Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
File: UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json)
Hash identifier: sQxCcXR7x94WK8WYR5OgfWM3T50IGqM6QKIZ+AYuWqQ=
Subject key identifier: B4:0A:8E:6C:EE:54:89:94:AF:DC:99:46:A2:23:D4:DB:32:3A:2C:EB
Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
Certificate issuer: /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Certificate serial: 019D33AD49134ADFD4CE53ABF904ED47192A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
Manifest number: 185F
Signing time: Sat 28 Mar 2026 09:01:27 +0000
Manifest this update: Sat 28 Mar 2026 09:01:27 +0000
Manifest next update: Sun 29 Mar 2026 09:01:27 +0000
Files and hashes: 1: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: UZoEvp7OdxTSAp905ZM7BbXfD6EUk94s7uavojoj5oM=)
2: ZsE_mt7ku7Fr5hPoQLALle6qg7o.roa (hash: HUKBNWBBwbvfcuNQzCGO+9wjMStLGidRG99eNbwf4fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ad:49:13:4a:df:d4:ce:53:ab:f9:04:ed:47:19:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Validity
Not Before: Mar 28 09:01:27 2026 GMT
Not After : Mar 29 09:01:27 2026 GMT
Subject: CN=b40a8e6cee548994afdc9946a223d4db323a2ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:cc:29:7c:7c:ce:ed:ee:e8:6d:e9:86:77:
7d:ed:66:09:a3:4c:12:7c:82:5d:46:08:c8:81:5a:
74:89:38:47:19:ec:59:ff:9b:dd:fc:12:44:26:1a:
9a:b7:fa:f7:56:69:a6:5d:19:b6:32:d8:90:30:87:
9f:f7:dd:45:79:1b:f4:d2:42:7a:17:5a:b5:2d:88:
44:b7:4e:fe:bf:95:53:20:c6:84:e4:51:83:1f:ac:
39:18:81:66:7c:c6:95:fb:55:dd:e0:bf:75:75:fd:
fa:f9:71:c6:bc:13:4f:b2:51:a8:d4:31:1a:18:12:
a5:8f:41:5a:0b:bd:c4:97:b6:28:fb:12:5d:63:3a:
8f:a3:50:f1:f8:82:41:48:44:7c:c3:24:68:0f:b9:
e5:ff:b0:21:e4:8d:15:48:9b:46:66:b1:e0:20:06:
43:ec:bc:8a:f0:6e:26:67:47:ed:f9:2b:ae:93:2d:
08:a8:1d:cb:c5:ae:ba:48:00:c2:ce:25:86:61:d1:
26:8c:05:7a:dd:9b:9c:05:68:ed:b0:16:1c:94:31:
ec:fb:e3:0c:99:0d:c6:5b:bf:1a:76:11:cc:32:04:
9c:86:e6:42:9a:16:a9:1a:22:ba:1a:8f:c6:88:54:
4e:cc:de:9b:b0:aa:7f:a4:cf:2c:cf:6e:0b:e6:da:
b0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0A:8E:6C:EE:54:89:94:AF:DC:99:46:A2:23:D4:DB:32:3A:2C:EB
X509v3 Authority Key Identifier:
keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:87:86:e5:5e:7f:a9:68:02:b4:52:41:c7:41:3e:1a:b2:7f:
7c:70:a7:bc:bc:ba:85:61:a9:43:17:b7:3a:b1:29:45:e6:28:
36:64:7c:2d:37:43:52:f2:a5:57:32:56:13:88:a4:4f:d1:5a:
ba:fa:37:0e:e5:f8:50:79:b0:56:70:9d:a7:10:c1:f3:a6:3f:
61:1e:80:f4:95:60:ee:4c:76:0c:ab:2e:4f:74:22:16:88:4a:
43:c8:77:c0:8f:cd:22:9e:2d:03:9c:32:48:8a:8c:3b:4f:c8:
96:ad:52:7e:23:90:47:4d:80:46:67:36:02:23:32:20:2f:d2:
e0:e2:18:aa:c1:fe:0c:94:8c:58:72:0a:96:a9:e9:e0:b5:cc:
5a:39:99:30:0c:e1:9f:38:1d:6c:89:6d:04:59:0f:c7:07:80:
9e:e7:8f:42:66:9c:46:4d:bd:9f:58:f1:d0:db:ad:c1:8a:29:
69:b4:f4:c3:94:71:08:ef:cd:21:0a:6b:7d:33:6b:f7:54:63:
13:48:7f:ce:13:6d:48:af:45:5b:c8:7a:d4:e6:f1:12:60:37:
8e:ce:d1:19:03:33:72:4a:56:62:cc:be:94:8e:8b:05:7b:57:
a3:54:38:a2:13:66:cc:e3:ca:b4:94:7b:08:f9:d8:c1:a1:08:
e3:bd:47:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zrUkTSt/UzlOr+QTtRxkqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzkwYjEzYzllZjRhZmNmZDA4MTI0MTExZTZmNjNkYzMw
MTY1YWEwHhcNMjYwMzI4MDkwMTI3WhcNMjYwMzI5MDkwMTI3WjAzMTEwLwYDVQQD
EyhiNDBhOGU2Y2VlNTQ4OTk0YWZkYzk5NDZhMjIzZDRkYjMyM2EyY2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4fMKXx8zu3u6G3phnd97WYJo0wS
fIJdRgjIgVp0iThHGexZ/5vd/BJEJhqat/r3VmmmXRm2MtiQMIef991FeRv00kJ6
F1q1LYhEt07+v5VTIMaE5FGDH6w5GIFmfMaV+1Xd4L91df36+XHGvBNPslGo1DEa
GBKlj0FaC73El7Yo+xJdYzqPo1Dx+IJBSER8wyRoD7nl/7Ah5I0VSJtGZrHgIAZD
7LyK8G4mZ0ft+Suuky0IqB3Lxa66SADCziWGYdEmjAV63ZucBWjtsBYclDHs++MM
mQ3GW78adhHMMgSchuZCmhapGiK6Go/GiFROzN6bsKp/pM8sz24L5tqwPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQKjmzuVImUr9yZRqIj1NsyOizrMB8GA1UdIwQY
MBaAFFM5CxPJ70r8/QgSQRHm9j3DAWWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84OWM0YWItOTg0Yi00ZjZjLWJkZDAt
MzNkN2FjMzcwOTc5LzEvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84OWM0YWItOTg0Yi00ZjZjLWJkZDAtMzNkN2FjMzcwOTc5
LzEvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYoeG5V5/
qWgCtFJBx0E+GrJ/fHCnvLy6hWGpQxe3OrEpReYoNmR8LTdDUvKlVzJWE4ikT9Fa
uvo3DuX4UHmwVnCdpxDB86Y/YR6A9JVg7kx2DKsuT3QiFohKQ8h3wI/NIp4tA5wy
SIqMO0/Ilq1SfiOQR02ARmc2AiMyIC/S4OIYqsH+DJSMWHIKlqnp4LXMWjmZMAzh
nzgdbIltBFkPxweAnuePQmacRk29n1jx0NutwYopabT0w5RxCO/NIQprfTNr91Rj
E0h/zhNtSK9FW8h61ObxEmA3js7RGQMzckpWYsy+lI6LBXtXo1Q4ohNmzOPKtJR7
CPnYwaEI471Hyw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:13:15 2026 by rpki-client