Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
File: UzXKxwoZioXzJL_toPNe15kcKus.mft (raw, json)
Hash identifier: fqFBoNzXGBJZwl0azSsyEJfV6TdXneMmpsXWImwLKaI=
Subject key identifier: 3A:CE:14:9B:A2:62:90:FA:CD:E4:AF:1F:E6:64:3C:13:29:13:EE:7C
Authority key identifier: 53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
Certificate issuer: /CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Certificate serial: 01A18D1CFC6474B33DBF79AEBC91850BE5B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
Manifest number: 061D
Signing time: Fri 30 Oct 2026 14:00:49 +0000
Manifest this update: Fri 30 Oct 2026 14:00:49 +0000
Manifest next update: Sat 31 Oct 2026 14:00:49 +0000
Files and hashes: 1: UzXKxwoZioXzJL_toPNe15kcKus.crl (hash: XFqyzny6nCVBT3KsaU1rnClcqDsDkUhWx4hKt1MJubE=)
2: u2I4q7xBL8mYLta1M7INCxZpXAY.roa (hash: 3ZlXswl10jzu9dupP4EFIogY6nOqpccwvTneFAi7+uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:1c:fc:64:74:b3:3d:bf:79:ae:bc:91:85:0b:e5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Validity
Not Before: Oct 30 14:00:49 2026 GMT
Not After : Oct 31 14:00:49 2026 GMT
Subject: CN=3ace149ba26290facde4af1fe6643c132913ee7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:51:b1:53:ab:c0:bb:4c:f8:5b:46:a7:76:
e5:ec:43:c4:e7:e0:f8:10:09:3b:60:a9:82:b9:b0:
76:d5:40:cf:da:e6:1a:04:ab:ef:fd:c0:51:b4:03:
c2:eb:cf:82:e3:93:80:d9:1c:5d:18:e1:d2:58:8c:
2b:55:0b:6f:62:f2:c7:93:1a:62:b8:b7:87:97:e1:
8e:82:fd:4c:25:a2:2e:f4:f9:93:1a:e5:78:55:fe:
c5:97:b6:77:10:1a:bd:ed:a2:28:ec:0d:35:83:1b:
7e:c1:80:ef:44:e7:b9:43:85:87:44:fb:48:26:36:
9c:12:88:39:59:c6:20:3c:71:1e:4f:56:db:ab:f9:
9c:8a:11:2b:cd:c0:7b:12:4a:1c:fc:f6:50:12:07:
3e:0a:2d:4a:1a:dc:a9:62:8d:c2:7a:12:24:07:29:
d5:42:eb:f8:21:e7:2a:69:fc:95:7f:d2:3a:95:9e:
d8:84:8e:4f:65:7b:d4:b8:41:3c:83:6c:19:8e:61:
71:c8:9f:ac:79:06:b2:86:36:ad:18:5a:45:4c:19:
29:ec:6d:05:4e:45:cc:01:51:10:b1:38:99:21:3e:
b6:d0:ad:e6:2f:ff:9e:88:b5:df:cc:a8:60:fa:33:
51:68:06:c7:58:e2:04:70:c3:a5:d6:db:de:eb:ea:
c3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CE:14:9B:A2:62:90:FA:CD:E4:AF:1F:E6:64:3C:13:29:13:EE:7C
X509v3 Authority Key Identifier:
keyid:53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9f:6f:85:18:e7:73:d1:6e:24:2e:54:48:14:98:3c:72:10:
83:39:ed:91:a1:1f:69:b8:f2:81:03:09:75:0d:d2:b2:59:1c:
