Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft
File: UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft (raw, json)
Hash identifier: 0l+KqlA64admDbftBPBgxOHRUMriqms3o2VKCmbkIdA=
Subject key identifier: 8A:1A:E9:B5:E1:C6:25:32:27:7A:3C:BE:92:4E:57:8E:27:70:E4:B2
Authority key identifier: 51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
Certificate issuer: /CN=519d802caf9aa8f427f1dd08556c89995f0478d1
Certificate serial: 019FA97560E384A3153A10A940E656407D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft
Manifest number: 20
Signing time: Tue 28 Jul 2026 16:01:09 +0000
Manifest this update: Tue 28 Jul 2026 16:01:09 +0000
Manifest next update: Wed 29 Jul 2026 16:01:09 +0000
Files and hashes: 1: 351arMODSIyd3CJc9fgPAtsmlNI.roa (hash: Yo2IiguJDajHZ2abX/Lenjc2Oi/XsPFxr+IXj+TfOw0=)
2: EJ834orq5XxkS33xyiAVciNKYTA.roa (hash: tsKZbbD2a26s9kJQXaOMNeI95YAO2ar9y5cHWx269UQ=)
3: O1bRHs3xt5FsIbl_ziUUS70e2Oo.roa (hash: GDAX7A9G25jk6iCRuWUSO9OYN1CP4Rha8hkEH61irKE=)
4: TVciBvbG1XVG5ssHlr4AadQK2fk.roa (hash: QwF4SWXY6yBXWUo8zo5vTIE9qB3GoAOkQodC/dlqVwc=)
5: UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl (hash: WplWsn2gbnXGx2t9EcZscmJmY4H7fEg39kXs/8FTLqc=)
6: hs3fngFJt1NiocNCIA7qGPYWsTU.roa (hash: ToEvpANK+Yu0KXslqAyftUZpThJvK58TLmLx0aI2m1A=)
7: slPI9aN-JbfbvX_GY814pCJ8UFA.roa (hash: EeGAyjsGw6lAKae9brKTE8ngKeD+Md25/vDKFnzwqig=)
8: tm-LFqSPmanwgI1syFmGkI6nKdc.roa (hash: lIW2bmaFFTJOzvB2HW/qgxs6vnJmoBOrm3elLnIZeZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:60:e3:84:a3:15:3a:10:a9:40:e6:56:40:7d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519d802caf9aa8f427f1dd08556c89995f0478d1
Validity
Not Before: Jul 28 16:01:09 2026 GMT
Not After : Jul 29 16:01:09 2026 GMT
Subject: CN=8a1ae9b5e1c62532277a3cbe924e578e2770e4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d6:7e:c4:7a:3e:fd:aa:83:69:b2:d3:9f:5d:
b7:fb:96:c5:2f:29:fb:cf:02:79:14:ca:00:92:0f:
a1:7a:d4:a7:e2:da:11:66:cd:2e:fc:22:2f:e0:2a:
b1:d1:94:b6:78:1b:0d:ee:99:58:1d:8a:5e:83:1a:
40:3a:b2:4c:f0:72:c0:fc:12:56:a7:0a:91:05:6d:
39:a9:c7:15:4a:84:54:0d:c1:65:77:7c:c3:c3:a0:
c2:b0:e2:93:9c:09:22:d6:09:87:e4:17:9d:46:ba:
6d:49:65:75:09:6e:ad:16:97:94:2f:29:4e:b8:64:
e4:cb:7d:a8:5c:2d:5a:3a:eb:19:e6:17:05:4b:d2:
40:ee:13:2a:8d:f9:81:5d:c5:a2:19:0a:b8:c3:99:
a1:1a:8d:46:d9:14:e8:21:54:19:5c:60:d6:71:f8:
4a:60:0c:f0:b8:8d:b6:b0:3a:f9:c0:30:1d:01:0a:
c8:eb:7c:13:13:83:d4:17:91:20:bd:26:59:11:30:
53:28:9a:5d:f8:20:be:e1:9e:a4:41:84:c7:2b:8c:
51:1e:4e:e2:91:a0:7f:24:89:5b:66:d2:92:da:3d:
e0:44:3e:27:46:e5:ad:5a:5e:d9:c5:f9:ad:26:45:
7a:d9:2b:7d:23:08:59:40:73:eb:93:72:48:7b:b7:
91:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1A:E9:B5:E1:C6:25:32:27:7A:3C:BE:92:4E:57:8E:27:70:E4:B2
X509v3 Authority Key Identifier:
keyid:51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a8:e6:9c:7a:8d:8d:b9:53:9a:da:04:a5:62:04:21:33:cc:
62:1a:44:a1:dd:98:5b:de:ef:2d:38:4b:3f:c9:8b:f9:73:fe:
d4:30:66:3f:29:a5:c1:8b:5f:54:6e:ef:4c:79:e8:cf:d8:94:
6d:89:59:05:25:1c:36:3b:93:fe:3b:c5:a0:3a:32:23:3c:fa:
f5:7d:c3:68:72:8b:6e:57:87:8e:64:2e:ea:1b:8b:71:86:83:
fb:e9:3d:01:fc:44:85:33:a5:01:e0:51:e0:89:3c:77:da:f4:
36:f5:ef:77:db:4a:db:9a:52:18:da:3c:7b:0d:a1:a6:10:1f:
77:45:76:d0:1a:85:00:75:11:a5:87:9e:31:c0:70:13:1b:b8:
2b:fd:58:b3:d7:0e:9d:64:43:eb:67:e7:33:dd:aa:09:92:6a:
3e:ea:ea:3e:c7:88:76:9e:e5:2f:8b:56:c4:87:16:b2:86:96:
4a:df:bc:37:01:90:2f:ae:57:24:77:7e:7a:15:4d:c6:ad:68:
39:9d:00:c8:3e:c8:7e:31:28:2a:37:39:fb:3e:8a:7f:8c:fb:
9e:ea:ab:6d:cf:42:8d:6b:e7:06:13:ca:46:6a:22:f3:72:96:
e9:10:ed:90:73:0d:4f:54:24:ba:7d:f4:6c:18:91:c6:b7:50:
de:16:f2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:17:33 2026 by rpki-client