Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
File: UzXKxwoZioXzJL_toPNe15kcKus.mft (raw, json)
Hash identifier: Jbf6C7W9G5a9n9a2o006ypmJyYyfOtL47q1S7HblpgU=
Subject key identifier: F3:91:46:0E:BB:67:13:83:4E:55:9B:F4:AB:25:CF:C4:7A:C6:A6:7E
Authority key identifier: 53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
Certificate issuer: /CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Certificate serial: 019EC29238FA7B1BF436CEE70A5FE4528AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
Manifest number: 04AB
Signing time: Sat 13 Jun 2026 20:00:23 +0000
Manifest this update: Sat 13 Jun 2026 20:00:23 +0000
Manifest next update: Sun 14 Jun 2026 20:00:23 +0000
Files and hashes: 1: UzXKxwoZioXzJL_toPNe15kcKus.crl (hash: vHzWrjlrOt8BNL+wuqJxGgAroLThbWbjgwgkd/525Fw=)
2: u2I4q7xBL8mYLta1M7INCxZpXAY.roa (hash: 3ZlXswl10jzu9dupP4EFIogY6nOqpccwvTneFAi7+uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:38:fa:7b:1b:f4:36:ce:e7:0a:5f:e4:52:8a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Validity
Not Before: Jun 13 20:00:23 2026 GMT
Not After : Jun 14 20:00:23 2026 GMT
Subject: CN=f391460ebb6713834e559bf4ab25cfc47ac6a67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3c:77:0a:e2:6a:a9:36:03:af:ae:1c:11:2d:
dd:01:1c:83:d5:93:4b:08:0e:50:29:62:2f:32:5c:
72:ce:77:3f:43:cb:e9:50:16:e9:84:b3:93:1f:13:
70:a6:27:14:5c:46:79:60:1d:ac:22:dd:e2:f7:08:
43:03:4b:e3:dc:88:93:bc:de:d6:a8:87:e9:5a:9d:
c7:c0:76:b0:53:f7:f7:68:79:90:4a:92:b3:19:f6:
2c:03:22:d0:fc:ae:6a:fd:2d:fa:dc:64:3c:18:e2:
2e:a8:ef:90:40:83:67:aa:3a:a9:6b:5c:d0:4c:04:
4a:f0:ac:61:c4:0a:dd:05:fd:b5:ae:b6:3e:55:df:
3a:b4:2c:2e:10:37:5c:d8:3b:79:7e:d9:51:5e:58:
5d:2e:5b:e8:67:87:0a:77:24:e6:6f:f5:79:5d:4d:
6d:09:4b:85:af:2f:13:26:6e:6d:39:53:43:51:8b:
b8:97:56:a7:7b:ab:12:65:44:6e:72:33:05:2b:58:
73:00:79:78:1d:80:61:dd:fb:da:09:74:c9:66:a4:
35:33:69:ba:d8:93:b4:43:a2:85:e5:66:e2:38:8b:
49:f8:32:e3:84:fd:f0:0e:59:e7:7d:fb:10:29:eb:
5a:f6:d4:17:d5:90:c3:d9:a6:b6:58:92:40:3e:98:
22:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:91:46:0E:BB:67:13:83:4E:55:9B:F4:AB:25:CF:C4:7A:C6:A6:7E
X509v3 Authority Key Identifier:
keyid:53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b7:75:17:08:16:e5:c0:5f:ca:17:be:e2:3e:cf:1a:d6:86:
89:46:ab:db:49:e6:aa:c9:b5:64:f5:a2:84:a3:50:80:25:07:
e7:23:97:91:43:bf:8b:91:5f:27:8f:d7:29:2d:7f:dd:8c:cb:
2b:5c:6f:e9:c2:73:ee:4d:72:8d:ad:26:01:9c:29:d1:d1:bf:
0f:ab:d1:21:0a:33:a9:00:31:23:e8:50:25:45:8c:d6:e6:d7:
4f:21:cf:44:0a:d3:87:64:2e:15:12:c3:53:24:2d:e9:2c:4e:
54:2f:bc:ff:f9:85:87:b3:ca:73:21:c5:82:14:9e:0c:5e:9b:
61:fc:44:0a:1e:df:46:ff:33:df:b0:c0:10:dd:3d:e8:c5:de:
b7:ba:70:dc:b7:c3:5d:bd:75:4d:b7:80:52:83:ce:ce:47:68:
4e:b4:f7:3b:00:16:a2:69:8d:15:e1:5e:ef:a6:6a:71:d0:df:
a1:c7:70:a4:b5:90:cb:9f:82:47:62:a7:8c:2a:97:8a:31:1d:
30:bb:93:bb:2d:e2:c3:74:45:8a:1b:34:c3:fd:21:bf:89:08:
10:56:9d:1f:72:ee:91:ef:6d:1d:56:d1:8d:b9:0d:60:e3:fe:
8e:66:91:41:72:e4:82:ae:11:3d:85:59:14:d1:ed:1b:ef:5c:
30:de:ad:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Ckjj6exv0Ns7nCl/kUor6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzVjYWM3MGExOThhODVmMzI0YmZlZGEwZjM1ZWQ3OTkx
YzJhZWIwHhcNMjYwNjEzMjAwMDIzWhcNMjYwNjE0MjAwMDIzWjAzMTEwLwYDVQQD
EyhmMzkxNDYwZWJiNjcxMzgzNGU1NTliZjRhYjI1Y2ZjNDdhYzZhNjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDx3CuJqqTYDr64cES3dARyD1ZNL
CA5QKWIvMlxyznc/Q8vpUBbphLOTHxNwpicUXEZ5YB2sIt3i9whDA0vj3IiTvN7W
qIfpWp3HwHawU/f3aHmQSpKzGfYsAyLQ/K5q/S363GQ8GOIuqO+QQINnqjqpa1zQ
TARK8KxhxArdBf21rrY+Vd86tCwuEDdc2Dt5ftlRXlhdLlvoZ4cKdyTmb/V5XU1t
CUuFry8TJm5tOVNDUYu4l1ane6sSZURucjMFK1hzAHl4HYBh3fvaCXTJZqQ1M2m6
2JO0Q6KF5WbiOItJ+DLjhP3wDlnnffsQKeta9tQX1ZDD2aa2WJJAPpgiJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPORRg67ZxODTlWb9Kslz8R6xqZ+MB8GA1UdIwQY
MBaAFFM1yscKGYqF8yS/7aDzXteZHCrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXpYS3h3b1ppb1h6SkxfdG9QTmUxNWtjS3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MGNmM2UtZDQ2OC00NDNjLWFmYTQt
ZjM0YThmNzJlZWM0LzEvVXpYS3h3b1ppb1h6SkxfdG9QTmUxNWtjS3VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi85MGNmM2UtZDQ2OC00NDNjLWFmYTQtZjM0YThmNzJlZWM0
LzEvVXpYS3h3b1ppb1h6SkxfdG9QTmUxNWtjS3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7d1FwgW
5cBfyhe+4j7PGtaGiUar20nmqsm1ZPWihKNQgCUH5yOXkUO/i5FfJ4/XKS1/3YzL
K1xv6cJz7k1yja0mAZwp0dG/D6vRIQozqQAxI+hQJUWM1ubXTyHPRArTh2QuFRLD
UyQt6SxOVC+8//mFh7PKcyHFghSeDF6bYfxECh7fRv8z37DAEN096MXet7pw3LfD
Xb11TbeAUoPOzkdoTrT3OwAWommNFeFe76ZqcdDfocdwpLWQy5+CR2KnjCqXijEd
MLuTuy3iw3RFihs0w/0hv4kIEFadH3Luke9tHVbRjbkNYOP+jmaRQXLkgq4RPYVZ
FNHtG+9cMN6tDA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:35:04 2026 by rpki-client