Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.mft
File: UWyzDNsJEok_oG5StXA266007_g.mft (raw, json)
Hash identifier: VpkrGozX1GGWaDw3exIN7bSz5pxttJm6vr9sfa7VSOI=
Subject key identifier: 98:8B:C3:D8:9A:C1:4B:FB:F8:74:55:45:41:80:3B:B5:D6:83:F8:E2
Authority key identifier: 51:6C:B3:0C:DB:09:12:89:3F:A0:6E:52:B5:70:36:EB:AD:34:EF:F8
Certificate issuer: /CN=516cb30cdb0912893fa06e52b57036ebad34eff8
Certificate serial: 01A08B6846E47359915FCBC4387E511D8B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWyzDNsJEok_oG5StXA266007_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.mft
Manifest number: 0152
Signing time: Thu 10 Sep 2026 13:01:01 +0000
Manifest this update: Thu 10 Sep 2026 13:01:01 +0000
Manifest next update: Fri 11 Sep 2026 13:01:01 +0000
Files and hashes: 1: UWyzDNsJEok_oG5StXA266007_g.crl (hash: mES2x5lS6pfEUKbvirBemSOYq25o7yzuy8r+ilicYNw=)
2: dHTSZG8TdSuv5jgCShEUGqyvGiw.roa (hash: +ZC5a7s6sH7l7SttQEXeVRNgey70bU4V9g0KHoqIO/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/UWyzDNsJEok_oG5StXA266007_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:46:e4:73:59:91:5f:cb:c4:38:7e:51:1d:8b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=516cb30cdb0912893fa06e52b57036ebad34eff8
Validity
Not Before: Sep 10 13:01:01 2026 GMT
Not After : Sep 11 13:01:01 2026 GMT
Subject: CN=988bc3d89ac14bfbf874554541803bb5d683f8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8f:bf:2d:5f:0b:7c:3f:a4:17:26:90:ba:b6:
ea:13:37:0c:5a:18:f0:07:df:26:49:ce:c7:1e:64:
3a:18:31:15:ee:5e:b2:8f:b3:7b:c4:48:dc:f7:d3:
f1:ae:6a:06:cb:72:de:b9:ce:0d:6a:02:d3:04:1a:
3e:e3:1d:2f:6e:32:09:88:ef:60:c1:cf:df:fe:9b:
ed:d2:4a:1f:bb:dc:5a:0b:ba:d9:d1:db:f6:58:1f:
57:8f:ff:17:6e:63:ff:b7:52:4f:2e:e3:56:fc:d3:
52:74:48:49:d7:0e:c6:55:df:4b:51:00:d5:a5:ec:
3b:c8:b9:26:3d:1f:45:05:4e:80:b4:e2:2a:0f:b4:
dd:57:1b:ab:e3:6e:a1:6c:b0:82:19:b6:7e:77:9d:
6d:e7:85:09:7b:1f:14:48:1d:99:40:56:75:83:8c:
a7:17:9f:f0:b4:f2:96:14:99:a0:47:ba:7a:d9:ea:
41:9d:5b:dd:7b:92:87:c0:e9:dc:fb:6b:c3:ac:14:
41:79:cd:e7:e2:a1:93:23:6e:a3:b5:fa:e2:a7:5f:
3c:a2:ef:d8:b8:0d:e5:29:64:2d:2b:34:20:88:df:
2f:38:7c:f9:ec:a7:34:9d:fa:e2:76:11:56:23:4e:
36:c2:1d:a4:65:19:88:f5:9a:de:f0:56:8b:8c:61:
c4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8B:C3:D8:9A:C1:4B:FB:F8:74:55:45:41:80:3B:B5:D6:83:F8:E2
X509v3 Authority Key Identifier:
keyid:51:6C:B3:0C:DB:09:12:89:3F:A0:6E:52:B5:70:36:EB:AD:34:EF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWyzDNsJEok_oG5StXA266007_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:12:93:ac:38:5a:aa:24:7d:9b:d4:26:1d:95:2c:30:d2:ad:
