Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
File: UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft (raw, json)
Hash identifier: OL+hlWrOpHOOGqklJV/9c8Rw6hZ4Jcqu44rC8EMvir4=
Subject key identifier: B0:6B:BC:3F:F3:98:99:E0:98:F0:CA:83:4B:E2:F9:E0:66:88:67:BB
Authority key identifier: 51:C3:CC:54:41:4F:B4:42:BE:39:D6:E1:A4:AF:72:4C:FF:EE:EE:FF
Certificate issuer: /CN=51c3cc54414fb442be39d6e1a4af724cffeeeeff
Certificate serial: 019D386615F2E90029ED37C86270D5151EDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
Manifest number: 1794
Signing time: Sun 29 Mar 2026 07:01:47 +0000
Manifest this update: Sun 29 Mar 2026 07:01:47 +0000
Manifest next update: Mon 30 Mar 2026 07:01:47 +0000
Files and hashes: 1: UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl (hash: FfiCvzLH/p04Tpm4wKvfQHRjB5ERThG+CwGs2oxpOAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:15:f2:e9:00:29:ed:37:c8:62:70:d5:15:1e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51c3cc54414fb442be39d6e1a4af724cffeeeeff
Validity
Not Before: Mar 29 07:01:47 2026 GMT
Not After : Mar 30 07:01:47 2026 GMT
Subject: CN=b06bbc3ff39899e098f0ca834be2f9e0668867bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3c:ab:64:5c:d7:5c:c5:e3:91:3e:98:0f:24:
43:35:9a:fe:c5:2f:16:0b:2f:3d:a8:f4:f4:98:fc:
39:fb:80:cc:bc:cd:3d:0f:9c:7f:9f:d0:43:3d:02:
04:5e:84:4d:a4:6b:b8:70:d1:24:3f:94:1a:4d:79:
04:c3:4e:25:10:c6:2f:7b:01:63:ed:9f:d4:0d:94:
31:c2:8c:cc:a0:8f:06:ad:63:06:8d:53:6a:36:56:
bd:bc:2c:1e:37:52:cb:9c:b6:5c:1c:9d:f3:5a:1c:
57:2a:43:97:32:df:ab:dd:27:02:43:1e:23:d1:a8:
91:35:65:dc:11:2c:11:60:16:42:9f:62:01:b8:2b:
f3:c1:cf:16:3c:e4:47:19:11:a0:ce:1d:9d:64:08:
1c:f9:3b:dc:73:2f:86:d2:cf:74:ff:70:21:01:85:
a0:94:51:5e:c2:2a:35:31:a1:00:72:45:7f:db:47:
4c:91:d7:bc:07:42:d2:cb:79:bc:55:65:e0:40:f8:
89:41:b1:92:a7:e7:8a:fb:57:b8:67:aa:ab:48:83:
c0:75:0e:71:8d:c2:f1:d5:97:d2:97:f2:f1:13:2b:
60:df:33:7e:62:36:dd:81:12:09:f8:c8:08:0b:45:
1e:ca:1d:35:8a:bf:84:4c:80:49:38:8e:66:ff:67:
38:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6B:BC:3F:F3:98:99:E0:98:F0:CA:83:4B:E2:F9:E0:66:88:67:BB
X509v3 Authority Key Identifier:
keyid:51:C3:CC:54:41:4F:B4:42:BE:39:D6:E1:A4:AF:72:4C:FF:EE:EE:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:80:92:cd:48:a3:1d:24:90:47:c4:68:45:2a:8e:24:7b:6e:
3d:5c:57:60:48:5d:b1:d9:0e:1b:60:fb:3a:fd:8e:15:fe:c6:
