4ri/WagCnJPfPU5Q=)
2: uUhRCuQauFZ3msGG8EcJkfWipQ8.crl (hash: 9oNYdzZpIcUcRMUL3g3iWPKpSMPAVpNEsoZbF6Rz90M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:40:fb:28:38:cd:fe:45:67:80:30:c3:9f:a5:f3:d6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b948510ae41ab856779ac186f0470991f5a2a50f
Validity
Not Before: Mar 30 23:01:34 2026 GMT
Not After : Mar 31 23:01:34 2026 GMT
Subject: CN=e82d2b35b5929b9dadc07c084ecc69b8e91090b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c7:e6:8e:ff:63:3e:be:8f:92:cd:a9:cd:fe:
bd:a8:e8:6b:80:50:d2:54:a4:e6:47:24:89:34:de:
7b:07:65:f0:94:6a:48:19:3a:3d:44:d6:6c:0a:9c:
ed:0c:48:f9:24:6a:8b:2c:16:4c:d4:a3:74:c1:b3:
72:a5:a6:99:0d:4c:f0:98:64:a5:d4:59:db:37:6b:
bb:51:c4:6c:15:d8:b7:11:47:0b:01:33:b2:8c:0a:
fc:8b:16:9e:a2:77:26:97:04:87:ef:c1:bc:71:12:
26:6e:72:71:2f:d2:ef:b7:ab:5e:75:ea:cb:f3:49:
ce:4b:29:76:93:ea:c5:7a:ae:e8:a7:f9:26:19:01:
a9:7c:71:1d:f6:c5:55:ff:7c:32:48:ed:f2:2d:69:
b7:99:f3:c7:e8:29:6a:99:01:8a:f7:c9:68:fe:37:
91:42:17:b1:4c:1a:62:c4:7a:62:1a:09:8e:d0:ae:
be:85:fb:cf:95:bd:43:f0:fa:89:64:f7:1b:8f:d0:
67:b1:1b:51:bb:90:a8:34:39:8b:09:c9:da:50:4e:
9f:1b:92:84:35:d7:10:29:ff:ab:19:88:14:98:64:
d7:d2:89:e1:d6:94:fb:09:ec:8a:05:3d:9f:32:75:
fa:e8:b8:26:64:f5:10:a1:18:e7:3b:38:9a:80:2e:
60:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2D:2B:35:B5:92:9B:9D:AD:C0:7C:08:4E:CC:69:B8:E9:10:90:B2
X509v3 Authority Key Identifier:
keyid:B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:bb:06:d8:f9:67:0f:d9:10:a2:29:99:3b:38:16:8d:3f:08:
c1:72:67:03:64:b1:4b:98:e7:90:96:35:5a:d2:2c:42:8c:2b:
ac:84:1d:a1:82:a7:08:48:b5:22:a8:85:fc:e5:27:c8:06:65:
e3:92:3d:a4:11:f8:98:5a:8d:eb:1c:ba:a0:bc:8e:9f:2e:d0:
4c:bf:67:fb:e2:6e:e7:40:16:e9:28:38:b9:0c:c0:cc:23:0b:
60:e0:18:45:69:dd:7a:f2:31:57:d2:c4:66:47:2b:1e:f5:d3:
c6:2e:a2:82:c7:fe:dc:d9:80:cf:a1:84:92:e3:55:41:56:c6:
61:6a:eb:1e:56:2d:e9:b2:84:f1:12:bf:50:3d:12:89:86:5b:
18:15:ef:1a:d8:6c:05:5a:45:14:97:ba:0b:9a:2f:4c:8c:78:
7d:42:4d:8e:b4:a4:d8:8f:12:7e:4b:ee:07:a5:97:44:8d:7c:
b8:74:26:c9:65:a5:c0:5b:95:56:20:d7:cd:57:81:bf:a6:21:
3b:7b:3d:15:55:68:c9:70:71:65:f2:35:bc:9b:15:46:92:6f:
d4:42:7c:bf:97:93:7a:c8:a8:90:5a:6f:15:f5:bd:d7:1d:a0:
de:d6:1a:53:54:24:3d:3f:3e:eb:d5:ee:97:10:d9:81:0b:0d:
e7:2c:8e:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ1A+yg4zf5FZ4Aww5+l89ZtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDg1MTBhZTQxYWI4NTY3NzlhYzE4NmYwNDcwOTkxZjVh
MmE1MGYwHhcNMjYwMzMwMjMwMTM0WhcNMjYwMzMxMjMwMTM0WjAzMTEwLwYDVQQD
EyhlODJkMmIzNWI1OTI5YjlkYWRjMDdjMDg0ZWNjNjliOGU5MTA5MGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMfmjv9jPr6Pks2pzf69qOhrgFDS
VKTmRySJNN57B2XwlGpIGTo9RNZsCpztDEj5JGqLLBZM1KN0wbNypaaZDUzwmGSl
1FnbN2u7UcRsFdi3EUcLATOyjAr8ixaeoncmlwSH78G8cRImbnJxL9Lvt6tederL
80nOSyl2k+rFeq7op/kmGQGpfHEd9sVV/3wySO3yLWm3mfPH6ClqmQGK98lo/jeR
QhexTBpixHpiGgmO0K6+hfvPlb1D8PqJZPcbj9BnsRtRu5CoNDmLCcnaUE6fG5KE
NdcQKf+rGYgUmGTX0onh1pT7CeyKBT2fMnX66LgmZPUQoRjnOziagC5gQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgtKzW1kpudrcB8CE7MabjpEJCyMB8GA1UdIwQY
MBaAFLlIUQrkGrhWd5rBhvBHCZH1oqUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVoUkN1UWF1RlozbXNHRzhFY0prZldpcFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81YWEzMDMtNTlmNy00Zjk5LTkwN2Qt
ODNhMjVhOTRjNzdmLzEvdVVoUkN1UWF1RlozbXNHRzhFY0prZldpcFE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81YWEzMDMtNTlmNy00Zjk5LTkwN2QtODNhMjVhOTRjNzdm
LzEvdVVoUkN1UWF1RlozbXNHRzhFY0prZldpcFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbsG2Pln
D9kQoimZOzgWjT8IwXJnA2SxS5jnkJY1WtIsQowrrIQdoYKnCEi1IqiF/OUnyAZl
45I9pBH4mFqN6xy6oLyOny7QTL9n++Ju50AW6Sg4uQzAzCMLYOAYRWndevIxV9LE
ZkcrHvXTxi6igsf+3NmAz6GEkuNVQVbGYWrrHlYt6bKE8RK/UD0SiYZbGBXvGths
BVpFFJe6C5ovTIx4fUJNjrSk2I8SfkvuB6WXRI18uHQmyWWlwFuVViDXzVeBv6Yh
O3s9FVVoyXBxZfI1vJsVRpJv1EJ8v5eTesiokFpvFfW91x2g3tYaU1QkPT8+69Xu
lxDZgQsN5yyOqA==
-----END CERTIFICATE-----
Generated at Tue Mar 31 09:31:14 2026 by rpki-client