1a:1f:52:29:7b:ee:ff:d0:83:7d:69:8e:a4:80:ed:00:c4:27:
6b:dc:67:72:92:39:ee:05:8b:d0:3d:44:a4:ca:51:b6:c8:2f:
11:16:a6:2f:d4:7e:d9:0e:c9:aa:84:50:b2:64:99:34:99:2d:
1d:f8:4f:09:5c:2c:8a:4f:b6:cf:81:9d:38:15:de:ea:72:e3:
fd:fa:33:17:85:93:bd:e1:77:77:1e:0c:48:b4:b6:1c:f9:cc:
c2:b1:89:29:cf:29:12:dc:c8:1b:67:f1:09:2e:1e:67:f7:45:
c2:13:ff:20:43:83:25:39:9e:8e:a6:4a:66:29:44:b5:83:4e:
17:d7:07:8b:cf:93:1d:71:56:e9:be:35:0b:bf:60:8d:18:37:
e5:d6:a9:0a:d8:7c:86:03:a3:84:84:6e:2c:03:d3:63:db:c0:
27:2f:8a:24:3d:47:54:63:dc:41:46:75:2d:c9:55:ec:48:11:
c4:77:ea:81:0d:47:23:43:40:71:7f:60:d7:bf:e1:09:fc:79:
d6:2f:4a:12:28:89:02:b4:e0:cd:05:79:23:2c:f7:e9:e9:7d:
27:91:5e:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGNHPxkdLM9v3muvJGFC+W3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzVjYWM3MGExOThhODVmMzI0YmZlZGEwZjM1ZWQ3OTkx
YzJhZWIwHhcNMjYxMDMwMTQwMDQ5WhcNMjYxMDMxMTQwMDQ5WjAzMTEwLwYDVQQD
EygzYWNlMTQ5YmEyNjI5MGZhY2RlNGFmMWZlNjY0M2MxMzI5MTNlZTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU1RsVOrwLtM+FtGp3bl7EPE5+D4
EAk7YKmCubB21UDP2uYaBKvv/cBRtAPC68+C45OA2RxdGOHSWIwrVQtvYvLHkxpi
uLeHl+GOgv1MJaIu9PmTGuV4Vf7Fl7Z3EBq97aIo7A01gxt+wYDvROe5Q4WHRPtI
JjacEog5WcYgPHEeT1bbq/mcihErzcB7Ekoc/PZQEgc+Ci1KGtypYo3CehIkBynV
Quv4IecqafyVf9I6lZ7YhI5PZXvUuEE8g2wZjmFxyJ+seQayhjatGFpFTBkp7G0F
TkXMAVEQsTiZIT620K3mL/+eiLXfzKhg+jNRaAbHWOIEcMOl1tve6+rDfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrOFJuiYpD6zeSvH+ZkPBMpE+58MB8GA1UdIwQY
MBaAFFM1yscKGYqF8yS/7aDzXteZHCrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXpYS3h3b1ppb1h6SkxfdG9QTmUxNWtjS3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MGNmM2UtZDQ2OC00NDNjLWFmYTQt
ZjM0YThmNzJlZWM0LzEvVXpYS3h3b1ppb1h6SkxfdG9QTmUxNWtjS3VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi85MGNmM2UtZDQ2OC00NDNjLWFmYTQtZjM0YThmNzJlZWM0
LzEvVXpYS3h3b1ppb1h6SkxfdG9QTmUxNWtjS3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQp9vhRjn
c9FuJC5USBSYPHIQgzntkaEfabjygQMJdQ3SslkcGh9SKXvu/9CDfWmOpIDtAMQn
a9xncpI57gWL0D1EpMpRtsgvERamL9R+2Q7JqoRQsmSZNJktHfhPCVwsik+2z4Gd
OBXe6nLj/fozF4WTveF3dx4MSLS2HPnMwrGJKc8pEtzIG2fxCS4eZ/dFwhP/IEOD
JTmejqZKZilEtYNOF9cHi8+THXFW6b41C79gjRg35dapCth8hgOjhIRuLAPTY9vA
Jy+KJD1HVGPcQUZ1LclV7EgRxHfqgQ1HI0NAcX9g17/hCfx51i9KEiiJArTgzQV5
Iyz36el9J5Fe6A==
-----END CERTIFICATE-----
Generated at Sat Oct 31 00:21:10 2026 by rpki-client