Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
File: UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json)
Hash identifier: D/jWR/73mBRuV+nFlVedrF/R/EgwtEm/IN/kNUmVj9g=
Subject key identifier: 54:55:0A:88:DC:9B:84:F4:1E:A3:CE:99:37:A3:8C:16:24:29:94:04
Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
Certificate issuer: /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Certificate serial: 01A0DE3BCF22C196DC84354C050FB8F74A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
Manifest number: 1A45
Signing time: Sat 26 Sep 2026 15:00:56 +0000
Manifest this update: Sat 26 Sep 2026 15:00:56 +0000
Manifest next update: Sun 27 Sep 2026 15:00:56 +0000
Files and hashes: 1: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: 9l5+jSckUN9u126lMZr7K7knWWol68eENyEgNGnD3AI=)
2: ZsE_mt7ku7Fr5hPoQLALle6qg7o.roa (hash: HUKBNWBBwbvfcuNQzCGO+9wjMStLGidRG99eNbwf4fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:3b:cf:22:c1:96:dc:84:35:4c:05:0f:b8:f7:4a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Validity
Not Before: Sep 26 15:00:56 2026 GMT
Not After : Sep 27 15:00:56 2026 GMT
Subject: CN=54550a88dc9b84f41ea3ce9937a38c1624299404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:90:6c:05:d7:b9:2b:ef:09:0b:54:38:1a:b3:
f8:27:37:b3:d3:a4:78:f1:f8:57:6d:b7:1a:1c:f9:
5b:64:dc:ba:26:a9:2e:c3:66:1a:9b:e6:eb:a1:52:
bf:f4:84:9a:09:7e:01:c5:f9:26:87:97:c6:4b:92:
64:e4:38:19:9e:17:51:6a:a6:e1:d1:a6:68:10:81:
04:71:95:e8:98:c5:dc:ac:d3:d5:d8:26:ae:e8:9e:
b5:7f:2d:a3:86:f4:c6:8d:20:e9:16:5a:c2:1a:a4:
ce:ab:37:ac:18:44:c1:60:5b:c7:b1:fe:33:fe:2b:
1e:0a:18:c1:95:b1:2e:5a:94:26:83:a0:4d:6a:6e:
3e:20:d3:3d:35:bd:a3:31:6c:ff:4d:40:7d:4d:22:
c9:a5:30:a3:01:58:3d:5c:03:21:d2:ec:c2:4c:99:
53:f5:ef:49:c8:b1:6e:4b:ef:70:bb:dd:9a:79:1d:
0f:03:34:93:23:d2:a7:02:eb:48:e3:d2:ab:6e:7c:
c0:53:8a:1d:42:58:5d:4d:42:72:ce:45:d6:be:a3:
bd:98:12:a4:34:36:38:68:91:e5:c8:eb:9e:05:fa:
4b:00:24:65:6b:8f:30:9c:e3:b5:68:3c:c2:ab:9f:
f3:bf:e8:4e:3c:ed:0c:c1:83:50:d4:7c:cc:d1:7b:
48:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:55:0A:88:DC:9B:84:F4:1E:A3:CE:99:37:A3:8C:16:24:29:94:04
X509v3 Authority Key Identifier:
keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:2e:57:6c:64:76:26:c6:30:bd:06:96:cc:6a:31:e0:59:09:
f2:43:38:eb:10:ba:f4:29:16:77:07:82:7c:0a:47:ad:cf:0f:
df:98:63:de:0d:49:b2:32:a1:1f:41:27:6b:7f:ce:84:73:d9:
f5:88:d1:8d:d3:b9:a5:be:d4:6a:19:fc:b0:84:ca:b8:e5:29:
b3:80:80:7a:36:a7:5c:7b:4a:77:3c:da:2e:6f:8a:b6:ca:88:
85:92:23:9a:70:8f:2f:43:76:ea:79:ca:e1:b3:03:98:d1:54:
6f:9a:70:9a:5c:c8:5b:7d:d4:8a:93:a1:e1:b9:ef:e9:bc:b0:
dd:c2:5d:f3:5b:ba:52:44:c6:25:93:58:58:00:61:23:d5:06:
9c:f4:6e:a6:d5:7e:bf:ca:17:8d:f7:fc:de:be:78:91:3b:9d:
7f:85:ec:1c:0b:78:ad:fc:75:bb:92:c5:34:3d:02:2d:c5:e8:
73:72:62:23:8e:c5:ec:d0:37:80:2e:71:ee:64:5e:6a:67:1a:
7c:0e:fc:8b:5c:4a:8a:01:46:52:a2:b1:06:32:00:e4:ac:89:
93:71:0b:cc:b6:1a:08:a5:68:65:43:b1:d2:3c:7c:aa:07:5c:
81:0f:a7:17:3a:f2:80:c6:47:a7:c3:2f:5b:b5:1c:83:c8:c4:
37:64:e4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:54:13 2026 by rpki-client