Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
File: UjhuUgR45iW-HWKC0hawWRL4OHQ.mft (raw, json)
Hash identifier: IX0XsH0YGPY854uJs24oX7aSLCvhl3nlFfotCH+KxqY=
Subject key identifier: 94:6C:2F:1E:B0:34:0D:E3:50:BA:4E:87:5B:1C:53:80:DB:C1:76:8A
Authority key identifier: 52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
Certificate issuer: /CN=52386e520478e625be1d6282d216b05912f83874
Certificate serial: 01A08AFA138019208A2002458C031422D283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
Manifest number: 1512
Signing time: Thu 10 Sep 2026 11:00:39 +0000
Manifest this update: Thu 10 Sep 2026 11:00:39 +0000
Manifest next update: Fri 11 Sep 2026 11:00:39 +0000
Files and hashes: 1: UjhuUgR45iW-HWKC0hawWRL4OHQ.crl (hash: HxrkQddSKrk6wCVzValtiSCQOZ2JEuar/LKqdJzH3+k=)
2: ldVLo-eNAW-W-3vclMcqBGxufHM.roa (hash: 3oSvQLb4YGLMfy8gAiD/iZGExJiz2TXf3tCjeUQNbTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:13:80:19:20:8a:20:02:45:8c:03:14:22:d2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52386e520478e625be1d6282d216b05912f83874
Validity
Not Before: Sep 10 11:00:39 2026 GMT
Not After : Sep 11 11:00:39 2026 GMT
Subject: CN=946c2f1eb0340de350ba4e875b1c5380dbc1768a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b2:c9:7b:21:6a:82:27:de:8e:38:f3:8a:14:
b6:e5:81:53:00:68:2b:f1:27:d7:cb:6b:c6:ae:aa:
0a:80:9c:5a:3f:d2:7a:e5:4d:19:db:1f:5d:21:09:
0e:c3:ef:86:5d:07:5e:d2:bf:f1:b9:01:90:65:36:
03:4e:9d:25:65:4e:cb:f5:4a:3c:ff:e0:d7:20:f4:
59:80:03:4e:b1:93:26:66:59:2f:85:9a:77:43:15:
64:7c:13:96:6c:08:0f:70:6f:4a:57:82:63:c4:9e:
63:cd:21:c0:c8:a5:24:97:66:69:52:8c:d8:fd:46:
4d:a8:93:cf:f6:4d:64:35:49:b0:e9:e0:3d:39:d9:
c9:51:7e:ed:04:48:46:25:4f:9e:10:51:cf:1b:c0:
98:ac:b5:43:87:25:17:2d:39:8b:81:7a:36:9a:d1:
a2:82:66:16:a4:6b:f2:ff:27:87:e4:05:ea:d3:9f:
8a:32:4d:25:67:1e:2e:0b:58:d3:ec:c1:43:71:98:
e0:2d:d3:13:b2:3a:e2:34:76:55:8a:bc:b1:ec:30:
a4:52:ca:6b:43:a0:be:78:98:ea:47:4c:93:1a:b1:
a3:0c:38:57:8d:82:82:8b:99:b4:ad:2a:41:a8:7d:
63:f1:5e:f6:e3:88:3c:f2:4d:86:29:a4:df:13:f8:
62:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6C:2F:1E:B0:34:0D:E3:50:BA:4E:87:5B:1C:53:80:DB:C1:76:8A
X509v3 Authority Key Identifier:
keyid:52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ed:dc:56:3e:44:92:78:ae:25:13:47:2e:ca:7f:4f:0a:9c:
79:67:f9:5c:cd:84:0b:e5:ed:3a:4a:70:62:bc:25:ed:03:9c:
