Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
File: UeK-E5rnec09T-68zTaCgaH156A.mft (raw, json)
Hash identifier: jxmG0AODzam1a9X8t5jFH/a0H8yOXIyl077arM3D9+w=
Subject key identifier: F9:73:26:4B:9C:22:A0:E2:24:43:54:AE:CD:C6:90:58:19:73:63:6B
Authority key identifier: 51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
Certificate issuer: /CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Certificate serial: 019DCF7518483122961966B39563422F849D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
Manifest number: 18DC
Signing time: Mon 27 Apr 2026 15:00:50 +0000
Manifest this update: Mon 27 Apr 2026 15:00:50 +0000
Manifest next update: Tue 28 Apr 2026 15:00:50 +0000
Files and hashes: 1: Fh1t7rzPIhJXnOEVD4FNHFJov6I.roa (hash: xyxnFW4AuKmT8OTwF87A3TgtZBfvGtO+UCiL5cJIqm4=)
2: UeK-E5rnec09T-68zTaCgaH156A.crl (hash: yFq6pIArhf2q3UMRI1JQNxo7/D+kSGsplDCNA/5JJNE=)
3: _FC9hMLG7SF2_l0VnWxgvnPruLU.roa (hash: /T+U+cTcUNtTkJxXrz2mxyyoddVM2fTKoj6v8XpQa6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:18:48:31:22:96:19:66:b3:95:63:42:2f:84:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Validity
Not Before: Apr 27 15:00:50 2026 GMT
Not After : Apr 28 15:00:50 2026 GMT
Subject: CN=f973264b9c22a0e2244354aecdc690581973636b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e7:88:2e:3e:d3:af:cb:6f:df:39:13:3c:aa:
87:b6:5e:7a:c3:ee:51:08:3e:50:23:c8:cc:6c:15:
0b:ab:99:ab:e1:d8:90:c8:31:91:75:c9:2a:7b:e3:
2b:72:60:fe:49:1e:20:dc:a9:4a:d7:fb:e4:a2:ff:
98:f1:88:88:ff:88:e2:c1:67:93:b9:95:f6:2c:05:
9b:90:93:a5:17:ef:a7:6d:98:94:ac:62:48:e6:0f:
53:89:17:47:41:eb:f1:b5:6c:aa:cd:09:7c:42:9a:
f8:d4:72:e3:6d:3a:80:0b:56:45:89:07:e0:52:af:
de:3d:e3:95:d0:70:72:7d:46:11:50:fc:b1:42:45:
a9:57:1e:df:b3:d8:b9:f9:39:64:cc:9b:ef:25:67:
43:c6:3c:d7:8d:bb:92:4e:b2:aa:9d:c9:d8:12:90:
c0:01:ad:31:bc:fb:dd:06:e9:64:bd:ad:cf:fb:7e:
fd:59:5e:1c:24:0c:ec:25:b5:cf:f9:6d:fa:f6:53:
b5:e9:89:0f:7c:da:b4:92:f0:1f:f3:29:c9:3d:0a:
32:2e:b9:44:2f:60:dd:67:47:86:91:04:e4:7a:ca:
dc:d3:39:03:10:16:23:af:2e:89:37:38:cb:c9:25:
af:ef:ff:19:dd:a6:3f:c9:06:41:f3:65:7f:62:43:
28:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:73:26:4B:9C:22:A0:E2:24:43:54:AE:CD:C6:90:58:19:73:63:6B
X509v3 Authority Key Identifier:
keyid:51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e9:65:2e:31:c2:4c:d8:44:e7:17:92:cf:d9:87:27:4b:0b:
