Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
File: UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json)
Hash identifier: ziAL/+qdBkHs5czQUiA+KYktPzI/wxeCZIRjqxFGH+o=
Subject key identifier: 8C:05:D0:F7:AD:7F:AB:5F:BF:B3:48:79:9B:57:ED:51:6D:F3:07:1A
Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
Certificate issuer: /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Certificate serial: 01A11A193DC11E7ECD3F68FD4FFC4FB0BE5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
Manifest number: 1A64
Signing time: Thu 08 Oct 2026 06:00:24 +0000
Manifest this update: Thu 08 Oct 2026 06:00:24 +0000
Manifest next update: Fri 09 Oct 2026 06:00:24 +0000
Files and hashes: 1: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: 1aplQ8xbIIw+xrgE/Lb7neHkrToYHjPOeaZjYbH5Tjo=)
2: ZsE_mt7ku7Fr5hPoQLALle6qg7o.roa (hash: HUKBNWBBwbvfcuNQzCGO+9wjMStLGidRG99eNbwf4fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:19:3d:c1:1e:7e:cd:3f:68:fd:4f:fc:4f:b0:be:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Validity
Not Before: Oct 8 06:00:24 2026 GMT
Not After : Oct 9 06:00:24 2026 GMT
Subject: CN=8c05d0f7ad7fab5fbfb348799b57ed516df3071a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6b:5e:88:ab:aa:ba:22:30:06:7c:bf:bd:01:
9a:52:34:b7:f4:50:6c:83:32:ba:a6:25:f0:ec:39:
62:ee:2b:fb:8b:c8:9b:5a:2a:1e:df:1b:51:eb:7d:
13:d8:b7:f7:37:96:b3:59:b8:2c:56:48:82:84:e9:
97:60:22:19:b1:18:15:aa:ae:c3:96:c5:6b:17:ac:
8b:4f:d3:56:7e:df:13:d0:fc:8b:27:fd:25:d6:cd:
5c:bd:21:ab:8c:b0:af:fd:0e:2c:3e:4f:d5:f2:22:
99:d0:52:b3:49:2a:91:60:ea:e4:f9:e9:15:c7:3b:
cc:56:b4:a8:eb:0c:f3:46:80:08:74:4f:47:91:f8:
1c:78:2e:1a:1d:9d:bf:78:fe:36:1a:d0:9c:02:b2:
8a:2b:93:4d:24:f4:51:c7:f1:4a:8b:ce:ae:cb:22:
c8:dc:33:3c:99:e2:ac:7d:f6:7a:7b:a2:8f:69:e2:
77:21:83:3e:f2:a4:26:c3:89:71:0c:25:5d:5a:c3:
f5:c9:e6:b8:d3:1a:cb:43:cd:64:ee:30:47:2c:6b:
89:6d:45:45:8d:e9:46:b7:b6:ba:1e:e7:66:c6:af:
f0:9b:29:a7:fe:8d:29:0e:10:c7:f3:dc:64:70:2b:
17:0a:88:3f:c8:42:29:e0:ac:ec:60:35:d3:c0:c7:
e6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:05:D0:F7:AD:7F:AB:5F:BF:B3:48:79:9B:57:ED:51:6D:F3:07:1A
X509v3 Authority Key Identifier:
keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:aa:d4:b5:be:9c:b7:bf:65:67:1a:11:bc:53:52:f1:7f:2b:
50:6d:03:69:82:4a:e0:30:c9:67:45:81:ec:86:93:f1:7f:f9:
b7:07:42:f9:90:16:b1:b5:c0:05:87:3f:4d:55:19:7a:6d:93:
96:d0:fa:3e:1e:fc:f7:ff:c4:5a:2e:83:15:3c:e8:6a:c3:4a:
99:22:f9:e7:d7:e7:f8:24:0d:3e:36:1f:3c:15:57:8c:ef:31:
fc:49:fb:5d:b3:99:83:c9:ba:b9:f7:ca:01:ee:69:75:20:7c:
0e:c3:8b:ac:c1:82:0c:da:96:6b:d6:bc:a8:fc:4a:c9:a5:30:
2c:79:20:d0:f2:5e:e5:27:91:7a:7d:3d:57:f3:3d:9a:1b:a9:
a0:db:c2:15:56:29:e9:32:49:a5:b9:e2:56:31:a9:f2:6e:26:
9b:2b:66:a9:ae:3b:ff:92:42:32:21:a5:a9:64:aa:b6:bf:dc:
6e:8c:12:68:db:f4:ac:3d:3c:76:4f:30:e1:2a:fa:53:4f:bb:
77:0d:3c:7e:e7:0e:aa:23:23:b2:93:f3:18:e6:24:89:a9:25:
f0:f2:44:3a:76:31:b0:8e:53:14:eb:96:4d:41:02:44:3a:f5:
7f:88:6f:43:6e:0c:cf:9f:e7:3c:21:eb:7e:01:88:73:67:6c:
d6:84:97:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:00:39 2026 by rpki-client