79:03:5a:7b:92:29:39:ed:f2:d5:d1:dd:3e:c7:a8:65:fb:27:
78:8f:4c:af:17:99:b5:8c:be:bd:d6:0b:c5:88:18:aa:c5:c7:
ca:d2:34:66:cc:19:ad:d3:c2:39:17:b0:f2:2a:4b:d6:f3:fa:
22:c3:b4:0e:b7:28:9f:47:a0:4d:39:26:d6:1c:c1:03:c3:f0:
e4:25:07:ae:78:a1:00:8b:c7:45:42:39:33:5a:81:51:01:29:
ce:20:5a:f0:75:aa:d2:21:b0:28:e0:18:f0:bd:f8:96:40:b8:
ef:f5:d2:02:ef:35:83:82:8d:da:e3:35:26:07:75:6e:c0:af:
6a:8a:54:a9:a5:e9:e2:a4:23:80:50:15:3c:78:63:04:3b:85:
7f:63:e2:e4:21:2d:fa:ab:ba:13:47:40:b2:8c:63:c1:09:e3:
32:8c:51:e7:8f:5b:eb:5c:2f:4d:ca:4d:76:23:b6:cb:fa:d9:
fa:ab:6d:54:0f:3a:19:eb:23:95:6d:37:41:a1:1f:a3:b4:66:
3d:4d:2e:5d:c0:a3:03:ab:84:bd:96:97:ea:0f:55:aa:39:96:
6d:7c:b6:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZhXy6QAp7TfIYnDVFR7bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYzNjYzU0NDE0ZmI0NDJiZTM5ZDZlMWE0YWY3MjRjZmZl
ZWVlZmYwHhcNMjYwMzI5MDcwMTQ3WhcNMjYwMzMwMDcwMTQ3WjAzMTEwLwYDVQQD
EyhiMDZiYmMzZmYzOTg5OWUwOThmMGNhODM0YmUyZjllMDY2ODg2N2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DyrZFzXXMXjkT6YDyRDNZr+xS8W
Cy89qPT0mPw5+4DMvM09D5x/n9BDPQIEXoRNpGu4cNEkP5QaTXkEw04lEMYvewFj
7Z/UDZQxwozMoI8GrWMGjVNqNla9vCweN1LLnLZcHJ3zWhxXKkOXMt+r3ScCQx4j
0aiRNWXcESwRYBZCn2IBuCvzwc8WPORHGRGgzh2dZAgc+Tvccy+G0s90/3AhAYWg
lFFewio1MaEAckV/20dMkde8B0LSy3m8VWXgQPiJQbGSp+eK+1e4Z6qrSIPAdQ5x
jcLx1ZfSl/LxEytg3zN+YjbdgRIJ+MgIC0Ueyh01ir+ETIBJOI5m/2c4GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBrvD/zmJngmPDKg0vi+eBmiGe7MB8GA1UdIwQY
MBaAFFHDzFRBT7RCvjnW4aSvckz/7u7/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWNQTVZFRlB0RUstT2RiaHBLOXlUUF91N3Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hNzM5MDAtYjM0Zi00ZmZjLTllMzkt
MjMxNWNkOWI5ZmEyLzEvVWNQTVZFRlB0RUstT2RiaHBLOXlUUF91N3Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9hNzM5MDAtYjM0Zi00ZmZjLTllMzktMjMxNWNkOWI5ZmEy
LzEvVWNQTVZFRlB0RUstT2RiaHBLOXlUUF91N3Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4CSzUij
HSSQR8RoRSqOJHtuPVxXYEhdsdkOG2D7Ov2OFf7GeQNae5IpOe3y1dHdPseoZfsn
eI9MrxeZtYy+vdYLxYgYqsXHytI0ZswZrdPCORew8ipL1vP6IsO0Drcon0egTTkm
1hzBA8Pw5CUHrnihAIvHRUI5M1qBUQEpziBa8HWq0iGwKOAY8L34lkC47/XSAu81
g4KN2uM1Jgd1bsCvaopUqaXp4qQjgFAVPHhjBDuFf2Pi5CEt+qu6E0dAsoxjwQnj
MoxR549b61wvTcpNdiO2y/rZ+qttVA86GesjlW03QaEfo7RmPU0uXcCjA6uEvZaX
6g9VqjmWbXy2qA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:23 2026 by rpki-client