Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
File: UaDZglED2dpHYe-pGmDqLKdY0AM.mft (raw, json)
Hash identifier: eYCvLGea4zhIinfHSZVhoRh4NL2A8tO78lmHrY0WPxU=
Subject key identifier: 38:5D:28:81:F5:76:D4:30:97:E9:24:FD:0A:5F:DA:59:06:D4:3B:AD
Authority key identifier: 51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03
Certificate issuer: /CN=51a0d9825103d9da4761efa91a60ea2ca758d003
Certificate serial: 019D3866705A2A1C059F3CFB52F782FB3145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 07:02:10 +0000
Manifest this update: Sun 29 Mar 2026 07:02:10 +0000
Manifest next update: Mon 30 Mar 2026 07:02:10 +0000
Files and hashes: 1: 5B9j7lqy9IT3fDMRxCG6h3_cMjw.roa (hash: m/BPFid28iEMOvcH+Hu/lJGC2PQ7AZWB27CFpOQKp3o=)
2: UaDZglED2dpHYe-pGmDqLKdY0AM.crl (hash: Smu/B+c+LcCMO7uyAsDsS9tBy0PZvu36IQz8Z+4B3dQ=)
3: cUdRqcJ5aJ2CV_DDcLWPCM8F0_8.roa (hash: A8yrAiPNmq/KJ9NoQYigC8mdrG4cRjHQf6CdL/r+AtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:70:5a:2a:1c:05:9f:3c:fb:52:f7:82:fb:31:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a0d9825103d9da4761efa91a60ea2ca758d003
Validity
Not Before: Mar 29 07:02:10 2026 GMT
Not After : Mar 30 07:02:10 2026 GMT
Subject: CN=385d2881f576d43097e924fd0a5fda5906d43bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:18:75:c5:3a:30:03:46:e6:04:7a:2d:ca:
d6:3c:be:b6:30:ce:59:39:e0:f7:cd:60:58:7b:7b:
3e:ca:a0:be:8e:9d:3d:3a:b5:dd:5e:cf:df:18:c9:
26:ab:07:a7:80:30:63:e1:82:6c:2e:92:ec:a7:44:
ed:97:cf:ed:7c:27:95:9b:ba:27:5e:35:bc:2b:59:
9c:c0:b7:96:70:03:fc:3d:53:f2:7d:eb:52:77:11:
f5:80:5f:75:09:2c:fe:65:f1:26:f3:1d:86:9c:f9:
0a:25:22:f4:fe:bf:f6:3a:1b:8c:9d:fc:b3:db:15:
48:54:59:a3:96:07:2d:f4:66:35:ef:14:ba:6a:95:
59:16:5b:19:d8:08:42:9c:99:87:2b:f2:6a:0f:41:
06:fe:fa:7b:2b:f5:52:8e:ae:15:61:93:4e:99:85:
7e:bd:ba:02:af:f2:62:07:89:f1:ff:47:2d:a3:99:
46:83:6e:f5:8e:2c:62:cf:72:22:4a:40:75:d9:6e:
ec:0f:84:fd:23:e9:40:40:ae:70:8b:94:02:4d:32:
27:32:8b:82:ae:b1:b5:04:0d:18:39:4b:86:9c:06:
76:e2:b5:0c:e8:a9:ee:f5:92:be:a0:ac:f5:33:c3:
80:f5:1a:a4:01:4c:d2:56:d2:4f:8e:ec:45:4a:c0:
51:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5D:28:81:F5:76:D4:30:97:E9:24:FD:0A:5F:DA:59:06:D4:3B:AD
X509v3 Authority Key Identifier:
keyid:51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:a0:22:c6:9a:33:06:28:33:48:d4:5e:bc:09:cb:a9:d1:c7:
70:c2:f4:d1:03:41:a1:1f:77:0d:41:ff:6b:ea:60:6b:34:51:
