Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
File: UzXKxwoZioXzJL_toPNe15kcKus.mft (raw, json)
Hash identifier: ue4H8P1XZfJk8rbIALFgKdPHdQVHwqXsWTcePqHz2Bk=
Subject key identifier: 70:7A:90:D9:EB:4E:9A:75:01:0F:80:E5:1F:D2:7B:D0:4E:5A:0F:80
Authority key identifier: 53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
Certificate issuer: /CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Certificate serial: 019CAF7E8F29643124E7EA069513AF78738A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
Manifest number: 0398
Signing time: Mon 02 Mar 2026 17:00:32 +0000
Manifest this update: Mon 02 Mar 2026 17:00:32 +0000
Manifest next update: Tue 03 Mar 2026 17:00:32 +0000
Files and hashes: 1: UzXKxwoZioXzJL_toPNe15kcKus.crl (hash: HL3D/PYHvcChjMdmFOkgCD4KPVKvEWfmt2MHLPW0JVw=)
2: u2I4q7xBL8mYLta1M7INCxZpXAY.roa (hash: 3ZlXswl10jzu9dupP4EFIogY6nOqpccwvTneFAi7+uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7e:8f:29:64:31:24:e7:ea:06:95:13:af:78:73:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Validity
Not Before: Mar 2 17:00:32 2026 GMT
Not After : Mar 3 17:00:32 2026 GMT
Subject: CN=707a90d9eb4e9a75010f80e51fd27bd04e5a0f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:82:3a:94:4e:34:a0:dd:1b:ca:35:d9:f3:
82:db:6a:ff:f6:65:b6:fb:76:3b:4e:dd:60:c1:f2:
be:81:c4:e9:3d:fb:e8:9a:21:fe:57:52:fa:33:f8:
0f:8c:09:57:dd:c7:aa:6f:1c:68:a3:9b:30:1f:71:
1d:2d:65:ab:7b:e4:5a:44:e7:77:24:8e:95:b2:af:
b8:a3:b0:12:92:dd:09:73:e9:f0:37:b1:a7:e4:29:
a0:4e:1e:e8:96:14:c1:1f:65:23:ec:ba:c3:60:d3:
1b:4e:70:46:46:e4:f6:9c:42:94:94:43:e4:a8:dc:
18:66:cc:72:ef:91:b7:63:2b:78:b4:d1:c7:76:40:
cb:b4:fe:8a:ff:09:ac:0b:75:6c:f3:72:e9:ed:b1:
40:20:0f:fc:f9:06:bb:06:db:05:05:97:c5:0c:cc:
98:1f:56:57:f9:1a:ef:5a:5f:de:25:fb:80:b0:76:
3d:30:c2:f3:11:b9:d0:7b:b8:c9:9d:ef:bc:f6:6a:
68:3b:1a:38:3e:2b:a0:c5:e3:a7:3c:14:40:68:b8:
eb:ef:5c:75:ba:ff:5c:ec:27:41:fd:1c:a0:06:8e:
f1:38:2d:fc:49:bc:5d:1c:89:d4:9f:b9:a6:d8:cb:
51:de:1f:14:cc:cb:cc:c4:bd:21:44:cd:71:db:b6:
ac:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7A:90:D9:EB:4E:9A:75:01:0F:80:E5:1F:D2:7B:D0:4E:5A:0F:80
X509v3 Authority Key Identifier:
keyid:53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c9:41:6a:76:30:ee:29:f0:90:f0:fa:36:b3:6a:de:7e:08:
d6:26:de:7f:e5:f9:61:4e:0e:f6:e9:e3:63:d6:3a:f1:82:4d:
b5:22:7b:37:83:a1:ff:76:da:f4:b3:6d:20:6a:44:d8:68:95:
9f:ec:10:b4:bb:4a:97:d9:b4:00:9c:f6:b0:91:9b:f9:ba:02:
52:5e:5f:87:29:92:b4:11:83:5e:30:46:17:ae:59:97:ac:50:
e9:3d:0b:c0:df:74:8c:4d:a2:c8:5c:a8:5a:f0:8f:f9:63:13:
02:4b:33:e3:6e:e6:01:9b:3a:4a:8c:e7:7a:0b:93:8d:8d:9f:
38:33:eb:cc:9f:52:09:6d:05:f8:8e:af:a3:26:ed:69:fa:29:
e0:c4:2b:5e:99:1b:76:22:d8:25:35:3b:14:7d:b3:1d:65:02:
e9:46:91:7c:2c:00:37:2f:16:4b:03:09:bf:24:f8:d2:0b:f3:
35:cb:99:6b:4c:a7:4d:61:12:5c:ef:15:12:80:70:9d:93:6f:
25:e9:b0:de:e3:b2:d8:f0:9f:d9:98:26:68:50:93:13:56:a3:
df:b9:68:6b:a0:85:e2:14:0e:be:ae:0b:37:12:ad:11:6c:55:
cf:42:74:db:56:2a:b9:4f:17:79:5d:31:89:5d:f5:5b:eb:30:
6b:e7:af:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:43:17 2026 by rpki-client