93:ba:6d:61:49:8b:ea:54:5e:31:d8:c2:8e:cc:f3:b3:d0:db:
e6:96:9e:ac:9c:6a:ae:b2:70:b9:86:8b:91:71:66:7b:9a:48:
45:05:2b:b6:b5:f8:10:00:fb:f3:b6:6f:38:24:82:73:98:f1:
bc:cd:a8:15:35:1a:0d:de:f0:b7:68:b6:38:62:a7:0e:bd:6c:
dc:0f:55:a3:90:3b:e6:13:4d:f4:d7:cb:92:d2:fb:02:f6:2a:
78:0b:1b:a0:64:c6:9b:92:12:6a:45:2a:01:09:e6:15:50:54:
48:60:c5:3a:2c:b8:f5:0d:41:36:62:43:dc:5a:95:66:58:b5:
84:3e:47:e2:dc:e5:37:a3:7e:d7:a5:61:1c:31:e7:3b:92:8d:
e4:0d:b0:d1:3e:10:27:d2:3c:e9:f6:8f:4d:3e:f2:ff:1c:f7:
c7:b8:08:a2:cf:5d:e7:45:a6:cf:90:a9:d6:f5:4a:6c:eb:14:
6f:a3:4b:2d:d2:b0:0a:26:30:c7:95:a3:b3:54:ea:c8:f1:ed:
83:0d:d9:f1:13:41:2f:c0:c7:5d:43:3c:81:ca:a5:2a:c0:6c:
9d:a6:3b:e7:5e:e2:cf:f8:d2:04:28:07:9a:b9:d9:67:41:e5:
29:b9:e1:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLaEbkc1mRX8vEOH5RHYuUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNmNiMzBjZGIwOTEyODkzZmEwNmU1MmI1NzAzNmViYWQz
NGVmZjgwHhcNMjYwOTEwMTMwMTAxWhcNMjYwOTExMTMwMTAxWjAzMTEwLwYDVQQD
Eyg5ODhiYzNkODlhYzE0YmZiZjg3NDU1NDU0MTgwM2JiNWQ2ODNmOGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY+/LV8LfD+kFyaQurbqEzcMWhjw
B98mSc7HHmQ6GDEV7l6yj7N7xEjc99PxrmoGy3Leuc4NagLTBBo+4x0vbjIJiO9g
wc/f/pvt0kofu9xaC7rZ0dv2WB9Xj/8XbmP/t1JPLuNW/NNSdEhJ1w7GVd9LUQDV
pew7yLkmPR9FBU6AtOIqD7TdVxur426hbLCCGbZ+d51t54UJex8USB2ZQFZ1g4yn
F5/wtPKWFJmgR7p62epBnVvde5KHwOnc+2vDrBRBec3n4qGTI26jtfrip188ou/Y
uA3lKWQtKzQgiN8vOHz57Kc0nfridhFWI042wh2kZRmI9Zre8FaLjGHEXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJiLw9iawUv7+HRVRUGAO7XWg/jiMB8GA1UdIwQY
MBaAFFFsswzbCRKJP6BuUrVwNuutNO/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVd5ekROc0pFb2tfb0c1U3RYQTI2NjAwN19nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8wZTBmNjItYzQ5YS00ZmZlLWJjNzAt
MTJjNjE3YjBmNjc0LzEvVVd5ekROc0pFb2tfb0c1U3RYQTI2NjAwN19nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8wZTBmNjItYzQ5YS00ZmZlLWJjNzAtMTJjNjE3YjBmNjc0
LzEvVVd5ekROc0pFb2tfb0c1U3RYQTI2NjAwN19nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhKTrDha
qiR9m9QmHZUsMNKtk7ptYUmL6lReMdjCjszzs9Db5paerJxqrrJwuYaLkXFme5pI
RQUrtrX4EAD787ZvOCSCc5jxvM2oFTUaDd7wt2i2OGKnDr1s3A9Vo5A75hNN9NfL
ktL7AvYqeAsboGTGm5ISakUqAQnmFVBUSGDFOiy49Q1BNmJD3FqVZli1hD5H4tzl
N6N+16VhHDHnO5KN5A2w0T4QJ9I86faPTT7y/xz3x7gIos9d50Wmz5Cp1vVKbOsU
b6NLLdKwCiYwx5Wjs1TqyPHtgw3Z8RNBL8DHXUM8gcqlKsBsnaY7517iz/jSBCgH
mrnZZ0HlKbnhTA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:04:02 2026 by rpki-client