ff:90:9b:54:ee:50:42:05:35:49:7b:50:9f:80:1f:69:04:2c:
0e:3e:63:93:29:9d:86:46:bb:68:a8:f0:c0:28:ef:9e:8b:d1:
2a:bb:52:eb:4e:b5:44:04:11:6c:ae:69:83:da:cb:51:de:16:
6a:77:8e:46:e8:1c:aa:6f:ae:22:b4:30:6d:03:3d:78:45:1e:
20:c7:ed:75:87:11:df:50:01:d6:c7:43:8f:b0:de:8e:75:24:
fa:78:42:54:fc:27:de:c8:7a:ac:59:0e:2c:0f:a0:b2:c6:16:
4a:0e:e9:fb:7c:a3:3f:bf:88:e8:a7:43:ed:a4:e5:9d:a8:18:
c1:53:c2:71:f6:d3:38:c7:07:28:3e:ee:2a:2b:b3:db:25:5c:
f4:1b:6c:28:5a:6d:c8:1c:37:1c:66:fb:ae:4d:19:ba:f4:14:
f3:42:50:d2:f3:fc:33:ed:f0:f5:15:5c:4b:5f:40:28:5c:b1:
8f:79:05:eb:79:b2:fb:f0:e3:d8:b6:00:26:a1:f5:5b:bf:0b:
65:0a:09:67:1d:f7:f8:2d:ea:57:07:54:8b:fe:04:01:6c:1d:
4a:7f:e4:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZnBaKhwFnzz7UveC+zFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYTBkOTgyNTEwM2Q5ZGE0NzYxZWZhOTFhNjBlYTJjYTc1
OGQwMDMwHhcNMjYwMzI5MDcwMjEwWhcNMjYwMzMwMDcwMjEwWjAzMTEwLwYDVQQD
EygzODVkMjg4MWY1NzZkNDMwOTdlOTI0ZmQwYTVmZGE1OTA2ZDQzYmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsUYdcU6MANG5gR6LcrWPL62MM5Z
OeD3zWBYe3s+yqC+jp09OrXdXs/fGMkmqwengDBj4YJsLpLsp0Ttl8/tfCeVm7on
XjW8K1mcwLeWcAP8PVPyfetSdxH1gF91CSz+ZfEm8x2GnPkKJSL0/r/2OhuMnfyz
2xVIVFmjlgct9GY17xS6apVZFlsZ2AhCnJmHK/JqD0EG/vp7K/VSjq4VYZNOmYV+
vboCr/JiB4nx/0cto5lGg271jixiz3IiSkB12W7sD4T9I+lAQK5wi5QCTTInMouC
rrG1BA0YOUuGnAZ24rUM6Knu9ZK+oKz1M8OA9RqkAUzSVtJPjuxFSsBRzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhdKIH1dtQwl+kk/Qpf2lkG1DutMB8GA1UdIwQY
MBaAFFGg2YJRA9naR2HvqRpg6iynWNADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWFEWmdsRUQyZHBIWWUtcEdtRHFMS2RZMEFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iNGY0OWItNzVlNS00ODY0LTkwOGUt
NmEzZGYwMWEzMjM2LzEvVWFEWmdsRUQyZHBIWWUtcEdtRHFMS2RZMEFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9iNGY0OWItNzVlNS00ODY0LTkwOGUtNmEzZGYwMWEzMjM2
LzEvVWFEWmdsRUQyZHBIWWUtcEdtRHFMS2RZMEFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtKAixpoz
BigzSNRevAnLqdHHcML00QNBoR93DUH/a+pgazRR/5CbVO5QQgU1SXtQn4AfaQQs
Dj5jkymdhka7aKjwwCjvnovRKrtS6061RAQRbK5pg9rLUd4WaneORugcqm+uIrQw
bQM9eEUeIMftdYcR31AB1sdDj7DejnUk+nhCVPwn3sh6rFkOLA+gssYWSg7p+3yj
P7+I6KdD7aTlnagYwVPCcfbTOMcHKD7uKiuz2yVc9BtsKFptyBw3HGb7rk0ZuvQU
80JQ0vP8M+3w9RVcS19AKFyxj3kF63my+/Dj2LYAJqH1W78LZQoJZx33+C3qVwdU
i/4EAWwdSn/k5Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:56 2026 by rpki-client