Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File: UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier: LZERRnjOFUdhf3thwBa1I6smraEptJNimV9wZag9Z48=
Subject key identifier: 14:43:A0:69:24:96:A5:08:62:D9:EC:DF:3F:C9:96:B1:70:A6:1C:98
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 019D9C62EDEF2E0DAE602F2D178E50E6E71C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number: 0D6D
Signing time: Fri 17 Apr 2026 17:00:22 +0000
Manifest this update: Fri 17 Apr 2026 17:00:22 +0000
Manifest next update: Sat 18 Apr 2026 17:00:22 +0000
Files and hashes: 1: 1-rvXWbfutRyQsFLB2O2HcSydvn8.roa (hash: G/bEqZr33OdbdPx/abXyN5kc0kY5EzztDY6k+nCMKOc=)
2: 3-EeXmcZRUpj5DL_Om7bylZsefk.roa (hash: kfreAir/SgzDeq1U4ZKMC+PhHkagl1wiR7E5yuELkYE=)
3: FW4uCaBEevcQCVC9KduuJAdmVkk.roa (hash: hi3CRENNqBM7ERn9MrenvqFZvgbgfilYx3/QP3Xqq4k=)
4: KQmQrJ1jEiHHjz1S_0Yk4OXG9xA.roa (hash: tpY9R1aFnUdMqsnHp8rSZAPwxdzHPsIGg6V1ZMmMnOQ=)
5: LLtX3Bw8gzc5rIoJ6gGIoEGZhvk.roa (hash: 8ZMUJCkeXZDA3JqlPtb/Z7fXVQiFb14roMzYlX1mZ98=)
6: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: 99vd60NUhtCrUFE80kVeOOANPsCFaVEY9ln4UUZi0Ag=)
7: nQE3bGEbjM6OpBVVSm2YC_6oWgI.roa (hash: Ho+aVhsVcSM72ZGhR58VKNtxF0cVDscps+IEINsdQjg=)
8: zmXY1OTT6NQXEmsjJD2BX4c7b7c.roa (hash: 26+rkNPDulDua9fC+YQZGyXCc/EBwd+QOh+NkG5ORq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:62:ed:ef:2e:0d:ae:60:2f:2d:17:8e:50:e6:e7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Apr 17 17:00:22 2026 GMT
Not After : Apr 18 17:00:22 2026 GMT
Subject: CN=1443a0692496a50862d9ecdf3fc996b170a61c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8e:08:56:36:ca:6a:06:16:77:4e:8f:29:5d:
36:a0:87:32:e6:33:4d:fe:29:d4:17:67:25:1f:3d:
d8:3c:3b:23:0d:dd:d2:c2:bb:d4:b0:25:a8:d5:a0:
80:f3:a3:b3:55:96:ca:23:ed:58:f5:9b:0d:69:5a:
89:c8:27:13:bd:12:7e:56:bd:01:0e:e7:bc:b1:57:
45:96:a0:b5:ab:6c:f4:c1:2e:09:92:c7:ce:91:af:
3c:69:27:bc:05:8b:9b:e6:80:69:c4:e7:1f:38:28:
c3:1d:3f:40:bb:c7:ca:41:34:5f:c5:82:a6:81:f3:
a1:83:04:e2:85:7e:5e:52:0b:f6:37:d6:41:1c:2f:
88:52:8d:98:be:b0:b5:69:56:16:e6:d5:34:b9:38:
0f:1f:d2:0a:61:71:6e:88:4c:41:a6:46:93:af:db:
fc:59:c7:b9:cf:34:58:93:6e:ab:80:fc:61:68:57:
a1:d3:2b:23:df:ec:57:0b:6d:63:1e:21:7e:f8:d0:
cf:d1:cd:9c:be:6c:40:1c:59:ad:f7:e1:b2:d9:d6:
6e:b3:b0:27:c8:84:47:f0:4d:77:4d:b1:63:9f:18:
a1:de:59:4d:cb:9b:bb:c6:11:51:44:44:f7:36:c4:
3e:6d:e2:13:8c:38:b4:41:96:8e:07:4d:ae:2e:52:
d2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:43:A0:69:24:96:A5:08:62:D9:EC:DF:3F:C9:96:B1:70:A6:1C:98
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ad:2f:34:1c:ba:8b:70:7b:ba:12:db:39:e5:15:7e:55:23:
ce:c0:c6:3a:9c:15:96:1c:a3:a9:28:70:74:16:28:ac:fc:fc:
de:a9:26:a9:d0:e7:bb:c2:a9:e5:fc:61:6f:97:88:fe:5e:85:
5c:bd:a3:10:2d:d0:43:79:40:5c:f5:f6:a0:7c:57:9f:c2:4b:
c7:d1:d1:cf:12:5b:df:5e:0f:db:bb:ae:d1:11:67:dd:40:0a:
02:76:70:85:dd:3f:02:68:76:f0:6c:f6:5a:4a:a5:1f:1c:0e:
f3:dc:8b:ba:61:a4:b1:bd:83:c1:93:c1:44:4c:f4:1d:ec:85:
9f:ad:ff:49:45:a8:90:0f:1a:8e:95:21:b7:8e:ef:4e:97:d1:
2a:af:d6:16:97:fe:7e:f0:d7:10:94:74:ff:21:c0:7a:da:90:
d8:a6:8b:bb:d8:94:85:77:ee:af:69:fc:3e:77:ff:02:73:ec:
20:49:44:72:0c:2e:0e:bc:6b:37:04:6e:e4:2f:ea:3f:0d:7b:
d9:55:5d:36:06:eb:99:0e:0a:5e:bf:c2:38:3d:9f:3f:68:e4:
b5:84:37:d0:9e:df:7c:c6:71:62:73:8b:50:9e:f6:c5:1a:33:
4f:c5:a2:33:ad:dc:cb:7c:8e:ca:11:fe:e2:a7:cb:07:c6:8c:
f6:8a:2b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:33:35 2026 by rpki-client