Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
File: UzXKxwoZioXzJL_toPNe15kcKus.mft (raw, json)
Hash identifier: 0KapT+KoTJlT2kgl+xxTfegY0CHF0DnO7m4bbpAmCNw=
Subject key identifier: AD:9E:72:18:76:93:69:72:B2:A7:23:6A:F3:C7:BF:B4:CF:CB:DB:1C
Authority key identifier: 53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
Certificate issuer: /CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Certificate serial: 019FAC3EF12ED8D33AA22D422B0E93A5FD4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
Manifest number: 0524
Signing time: Wed 29 Jul 2026 05:00:33 +0000
Manifest this update: Wed 29 Jul 2026 05:00:33 +0000
Manifest next update: Thu 30 Jul 2026 05:00:33 +0000
Files and hashes: 1: UzXKxwoZioXzJL_toPNe15kcKus.crl (hash: CBXeMCksdrGpq4Io0gljBYkNBVW2JjP7nfw2Tuk1vC8=)
2: u2I4q7xBL8mYLta1M7INCxZpXAY.roa (hash: 3ZlXswl10jzu9dupP4EFIogY6nOqpccwvTneFAi7+uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:f1:2e:d8:d3:3a:a2:2d:42:2b:0e:93:a5:fd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Validity
Not Before: Jul 29 05:00:33 2026 GMT
Not After : Jul 30 05:00:33 2026 GMT
Subject: CN=ad9e721876936972b2a7236af3c7bfb4cfcbdb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7d:e5:78:d2:4e:dd:1a:94:2f:27:81:e6:d5:
ac:fe:c6:6f:fe:d2:0d:66:b5:96:61:3d:5d:de:a7:
26:d4:d9:ea:99:3d:90:e7:de:fb:7d:7b:ec:37:fa:
7a:8f:68:58:32:f6:0c:7f:d6:df:c3:b9:af:6b:88:
9b:4c:f9:1a:a7:72:53:c6:66:7f:7f:7e:97:98:e9:
c5:1f:7b:77:5c:2d:cb:06:81:4d:52:c7:cf:1a:2a:
f6:24:47:8a:81:5f:d7:0a:e1:e5:04:65:87:92:26:
cb:47:85:66:9b:8b:e1:b9:e1:50:44:ba:cc:ce:cc:
23:2a:77:d2:e2:a6:0e:da:21:b0:41:51:8d:0e:74:
bc:7b:60:20:9b:02:be:d3:db:77:bb:37:f1:32:92:
f7:25:6f:04:14:1f:df:04:6d:ae:64:5f:6e:20:ac:
85:1f:67:0b:c1:6c:a3:10:32:e8:4b:a9:e7:8a:54:
8b:6c:db:9e:f5:5e:4e:67:0b:b4:40:8f:df:44:ab:
38:e1:63:65:ad:d5:66:b7:8a:81:94:bc:14:1c:6a:
7c:8d:87:a5:94:af:c0:79:a0:6f:97:1b:53:08:55:
ab:dd:55:46:90:e7:6d:5c:dd:e4:ef:a9:43:7b:78:
f8:37:fb:f3:3f:50:d9:33:30:1f:3d:1a:ec:27:2d:
ad:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9E:72:18:76:93:69:72:B2:A7:23:6A:F3:C7:BF:B4:CF:CB:DB:1C
X509v3 Authority Key Identifier:
keyid:53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a4:d9:a5:b3:c0:59:34:13:cc:1d:a3:c6:03:e1:fa:9f:66:
c1:23:6a:75:12:0c:dd:23:81:e2:bf:95:af:8d:99:2b:49:00:
65:40:e4:04:0c:a3:53:11:39:86:cf:c9:a7:41:a6:6a:aa:d0:
6c:7b:93:3f:93:3f:68:da:5e:5d:b8:be:d9:14:be:13:32:44:
41:6d:b6:a9:1e:5b:ad:85:5e:b6:6c:cc:6a:ba:2e:9b:83:62:
83:78:5d:f6:24:07:49:f8:b2:08:ed:83:bd:1b:dc:3e:e9:1e:
6e:5c:4d:73:e0:0d:40:74:86:ae:31:07:5b:d5:cd:5b:2c:6b:
b8:0c:1a:4f:7b:f9:a7:ae:5d:80:ce:e3:83:73:32:83:c7:44:
d6:5e:cc:e8:d4:7b:f8:ca:53:78:1f:9a:f5:c2:e3:e0:68:fd:
6f:7a:21:a9:92:84:c5:e9:21:ea:e8:ab:33:c8:90:84:9b:33:
d3:aa:5f:69:f3:ff:6b:5b:6c:81:ee:17:ec:12:ba:f0:6e:84:
78:40:a1:ad:d1:07:e3:c2:ac:4c:a4:8d:75:d6:81:d0:cb:1d:
53:98:71:9c:db:3a:a0:9f:b0:f8:21:f5:12:88:26:01:5f:fc:
97:bf:1b:5f:07:29:87:23:79:05:37:72:3b:14:8a:8e:f2:c6:
8d:63:2c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:01:54 2026 by rpki-client