Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.mft
File: UWyzDNsJEok_oG5StXA266007_g.mft (raw, json)
Hash identifier: 7IgMtJ9Ap98Fzrz3twT8SNvVwKPWUF1DTXDuW4chSz0=
Subject key identifier: F9:5C:30:7C:53:5A:B1:B7:49:96:23:7F:6C:CF:9C:A5:91:B6:85:F7
Authority key identifier: 51:6C:B3:0C:DB:09:12:89:3F:A0:6E:52:B5:70:36:EB:AD:34:EF:F8
Certificate issuer: /CN=516cb30cdb0912893fa06e52b57036ebad34eff8
Certificate serial: 019F9FCD8670F4F7761FA77B269F5831D8B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWyzDNsJEok_oG5StXA266007_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.mft
Manifest number: D8
Signing time: Sun 26 Jul 2026 19:01:14 +0000
Manifest this update: Sun 26 Jul 2026 19:01:14 +0000
Manifest next update: Mon 27 Jul 2026 19:01:14 +0000
Files and hashes: 1: UWyzDNsJEok_oG5StXA266007_g.crl (hash: kyKQapZtzX19k4W3ViZUBaDLBUUojpnDc4cBY+I8O1Q=)
2: dHTSZG8TdSuv5jgCShEUGqyvGiw.roa (hash: +ZC5a7s6sH7l7SttQEXeVRNgey70bU4V9g0KHoqIO/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/UWyzDNsJEok_oG5StXA266007_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cd:86:70:f4:f7:76:1f:a7:7b:26:9f:58:31:d8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=516cb30cdb0912893fa06e52b57036ebad34eff8
Validity
Not Before: Jul 26 19:01:14 2026 GMT
Not After : Jul 27 19:01:14 2026 GMT
Subject: CN=f95c307c535ab1b74996237f6ccf9ca591b685f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:67:1b:f0:c9:7a:ce:06:d9:cf:06:3b:bc:7c:
d9:84:21:4e:41:d7:3d:76:6f:a0:74:1f:bb:3c:ca:
92:a9:c6:1e:bc:fe:86:ed:b8:b3:12:6e:d6:8c:55:
c1:39:3a:43:de:23:9d:5c:a9:a8:64:d5:e6:f8:9e:
4c:2c:f7:09:3e:93:e8:7d:cd:43:93:57:cf:5e:85:
1b:d3:3f:b8:10:55:03:33:bc:45:55:86:7a:d0:3a:
a6:1b:dd:51:fa:8f:9e:78:6c:9b:50:e6:ce:89:29:
b5:f7:a7:37:d0:90:7c:de:79:9a:d5:80:87:9d:56:
b6:50:0f:52:63:f7:41:9d:e5:2e:0d:30:70:0a:99:
16:e9:3e:0a:c4:14:8b:c5:e4:7a:5e:32:4a:63:8e:
e0:78:dc:4b:67:00:d0:dd:cf:cf:3c:52:20:c0:86:
82:16:6b:90:13:df:3f:0f:cb:aa:7c:11:5e:58:f4:
f9:f4:27:c4:47:0f:59:65:19:52:eb:2f:63:d4:2f:
67:0c:98:cb:db:fe:db:20:95:ba:2a:74:60:2f:78:
7a:bf:79:09:cd:fc:4c:02:79:1f:ca:be:3d:bb:9f:
56:17:64:9b:19:a0:08:fc:a6:21:6e:69:38:f1:0d:
52:d8:02:1c:1f:e8:be:4a:f4:34:fc:46:ef:26:7b:
39:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5C:30:7C:53:5A:B1:B7:49:96:23:7F:6C:CF:9C:A5:91:B6:85:F7
X509v3 Authority Key Identifier:
keyid:51:6C:B3:0C:DB:09:12:89:3F:A0:6E:52:B5:70:36:EB:AD:34:EF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWyzDNsJEok_oG5StXA266007_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c5:2a:7b:37:bb:0b:0d:e4:ff:29:c9:52:48:9a:53:89:e3:
