Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
File: UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json)
Hash identifier: q9BVWl+KOvZcOPKJig/n59+q9ZOPyNC+Hw6VCox+N2M=
Subject key identifier: D6:A9:71:68:98:EC:54:58:7C:B7:E6:32:7F:F9:C5:F9:B5:B2:FD:B2
Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
Certificate issuer: /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Certificate serial: 019D9818B30CC3D49CE8FC5EC9CF1DC7D3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
Manifest number: 1893
Signing time: Thu 16 Apr 2026 21:00:48 +0000
Manifest this update: Thu 16 Apr 2026 21:00:48 +0000
Manifest next update: Fri 17 Apr 2026 21:00:48 +0000
Files and hashes: 1: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: ykT6paPsE8LfKZKrmQtHHnAftm+T5OFkJvBde9e9pPY=)
2: ZsE_mt7ku7Fr5hPoQLALle6qg7o.roa (hash: HUKBNWBBwbvfcuNQzCGO+9wjMStLGidRG99eNbwf4fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:b3:0c:c3:d4:9c:e8:fc:5e:c9:cf:1d:c7:d3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Validity
Not Before: Apr 16 21:00:48 2026 GMT
Not After : Apr 17 21:00:48 2026 GMT
Subject: CN=d6a9716898ec54587cb7e6327ff9c5f9b5b2fdb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b0:9a:05:86:e8:9c:65:45:2a:e5:45:30:67:
f3:3c:a0:4a:41:2f:69:ce:fd:aa:90:f2:ac:ef:59:
5f:6a:3c:4e:1b:68:3b:93:e6:ab:01:8e:db:bd:76:
53:cb:4b:c9:b6:27:ba:94:5f:dc:52:73:02:12:73:
15:09:cb:af:ca:fa:37:f0:51:79:18:b2:57:af:e2:
9e:f7:f9:01:5f:aa:10:ba:4f:85:20:be:7f:56:59:
1e:3e:38:a3:83:ad:71:87:7e:67:2b:02:34:e4:42:
78:12:2a:3f:da:6e:c7:68:57:45:1c:be:e4:f5:34:
d1:50:3f:b7:dc:17:fd:54:31:a0:a7:b6:df:fa:35:
91:eb:de:42:30:e2:11:53:9e:53:63:a0:c0:09:77:
8a:75:75:f1:74:b4:d0:34:98:2e:f8:8f:74:d5:27:
70:8c:e0:20:b4:30:2b:a0:1d:1b:29:79:ec:6e:c0:
26:4a:ed:00:b7:7f:03:23:19:ed:8f:43:90:c8:46:
87:20:7b:c7:0b:40:fb:68:15:d6:a8:e7:49:ab:94:
33:9e:c8:f1:6f:1b:cf:1e:64:5c:39:9c:ca:e9:28:
32:a1:67:0d:18:89:b8:de:8c:15:b8:4f:7d:4d:0e:
55:57:e8:7f:3e:9b:31:b3:18:45:d4:32:37:19:f9:
41:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A9:71:68:98:EC:54:58:7C:B7:E6:32:7F:F9:C5:F9:B5:B2:FD:B2
X509v3 Authority Key Identifier:
keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:39:85:70:cb:46:cc:6d:62:a8:8e:fe:74:6a:55:34:ad:00:
e0:81:07:20:a4:95:a7:d7:2d:71:3a:42:dc:fd:68:40:4c:96:
18:1a:d4:12:5d:03:55:71:f9:16:7b:dc:4c:66:15:e9:ed:ce:
57:28:40:a6:09:a9:9d:6e:fa:34:27:85:0b:b9:07:0d:22:7f:
51:b4:73:38:2d:1c:74:56:35:4b:af:93:d0:26:1a:b1:3d:e3:
37:4a:eb:4a:0d:83:40:e5:49:60:09:5e:6f:b3:f8:43:d9:53:
17:94:9e:c5:74:7b:dd:d1:dc:d8:d8:ee:27:8d:94:d2:96:c8:
cb:b6:67:a5:a2:3e:8f:76:36:aa:e5:45:79:ec:98:af:72:6f:
e5:9a:fa:20:13:9a:ae:5f:27:60:fa:f3:a8:0b:bc:0c:80:4b:
39:01:6f:10:8e:db:bb:00:8f:a4:68:6b:47:44:47:c6:9c:07:
f0:d0:89:b6:29:32:1d:9e:9d:cf:0a:b3:da:28:c4:f5:ae:c5:
6d:2b:50:ae:e4:ad:6d:45:48:a8:e7:fa:01:ce:97:ad:4d:1d:
9b:51:7d:50:ad:9e:2c:9e:51:27:88:3e:f2:fd:1f:21:25:d0:
dc:e8:ca:36:69:22:c1:fc:10:d4:fe:6b:41:43:8a:32:ea:f7:
c3:c6:49:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:56:34 2026 by rpki-client