Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
File: UzXKxwoZioXzJL_toPNe15kcKus.mft (raw, json)
Hash identifier: bdkYAVS12gskNOOyUjqLAJQ60H6EQdGr0geOwiKb9ls=
Subject key identifier: 9D:BB:DF:9C:72:BD:53:EB:4D:73:B0:FA:7B:09:E9:98:D2:94:A6:86
Authority key identifier: 53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
Certificate issuer: /CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Certificate serial: 019D389C1D5E3359C99B22FFB37D082DAC4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
Manifest number: 03DF
Signing time: Sun 29 Mar 2026 08:00:48 +0000
Manifest this update: Sun 29 Mar 2026 08:00:48 +0000
Manifest next update: Mon 30 Mar 2026 08:00:48 +0000
Files and hashes: 1: UzXKxwoZioXzJL_toPNe15kcKus.crl (hash: ATOnXoEJQRFoIYiY/J5BcOXvwVg8oGzJ1Ei73M5vXS0=)
2: u2I4q7xBL8mYLta1M7INCxZpXAY.roa (hash: 3ZlXswl10jzu9dupP4EFIogY6nOqpccwvTneFAi7+uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:1d:5e:33:59:c9:9b:22:ff:b3:7d:08:2d:ac:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Validity
Not Before: Mar 29 08:00:48 2026 GMT
Not After : Mar 30 08:00:48 2026 GMT
Subject: CN=9dbbdf9c72bd53eb4d73b0fa7b09e998d294a686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fc:d9:bb:62:2e:05:4d:4f:e9:7f:51:bb:4d:
8e:00:0e:60:08:de:9f:3d:85:3b:0f:8d:a9:cd:91:
f8:33:cf:3c:29:c5:2b:53:5f:0c:9b:cb:db:9c:f6:
90:98:f3:ba:8d:c8:03:69:5b:d8:68:fa:fa:85:2d:
4a:11:cf:11:0a:67:a5:c8:b7:a2:f3:8a:54:ee:63:
0e:f1:c3:07:83:07:ac:37:0d:d5:0e:5b:be:6f:28:
cf:84:87:ee:42:b9:69:ea:2e:36:ec:db:2a:d2:02:
8e:64:78:bc:f3:65:31:3f:9a:bc:bb:7a:01:29:63:
89:f9:09:c4:91:4b:c9:d9:c7:8f:64:68:7d:b8:16:
a8:5f:4e:f0:a9:db:eb:d2:ff:a9:49:0c:3f:23:a2:
e5:de:e3:a7:d3:d5:6f:1c:30:1e:13:b3:01:ec:4a:
cf:dc:e6:21:8d:9e:dd:83:8d:93:f8:74:54:95:7d:
b7:17:69:19:02:46:6f:2e:3b:b0:51:55:2a:3a:6f:
40:ea:33:62:22:92:ad:cc:3c:a1:9f:3b:fc:5b:bd:
6f:22:98:d9:d6:b4:6b:6a:b4:40:f8:71:45:98:63:
a6:67:f5:5b:95:25:76:3d:88:71:b6:cb:af:b7:59:
48:74:fb:e5:e4:93:39:4e:02:b6:a4:41:16:a2:1e:
ca:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BB:DF:9C:72:BD:53:EB:4D:73:B0:FA:7B:09:E9:98:D2:94:A6:86
X509v3 Authority Key Identifier:
keyid:53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a4:a0:68:23:7f:e4:3b:45:84:43:56:3b:fc:40:9b:25:d5:
d1:1a:0c:79:32:fc:47:0e:7a:9b:bd:89:97:c1:8b:0e:8f:b1:
da:e5:7c:43:3a:ee:f6:90:15:41:65:e0:f3:39:b8:34:45:e3:
66:b9:72:64:1c:36:2a:a0:9b:bc:89:a4:eb:4b:89:bc:85:c4:
24:e3:b1:a9:f3:e0:4e:f2:03:f7:50:ce:81:ca:0d:b0:86:ac:
3c:1a:9b:ad:22:a4:31:9f:2d:54:ae:92:c4:d2:ba:1d:59:c8:
39:f9:de:b9:ad:3b:f5:f3:69:0f:b8:78:7f:9c:87:60:bb:56:
22:23:29:5b:bc:ac:98:82:e3:7e:36:7c:6d:e3:d8:86:dc:15:
bb:11:55:4b:86:1c:e3:cb:d3:ab:48:26:c9:ff:d2:74:f7:6f:
33:24:bb:cc:3c:a0:2a:46:ea:9d:d7:04:6e:e0:bc:25:24:22:
83:7b:78:6c:b5:fa:ea:a3:a9:a9:8f:3e:10:09:39:ee:08:72:
fd:e8:a3:a9:e9:81:15:47:68:81:81:85:83:ef:c2:d5:28:c2:
54:e1:b2:40:e3:1e:2d:8e:54:31:bf:10:45:26:e2:45:b4:42:
8d:d4:b4:9c:f2:e7:4f:dc:cc:85:e1:71:e9:9b:c7:ce:14:9f:
fe:fb:ed:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:45 2026 by rpki-client