Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
File: UzXKxwoZioXzJL_toPNe15kcKus.mft (raw, json)
Hash identifier: Pjw0naG8co2SLSJExUbIRF2OZ43I5PMsgt2HKIQR3xw=
Subject key identifier: B1:9A:CA:B9:8F:52:AE:CF:C8:B6:D2:F3:04:15:4A:B6:7B:01:BA:07
Authority key identifier: 53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
Certificate issuer: /CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Certificate serial: 019FA296CE65FFED2966B064C069B3FC010E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
Manifest number: 051F
Signing time: Mon 27 Jul 2026 08:00:19 +0000
Manifest this update: Mon 27 Jul 2026 08:00:19 +0000
Manifest next update: Tue 28 Jul 2026 08:00:19 +0000
Files and hashes: 1: UzXKxwoZioXzJL_toPNe15kcKus.crl (hash: Xva+imOMfehh5EnTznntYN2Wdyx5QI1fP8zSLFC5kgA=)
2: u2I4q7xBL8mYLta1M7INCxZpXAY.roa (hash: 3ZlXswl10jzu9dupP4EFIogY6nOqpccwvTneFAi7+uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:96:ce:65:ff:ed:29:66:b0:64:c0:69:b3:fc:01:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Validity
Not Before: Jul 27 08:00:19 2026 GMT
Not After : Jul 28 08:00:19 2026 GMT
Subject: CN=b19acab98f52aecfc8b6d2f304154ab67b01ba07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4a:98:25:94:f4:be:ee:1c:ba:64:bb:36:02:
21:15:f7:9e:ad:20:85:27:20:70:fd:18:5f:52:16:
ba:0b:df:60:62:c2:49:94:30:c6:d7:fb:0c:f9:ae:
07:0e:6a:71:3b:17:2a:a0:a5:ef:5e:80:e5:ba:fa:
a3:ee:c0:a2:4b:1c:25:55:63:25:be:a2:a5:c8:2b:
aa:3f:02:1d:ea:3c:f8:36:98:68:30:85:b3:57:56:
8e:4d:01:43:b5:83:50:d4:14:4e:75:34:32:82:61:
40:31:22:aa:83:b9:05:b9:f3:68:ad:af:2c:7b:74:
7c:ec:20:e1:82:2b:08:45:22:17:af:3f:99:70:63:
aa:c6:b0:d7:c0:2a:a2:b1:fd:14:12:c0:62:cb:ad:
39:e6:c8:84:27:05:d8:bc:4f:30:7b:12:06:e8:56:
df:96:69:f7:db:c0:b0:ff:ef:96:dc:3d:5a:20:f9:
1f:06:6d:34:89:f7:3e:e6:c5:9b:c7:76:7d:34:0a:
5d:27:94:94:40:ab:73:fb:90:08:52:11:28:88:bf:
da:bf:3e:73:29:9a:7e:c6:b8:9d:e8:29:a8:83:5b:
8f:e2:09:fe:e2:6d:93:27:52:a3:a5:ab:38:ec:ae:
c5:b3:bc:c1:da:84:49:3d:73:22:d2:fe:b1:99:bb:
94:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9A:CA:B9:8F:52:AE:CF:C8:B6:D2:F3:04:15:4A:B6:7B:01:BA:07
X509v3 Authority Key Identifier:
keyid:53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f8:aa:0f:14:fb:d5:56:71:e1:88:1a:48:28:29:9e:44:ae:
23:b5:1f:54:0a:85:92:7b:0f:29:2d:61:4a:ce:af:09:d5:8b:
cc:c2:13:de:cd:91:91:c7:af:64:68:bc:16:2b:32:4e:c7:ce:
94:e6:9b:72:de:67:6c:3e:4f:f7:b2:43:63:3f:8b:e8:47:c5:
c2:be:b1:d1:c4:89:19:9b:41:43:10:dc:ac:36:e3:ea:26:ec:
4d:0a:bb:f8:6f:cb:8d:0e:5a:55:0a:b4:a5:0a:b0:0f:71:1f:
71:67:88:9f:4b:f0:67:ba:27:17:82:91:d2:f3:56:28:de:25:
60:86:a7:28:93:9f:05:74:5c:59:e6:42:35:db:d9:95:12:23:
89:4c:fe:d4:aa:6d:8e:a9:d3:15:71:4d:6a:be:35:a0:b9:6b:
9b:d2:5b:1b:f6:27:2f:85:b9:14:f4:91:c7:07:e4:9f:1c:a6:
ff:db:ce:8d:a0:3d:63:45:0a:af:7b:f7:65:d9:4f:d9:6c:e1:
15:f2:9d:d0:0c:8d:8a:e8:9c:5e:aa:0b:4d:4c:a8:90:be:d4:
35:0a:ed:88:e3:03:5a:d4:a5:21:27:94:4d:71:5c:4e:b0:ff:
82:cf:3d:33:8c:1a:2c:a7:1e:f6:9b:eb:c8:34:8f:95:d6:22:
e7:77:47:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:01:31 2026 by rpki-client