Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
File: UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json)
Hash identifier: w9bnuSOjrdqgQQVeN0l6qjPoC+c5d04f0VcSBBlhST4=
Subject key identifier: 87:B9:A8:FE:E0:6F:F7:77:F3:DE:73:10:3C:02:3D:92:E6:45:E0:25
Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
Certificate issuer: /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Certificate serial: 019CAA8F7890AB40D22214FF56E3CF987197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
Manifest number: 1818
Signing time: Sun 01 Mar 2026 18:00:55 +0000
Manifest this update: Sun 01 Mar 2026 18:00:55 +0000
Manifest next update: Mon 02 Mar 2026 18:00:55 +0000
Files and hashes: 1: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: FvvU61LuF1MfsEQb5nZ24Id9ZTzntaAVR0+wvO6TLlo=)
2: ZsE_mt7ku7Fr5hPoQLALle6qg7o.roa (hash: HUKBNWBBwbvfcuNQzCGO+9wjMStLGidRG99eNbwf4fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:78:90:ab:40:d2:22:14:ff:56:e3:cf:98:71:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Validity
Not Before: Mar 1 18:00:55 2026 GMT
Not After : Mar 2 18:00:55 2026 GMT
Subject: CN=87b9a8fee06ff777f3de73103c023d92e645e025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5e:98:67:0f:29:61:09:f5:19:c4:d8:f1:01:
bc:b2:53:d5:6a:c0:4f:25:71:9a:b8:a6:0b:51:ad:
e3:e4:ef:df:8e:2e:4d:d6:4e:dc:5a:92:25:4b:f2:
86:d8:bc:9a:69:64:eb:4f:58:f3:25:01:13:bb:19:
3e:01:8b:52:0c:9f:65:27:db:32:a9:48:b8:fb:52:
8b:4f:42:b8:6f:a6:15:b4:36:59:33:d6:ad:30:6a:
72:4a:31:89:06:82:37:d5:26:bc:f7:05:29:35:af:
c7:d6:54:44:7f:44:9d:cd:cc:20:c0:f4:33:0c:2d:
d0:6a:d8:97:d2:c9:11:5b:01:84:de:82:b6:25:18:
04:8a:d4:5c:c0:bc:36:ec:e7:3c:ac:9c:09:47:38:
50:ac:0f:30:d9:ba:76:84:be:cf:91:04:8c:e8:16:
00:ff:72:5b:76:c1:8e:00:31:7c:be:16:f5:2f:23:
4b:f9:3d:33:ec:54:3d:c4:98:48:ce:3d:ce:f4:d4:
03:3c:e6:e3:67:91:c3:03:e2:b5:78:82:f3:e9:69:
45:c0:84:cd:01:2b:59:8b:e4:7d:d4:c1:1d:16:69:
a2:98:c9:59:c6:12:d8:ac:03:77:5f:c5:4b:2b:d8:
fa:4d:34:e7:70:73:cc:eb:0d:cb:f5:0c:6a:bf:6e:
1c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B9:A8:FE:E0:6F:F7:77:F3:DE:73:10:3C:02:3D:92:E6:45:E0:25
X509v3 Authority Key Identifier:
keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:66:21:55:f7:02:20:61:65:0b:81:af:93:dc:41:76:9f:6f:
e6:52:e5:1f:b5:a3:0d:bc:38:db:ac:a2:54:fe:51:cf:95:f1:
fc:96:68:4a:04:cc:88:3f:9d:5e:8a:fa:1b:57:0f:07:fc:af:
da:64:96:b6:59:6e:26:d4:8c:97:1e:a7:ee:7b:a2:e4:91:98:
d4:0a:df:ac:9f:31:12:88:bc:e8:da:11:9b:61:9e:51:64:38:
16:3a:ba:a5:8a:b7:8a:26:5d:e4:63:76:87:f4:90:46:26:08:
d1:9f:b2:4c:2c:b2:84:39:98:56:15:61:38:ff:2f:f7:ad:c9:
c5:01:58:ba:c4:44:a6:f3:1a:06:56:3b:5e:63:6a:77:e6:dd:
ec:61:f1:f4:01:e7:4b:0f:5d:75:72:8e:3b:70:4c:9c:9b:3c:
1a:32:f7:5c:ac:05:ff:2d:da:47:ce:9f:04:29:8f:13:9f:7a:
42:38:80:81:a9:34:75:49:d5:02:37:23:c4:46:b5:ec:f4:ba:
43:a4:4a:40:bc:4d:a6:ca:6b:75:b3:44:3d:a4:a8:69:d1:b6:
bf:31:95:35:b2:2c:b2:ce:a0:9c:dd:6f:df:75:9f:38:39:9f:
6f:ae:e1:77:c4:83:01:1c:fe:1b:23:65:19:ef:4e:41:0e:fd:
b6:d9:b5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:29 2026 by rpki-client