Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
File: UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json)
Hash identifier: 8XjExeKXo9Qc91kwRPTFiDMACf1pxY7akiJ4vnTKBI0=
Subject key identifier: F9:D1:D4:01:CB:D1:30:B0:A9:99:49:34:3A:81:FE:F0:2C:56:2B:39
Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
Certificate issuer: /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Certificate serial: 019F1A55FB8B783A7163C5991D3728688B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
Manifest number: 195B
Signing time: Tue 30 Jun 2026 21:01:10 +0000
Manifest this update: Tue 30 Jun 2026 21:01:10 +0000
Manifest next update: Wed 01 Jul 2026 21:01:10 +0000
Files and hashes: 1: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: 8ERszrYR3dw6yfYPanVZzscUpJnvRspskynaIZCd2Zo=)
2: ZsE_mt7ku7Fr5hPoQLALle6qg7o.roa (hash: HUKBNWBBwbvfcuNQzCGO+9wjMStLGidRG99eNbwf4fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:55:fb:8b:78:3a:71:63:c5:99:1d:37:28:68:8b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Validity
Not Before: Jun 30 21:01:10 2026 GMT
Not After : Jul 1 21:01:10 2026 GMT
Subject: CN=f9d1d401cbd130b0a99949343a81fef02c562b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f3:74:f7:81:6a:43:31:eb:a8:6d:22:26:f0:
60:30:e2:76:ff:8a:00:32:53:a5:75:5c:0f:5f:b7:
ac:6a:0b:42:78:b0:b3:59:2b:e0:50:c1:4e:e9:f0:
ff:98:9f:18:0b:9b:12:29:b1:09:cc:09:bf:5d:a6:
ee:31:6d:54:73:bd:88:6f:86:46:bb:98:02:fd:d7:
62:17:e1:ea:d4:df:8a:0d:9d:de:62:ff:9b:4a:8e:
3b:c8:0c:c3:89:28:45:30:ce:2a:30:fa:55:51:e4:
54:03:ba:dd:8d:5c:e9:de:24:90:99:c1:0e:be:38:
1d:b5:1f:78:f4:0c:cd:5f:de:06:1f:fd:c1:b7:15:
91:b5:1e:84:76:3e:a9:c5:ac:c3:38:fb:c8:a4:2a:
10:5b:0a:92:56:9c:34:32:11:78:d3:f8:b5:0f:6a:
1c:85:89:0a:c8:5b:fc:9a:03:1a:0e:73:91:54:70:
91:af:0d:92:2b:37:98:c6:5b:61:c1:ba:98:59:d3:
f8:a4:fc:07:91:03:37:0a:9a:fc:7c:44:7f:50:2e:
f1:0a:48:b3:e1:e0:79:29:9e:9e:56:a6:2f:dc:f5:
bf:56:05:8d:54:14:63:e6:ca:49:c1:35:4c:54:6d:
ca:66:2b:59:bb:42:a2:82:dd:20:e3:55:01:47:d6:
8b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D1:D4:01:CB:D1:30:B0:A9:99:49:34:3A:81:FE:F0:2C:56:2B:39
X509v3 Authority Key Identifier:
keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:da:89:0d:83:5b:8b:65:15:35:d4:59:df:64:55:f6:fd:25:
77:c4:56:4f:6c:5a:43:9a:3d:f2:b6:2d:ca:1e:d2:11:8d:a8:
57:39:d4:b9:96:f9:42:8c:d8:9b:15:1b:e7:11:6f:b7:61:3c:
4e:24:b3:fe:b1:0b:de:32:3b:df:2d:c1:51:e1:77:13:00:62:
55:52:96:96:de:e1:36:50:d6:1c:39:79:99:72:e9:bc:b9:71:
2a:4f:b1:d8:23:e4:13:ac:a6:d4:87:b2:65:a6:db:34:f5:cd:
86:ee:e3:98:84:65:11:0e:64:f3:6c:95:9f:a6:0f:ca:d9:36:
40:3a:71:de:a7:f0:30:46:e1:4b:5f:34:76:a1:ad:a1:d8:d8:
38:b6:0f:c4:aa:c9:19:69:ed:18:d7:55:41:fd:b7:83:e2:ef:
36:a5:a9:bb:0e:25:b4:f2:52:cc:a0:3f:20:29:8b:78:6a:38:
17:a3:d0:a6:18:10:24:82:0d:55:90:62:b8:41:59:f4:78:f1:
ea:1c:75:15:d2:a2:a2:ce:56:65:e1:e4:46:d4:7a:c8:d1:b0:
7f:ab:d1:c1:b3:2d:f3:11:9b:7c:d8:8d:ed:58:4e:f6:f3:57:
dc:eb:d8:ce:94:ce:9c:cb:fa:cf:b0:e3:e2:91:9d:45:83:48:
04:15:1a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:13 2026 by rpki-client