Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
File: UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json)
Hash identifier: KM3tZd0g01sLjigHbAn4Xa+sH38sFus8FyJz6lVdUHo=
Subject key identifier: 69:EB:C7:08:87:1D:D4:CD:95:41:7C:91:A3:AF:1A:D1:A1:E9:75:8C
Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
Certificate issuer: /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Certificate serial: 01A002138D8CD9C6A08F30B922CA30DB22C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
Manifest number: 19D3
Signing time: Fri 14 Aug 2026 21:00:30 +0000
Manifest this update: Fri 14 Aug 2026 21:00:30 +0000
Manifest next update: Sat 15 Aug 2026 21:00:30 +0000
Files and hashes: 1: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: XjW9K7oRXW9m/Ehavta9cYDvxH1XbvbQIt6jrHS4Q14=)
2: ZsE_mt7ku7Fr5hPoQLALle6qg7o.roa (hash: HUKBNWBBwbvfcuNQzCGO+9wjMStLGidRG99eNbwf4fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:8d:8c:d9:c6:a0:8f:30:b9:22:ca:30:db:22:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Validity
Not Before: Aug 14 21:00:30 2026 GMT
Not After : Aug 15 21:00:30 2026 GMT
Subject: CN=69ebc708871dd4cd95417c91a3af1ad1a1e9758c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f3:73:64:9f:7e:b3:6d:03:4e:1b:6a:a8:3c:
b3:23:b4:35:57:af:04:1e:cb:67:3a:89:ed:b4:69:
41:1d:20:cf:1a:c2:56:8d:11:e3:c8:ac:43:d0:2a:
81:d0:fa:77:47:8a:e9:86:b4:cc:7a:f4:5b:ad:f2:
c8:ba:83:82:65:7a:38:3e:8d:05:ce:92:c0:e2:a9:
63:56:df:19:05:b9:7b:a9:bc:f4:38:81:a0:bd:a7:
e3:e1:9c:9f:aa:bf:96:fc:a9:4d:d2:1c:e7:f0:ba:
e9:e2:0d:8a:16:a5:33:da:f7:c0:ad:71:98:27:9d:
1e:b7:ee:82:a9:9a:27:32:d4:af:56:ac:18:67:8f:
6e:14:a1:d3:5e:e2:30:f9:3c:8a:2e:20:05:18:c9:
66:7e:36:e7:c5:24:47:88:88:48:e4:05:0d:d5:fe:
7d:5c:29:05:ac:c9:f0:68:40:ee:14:14:59:ab:0d:
5c:6e:6b:f0:c1:bf:8d:e2:5f:de:5e:4e:4e:3d:aa:
30:f1:58:48:26:df:4c:6a:af:d8:f0:12:d9:c4:3e:
52:67:5c:f8:92:32:da:2a:60:94:c3:68:ec:a3:ed:
ca:6a:18:bf:e4:9a:9e:56:9a:de:4a:dc:5b:ee:3d:
95:20:33:09:eb:6b:d7:79:18:a2:f1:cb:bb:b1:6e:
3b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EB:C7:08:87:1D:D4:CD:95:41:7C:91:A3:AF:1A:D1:A1:E9:75:8C
X509v3 Authority Key Identifier:
keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:74:92:59:d0:1c:73:80:22:93:95:69:5b:5b:35:6f:ee:02:
94:5a:2c:fd:cf:06:f0:fb:77:f1:64:90:cb:a4:2a:86:dd:35:
64:42:45:32:5b:b1:7a:62:d2:ff:fe:55:50:12:43:0c:ca:cf:
36:25:3a:1d:42:b2:03:66:02:8b:3c:e9:11:3a:9c:95:66:ab:
c0:80:d0:f5:f3:41:af:03:ec:56:c9:2e:9a:0e:3c:d0:bc:99:
11:d7:e4:0e:b7:8f:fe:07:cd:39:56:b6:45:76:c0:05:67:09:
bb:6c:2a:c5:ac:83:be:ff:e3:f7:84:41:b4:d3:9f:bc:85:e9:
db:e2:7b:fc:d2:5d:ea:15:7b:e6:02:61:84:90:de:1c:90:56:
10:3c:70:83:b4:20:1d:3f:58:07:80:98:d7:73:fa:8a:de:f2:
b1:37:79:fe:0a:85:18:a1:e3:cb:fa:88:32:a8:82:84:49:5d:
f7:3c:82:eb:fc:d0:51:2a:ab:de:47:04:12:3f:73:f5:88:ef:
ff:b1:03:48:39:fa:a4:ad:54:e3:c2:ce:65:8a:67:16:65:1a:
ef:14:ae:6d:38:26:64:31:6c:f9:64:92:e4:e5:6b:1d:43:38:
26:e7:0f:ee:26:83:7f:e4:92:1c:0f:2c:87:08:74:b1:ab:7d:
bb:76:c2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:32:51 2026 by rpki-client