a0:b4:73:55:7d:9e:96:bf:90:b5:10:b8:dd:bc:02:21:71:56:
e3:8a:51:61:e7:23:27:98:fc:32:83:c1:c8:d2:ab:5d:84:34:
88:73:94:d9:86:f0:96:21:e0:d7:15:5c:67:f4:9c:d4:d0:99:
c5:73:a5:33:4a:2c:28:a2:ef:90:0a:08:56:64:05:5c:d6:b6:
fb:ee:82:35:6a:9f:be:28:6b:b3:6f:2f:aa:e5:dd:fc:dc:81:
80:75:9e:21:04:81:95:5b:62:a9:18:3f:80:75:e9:27:47:cc:
8d:83:d0:77:80:06:d5:f0:48:42:ae:98:44:42:19:f5:be:39:
2e:81:f6:73:08:0f:e3:f4:10:c9:c1:07:91:c7:36:3d:c1:a0:
96:66:d7:b4:db:6c:de:74:0d:8b:cf:61:f9:93:86:79:6a:ca:
75:51:33:e1:4b:f0:01:69:37:d2:1c:8f:15:aa:d1:9d:26:e8:
9d:be:93:34:eb:4b:77:14:d2:7f:55:57:60:8c:2f:bd:2d:66:
3f:d0:73:1d:ce:09:e7:b4:b5:4d:aa:08:dd:8d:db:f7:e3:13:
a2:dd:54:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCK+hOAGSCKIAJFjAMUItKDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMzg2ZTUyMDQ3OGU2MjViZTFkNjI4MmQyMTZiMDU5MTJm
ODM4NzQwHhcNMjYwOTEwMTEwMDM5WhcNMjYwOTExMTEwMDM5WjAzMTEwLwYDVQQD
Eyg5NDZjMmYxZWIwMzQwZGUzNTBiYTRlODc1YjFjNTM4MGRiYzE3NjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobLJeyFqgifejjjzihS25YFTAGgr
8SfXy2vGrqoKgJxaP9J65U0Z2x9dIQkOw++GXQde0r/xuQGQZTYDTp0lZU7L9Uo8
/+DXIPRZgANOsZMmZlkvhZp3QxVkfBOWbAgPcG9KV4JjxJ5jzSHAyKUkl2ZpUozY
/UZNqJPP9k1kNUmw6eA9OdnJUX7tBEhGJU+eEFHPG8CYrLVDhyUXLTmLgXo2mtGi
gmYWpGvy/yeH5AXq05+KMk0lZx4uC1jT7MFDcZjgLdMTsjriNHZViryx7DCkUspr
Q6C+eJjqR0yTGrGjDDhXjYKCi5m0rSpBqH1j8V7244g88k2GKaTfE/hiRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRsLx6wNA3jULpOh1scU4DbwXaKMB8GA1UdIwQY
MBaAFFI4blIEeOYlvh1igtIWsFkS+Dh0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWpodVVnUjQ1aVctSFdLQzBoYXdXUkw0T0hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kNDUxOTMtYjVmZS00ZTFkLThlNDIt
YWU1ZGI2ZTE0ODZkLzEvVWpodVVnUjQ1aVctSFdLQzBoYXdXUkw0T0hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9kNDUxOTMtYjVmZS00ZTFkLThlNDItYWU1ZGI2ZTE0ODZk
LzEvVWpodVVnUjQ1aVctSFdLQzBoYXdXUkw0T0hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOO3cVj5E
kniuJRNHLsp/TwqceWf5XM2EC+XtOkpwYrwl7QOcoLRzVX2elr+QtRC43bwCIXFW
44pRYecjJ5j8MoPByNKrXYQ0iHOU2YbwliHg1xVcZ/Sc1NCZxXOlM0osKKLvkAoI
VmQFXNa2++6CNWqfvihrs28vquXd/NyBgHWeIQSBlVtiqRg/gHXpJ0fMjYPQd4AG
1fBIQq6YREIZ9b45LoH2cwgP4/QQycEHkcc2PcGglmbXtNts3nQNi89h+ZOGeWrK
dVEz4UvwAWk30hyPFarRnSbonb6TNOtLdxTSf1VXYIwvvS1mP9BzHc4J57S1TaoI
3Y3b9+MTot1U8g==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:03:18 2026 by rpki-client