3e:51:e4:bf:d3:fd:49:0c:3f:e9:d3:06:ad:9b:ad:a9:52:eb:
07:2f:30:3f:79:59:ad:49:c3:3e:8b:f6:93:2f:0c:07:f9:40:
54:ce:85:2a:17:f7:b7:c7:36:13:31:0f:c8:5d:d2:00:29:5c:
fa:47:3c:41:64:a5:1c:54:df:d7:8f:63:cb:b9:d9:6f:3e:bd:
43:b4:e1:90:3e:8f:8d:d9:fb:99:96:95:9b:b8:d2:0e:df:fa:
52:ad:5b:77:aa:0f:24:c7:6c:15:62:e2:62:4d:63:bd:9b:b7:
87:85:30:85:7c:6c:91:c5:e5:3f:2c:0e:2e:39:30:79:1c:fa:
32:3b:bd:e4:f3:b9:72:1d:3e:ab:49:5c:ed:d1:15:f2:cf:03:
28:fb:b4:93:4a:a9:88:e6:ff:f5:39:20:08:95:8f:c5:bb:32:
7c:6c:36:5c:bc:b6:01:12:09:a1:f6:fb:71:dd:7c:9a:8e:51:
e6:e2:51:f7:e9:84:c1:7f:5d:f9:ea:2d:f4:7a:3b:b8:40:f8:
64:50:e1:d3:17:7f:7a:8f:51:c6:26:23:40:b1:b5:c3:db:5c:
6e:fb:c8:c5:97:ab:0f:2d:b8:6b:8c:1a:13:2f:1a:25:64:64:
27:8b:e2:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PdRhIMSKWGWazlWNCL4SdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZTJiZTEzOWFlNzc5Y2QzZDRmZWViY2NkMzY4MjgxYTFm
NWU3YTAwHhcNMjYwNDI3MTUwMDUwWhcNMjYwNDI4MTUwMDUwWjAzMTEwLwYDVQQD
EyhmOTczMjY0YjljMjJhMGUyMjQ0MzU0YWVjZGM2OTA1ODE5NzM2MzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOeILj7Tr8tv3zkTPKqHtl56w+5R
CD5QI8jMbBULq5mr4diQyDGRdckqe+MrcmD+SR4g3KlK1/vkov+Y8YiI/4jiwWeT
uZX2LAWbkJOlF++nbZiUrGJI5g9TiRdHQevxtWyqzQl8Qpr41HLjbTqAC1ZFiQfg
Uq/ePeOV0HByfUYRUPyxQkWpVx7fs9i5+TlkzJvvJWdDxjzXjbuSTrKqncnYEpDA
Aa0xvPvdBulkva3P+379WV4cJAzsJbXP+W369lO16YkPfNq0kvAf8ynJPQoyLrlE
L2DdZ0eGkQTkesrc0zkDEBYjry6JNzjLySWv7/8Z3aY/yQZB82V/YkMoQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlzJkucIqDiJENUrs3GkFgZc2NrMB8GA1UdIwQY
MBaAFFHivhOa53nNPU/uvM02goGh9eegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWVLLUU1cm5lYzA5VC02OHpUYUNnYUgxNTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yZjU5MzEtMDVhOC00MzZiLTkyNzMt
Y2Q3YjZlZGJmY2Y1LzEvVWVLLUU1cm5lYzA5VC02OHpUYUNnYUgxNTZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yZjU5MzEtMDVhOC00MzZiLTkyNzMtY2Q3YjZlZGJmY2Y1
LzEvVWVLLUU1cm5lYzA5VC02OHpUYUNnYUgxNTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAullLjHC
TNhE5xeSz9mHJ0sLPlHkv9P9SQw/6dMGrZutqVLrBy8wP3lZrUnDPov2ky8MB/lA
VM6FKhf3t8c2EzEPyF3SAClc+kc8QWSlHFTf149jy7nZbz69Q7ThkD6Pjdn7mZaV
m7jSDt/6Uq1bd6oPJMdsFWLiYk1jvZu3h4UwhXxskcXlPywOLjkweRz6Mju95PO5
ch0+q0lc7dEV8s8DKPu0k0qpiOb/9TkgCJWPxbsyfGw2XLy2ARIJofb7cd18mo5R
5uJR9+mEwX9d+eot9Ho7uED4ZFDh0xd/eo9RxiYjQLG1w9tcbvvIxZerDy24a4wa
Ey8aJWRkJ4viQA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 21:05:02 2026 by rpki-client