Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File: UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier: Lfl+FehWYz8Q01zq4VdG+quGJW2sR22OzYXfm0d1zhM=
Subject key identifier: 8A:FE:D2:11:BE:DC:39:CE:EA:48:67:87:7B:44:0B:C2:39:2F:3D:2F
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 019CA90F2F6CFEF7FBDEB5542BB1AB508D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number: 0CEF
Signing time: Sun 01 Mar 2026 11:01:10 +0000
Manifest this update: Sun 01 Mar 2026 11:01:10 +0000
Manifest next update: Mon 02 Mar 2026 11:01:10 +0000
Files and hashes: 1: 1-rvXWbfutRyQsFLB2O2HcSydvn8.roa (hash: G/bEqZr33OdbdPx/abXyN5kc0kY5EzztDY6k+nCMKOc=)
2: 3-EeXmcZRUpj5DL_Om7bylZsefk.roa (hash: kfreAir/SgzDeq1U4ZKMC+PhHkagl1wiR7E5yuELkYE=)
3: FW4uCaBEevcQCVC9KduuJAdmVkk.roa (hash: hi3CRENNqBM7ERn9MrenvqFZvgbgfilYx3/QP3Xqq4k=)
4: KQmQrJ1jEiHHjz1S_0Yk4OXG9xA.roa (hash: tpY9R1aFnUdMqsnHp8rSZAPwxdzHPsIGg6V1ZMmMnOQ=)
5: LLtX3Bw8gzc5rIoJ6gGIoEGZhvk.roa (hash: 8ZMUJCkeXZDA3JqlPtb/Z7fXVQiFb14roMzYlX1mZ98=)
6: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: agRuZyndgXXd7HAQH5/ryS4t3TsE5qYImx1OBCeBnAg=)
7: nQE3bGEbjM6OpBVVSm2YC_6oWgI.roa (hash: Ho+aVhsVcSM72ZGhR58VKNtxF0cVDscps+IEINsdQjg=)
8: zmXY1OTT6NQXEmsjJD2BX4c7b7c.roa (hash: 26+rkNPDulDua9fC+YQZGyXCc/EBwd+QOh+NkG5ORq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0f:2f:6c:fe:f7:fb:de:b5:54:2b:b1:ab:50:8d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Mar 1 11:01:10 2026 GMT
Not After : Mar 2 11:01:10 2026 GMT
Subject: CN=8afed211bedc39ceea4867877b440bc2392f3d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:56:88:d3:2e:13:d0:2f:3e:6d:56:64:71:
19:11:66:4b:01:f2:f6:bc:db:b2:34:47:11:ee:d9:
70:0c:c1:04:22:73:8a:44:be:6b:0a:36:93:f4:f8:
1e:7d:57:db:b2:bb:02:85:27:d9:35:5f:31:a3:af:
46:21:04:63:0f:a2:f9:e5:97:77:89:86:06:76:22:
7e:d7:35:37:b0:f2:a9:f0:8c:fc:0f:e4:99:9b:d2:
d5:f0:89:ce:d0:bf:0b:35:54:47:37:ff:90:0d:5e:
24:13:9e:fc:7a:99:c3:bc:f6:2d:d6:a9:ad:f1:c0:
f7:5a:1c:68:ce:fc:54:1b:ff:f3:2a:9f:98:f4:1f:
e8:b0:78:91:1d:c1:28:70:f4:c7:6b:8e:a4:47:1d:
b9:34:cb:86:f5:63:f8:e9:9d:01:17:3e:bd:d3:9f:
0f:c1:8c:a3:1c:a4:d8:cb:80:d4:77:e7:88:4f:11:
b9:d2:d5:2f:c6:13:f5:45:91:d7:52:b9:14:9d:ad:
a7:e1:1a:4c:ef:10:c6:2c:7e:51:43:e2:5c:9b:05:
d1:2e:81:5e:ab:1e:e9:b4:5b:b1:08:31:b0:e5:c7:
be:c3:27:9c:89:7d:53:34:67:82:5c:cb:bc:ef:90:
fa:2e:d1:e0:5f:4a:10:37:62:f4:19:ad:13:ae:27:
0d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FE:D2:11:BE:DC:39:CE:EA:48:67:87:7B:44:0B:C2:39:2F:3D:2F
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ee:d6:f2:89:51:30:95:9d:94:2e:35:7e:ee:73:59:cd:da:
33:ec:e5:fd:be:e3:fb:99:e7:14:b6:91:95:67:3e:52:89:88:
2d:a4:24:6d:9d:9e:cb:23:1a:1f:63:a7:d0:7d:e9:68:80:dc:
e8:29:fb:f2:8e:eb:f5:63:10:7e:ad:62:08:45:ee:fa:b0:57:
6f:c2:01:5a:10:cf:fa:3a:11:de:c3:b9:c4:ec:08:a7:42:26:
60:3d:d9:31:49:69:cb:88:2e:84:ca:dc:9c:5f:02:ba:7b:67:
b1:fb:3a:8c:e4:ec:d6:34:0e:a7:8e:c3:38:9f:f7:7a:92:88:
9b:fd:49:3a:53:06:fa:b2:c4:5d:26:bb:27:b6:e8:bc:e3:32:
52:bd:73:29:fc:af:be:0f:96:aa:59:5c:e8:08:0b:84:7b:38:
e5:db:8c:b8:c4:0b:18:e4:48:dd:1d:8d:bc:01:25:b2:34:a2:
8b:30:6b:45:0e:33:7e:6a:38:d1:56:20:9c:02:fa:5f:7d:67:
c5:6f:b0:70:c7:6f:7d:a6:60:87:eb:73:ed:12:c5:99:68:13:
97:c4:79:7e:73:e9:a0:7a:38:15:05:f2:c7:35:fb:38:da:45:
74:49:71:44:26:cf:7a:83:af:ab:17:e0:33:73:8a:bc:e3:88:
aa:4e:11:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:32:59 2026 by rpki-client