14:e1:0b:34:17:80:20:25:48:86:39:3a:41:65:4c:a3:a4:8e:
be:da:8b:51:5c:55:1e:5b:d1:0b:21:ef:d1:fa:90:3d:f9:cb:
e9:2c:eb:9d:30:a5:c5:f9:9e:17:62:49:17:fd:e3:cb:6e:ae:
0e:07:a1:7c:d8:51:91:ba:15:13:27:9a:5d:b2:27:cb:97:4f:
e0:c6:cb:1d:73:b5:64:5e:46:b1:79:80:2a:6f:18:3f:88:a1:
4f:ed:7a:e0:e2:20:29:45:08:da:4d:df:56:0c:36:b0:28:dd:
78:d4:de:2b:9d:84:75:d4:49:ae:83:bb:9c:46:88:03:90:29:
f0:39:3a:01:e3:29:23:b2:5c:e8:6b:ae:28:f3:c9:02:53:2f:
08:ce:ef:15:92:04:a2:27:cb:5b:bb:29:e4:7e:08:90:38:99:
48:88:18:be:b5:f0:0a:81:f3:d5:9c:58:ac:6c:63:16:be:3d:
64:42:63:df:33:63:df:6e:b8:b0:da:a9:05:59:1a:e2:d3:68:
8d:c7:3b:d2:4e:98:0a:30:16:f6:8e:81:58:05:ce:8d:3c:7f:
9d:ef:cc:e9:40:54:d2:b8:09:62:1d:9c:e0:66:ff:5c:ab:24:
49:ec:83:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+fzYZw9Pd2H6d7Jp9YMdiyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNmNiMzBjZGIwOTEyODkzZmEwNmU1MmI1NzAzNmViYWQz
NGVmZjgwHhcNMjYwNzI2MTkwMTE0WhcNMjYwNzI3MTkwMTE0WjAzMTEwLwYDVQQD
EyhmOTVjMzA3YzUzNWFiMWI3NDk5NjIzN2Y2Y2NmOWNhNTkxYjY4NWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWcb8Ml6zgbZzwY7vHzZhCFOQdc9
dm+gdB+7PMqSqcYevP6G7bizEm7WjFXBOTpD3iOdXKmoZNXm+J5MLPcJPpPofc1D
k1fPXoUb0z+4EFUDM7xFVYZ60DqmG91R+o+eeGybUObOiSm196c30JB83nma1YCH
nVa2UA9SY/dBneUuDTBwCpkW6T4KxBSLxeR6XjJKY47geNxLZwDQ3c/PPFIgwIaC
FmuQE98/D8uqfBFeWPT59CfERw9ZZRlS6y9j1C9nDJjL2/7bIJW6KnRgL3h6v3kJ
zfxMAnkfyr49u59WF2SbGaAI/KYhbmk48Q1S2AIcH+i+SvQ0/EbvJns5vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlcMHxTWrG3SZYjf2zPnKWRtoX3MB8GA1UdIwQY
MBaAFFFsswzbCRKJP6BuUrVwNuutNO/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVd5ekROc0pFb2tfb0c1U3RYQTI2NjAwN19nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8wZTBmNjItYzQ5YS00ZmZlLWJjNzAt
MTJjNjE3YjBmNjc0LzEvVVd5ekROc0pFb2tfb0c1U3RYQTI2NjAwN19nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8wZTBmNjItYzQ5YS00ZmZlLWJjNzAtMTJjNjE3YjBmNjc0
LzEvVVd5ekROc0pFb2tfb0c1U3RYQTI2NjAwN19nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcUqeze7
Cw3k/ynJUkiaU4njFOELNBeAICVIhjk6QWVMo6SOvtqLUVxVHlvRCyHv0fqQPfnL
6SzrnTClxfmeF2JJF/3jy26uDgehfNhRkboVEyeaXbIny5dP4MbLHXO1ZF5GsXmA
Km8YP4ihT+164OIgKUUI2k3fVgw2sCjdeNTeK52EddRJroO7nEaIA5Ap8Dk6AeMp
I7Jc6GuuKPPJAlMvCM7vFZIEoifLW7sp5H4IkDiZSIgYvrXwCoHz1ZxYrGxjFr49
ZEJj3zNj3264sNqpBVka4tNojcc70k6YCjAW9o6BWAXOjTx/ne/M6UBU0rgJYh2c
4Gb/XKskSeyD+w==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:50:54 2026 by rpki-client