Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File: UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier: sXvwW+NARLJwzVxcT27gZCw3OquwPDEYY+4PzByA6RM=
Subject key identifier: 5B:46:D7:7E:BF:71:31:A1:D5:D7:54:25:92:47:AC:39:B5:72:F6:10
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 019E995FDF252F33D773330C09F9CD2F9C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number: 0DF0
Signing time: Fri 05 Jun 2026 20:00:57 +0000
Manifest this update: Fri 05 Jun 2026 20:00:57 +0000
Manifest next update: Sat 06 Jun 2026 20:00:57 +0000
Files and hashes: 1: 1-rvXWbfutRyQsFLB2O2HcSydvn8.roa (hash: G/bEqZr33OdbdPx/abXyN5kc0kY5EzztDY6k+nCMKOc=)
2: 3-EeXmcZRUpj5DL_Om7bylZsefk.roa (hash: kfreAir/SgzDeq1U4ZKMC+PhHkagl1wiR7E5yuELkYE=)
3: FW4uCaBEevcQCVC9KduuJAdmVkk.roa (hash: hi3CRENNqBM7ERn9MrenvqFZvgbgfilYx3/QP3Xqq4k=)
4: KQmQrJ1jEiHHjz1S_0Yk4OXG9xA.roa (hash: tpY9R1aFnUdMqsnHp8rSZAPwxdzHPsIGg6V1ZMmMnOQ=)
5: LLtX3Bw8gzc5rIoJ6gGIoEGZhvk.roa (hash: 8ZMUJCkeXZDA3JqlPtb/Z7fXVQiFb14roMzYlX1mZ98=)
6: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: q+XbL2ffd8pnd1AWob+F/UzH0DRYcScOotEDLaxnQmY=)
7: nQE3bGEbjM6OpBVVSm2YC_6oWgI.roa (hash: Ho+aVhsVcSM72ZGhR58VKNtxF0cVDscps+IEINsdQjg=)
8: zmXY1OTT6NQXEmsjJD2BX4c7b7c.roa (hash: 26+rkNPDulDua9fC+YQZGyXCc/EBwd+QOh+NkG5ORq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:99:5f:df:25:2f:33:d7:73:33:0c:09:f9:cd:2f:9c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Jun 5 20:00:57 2026 GMT
Not After : Jun 6 20:00:57 2026 GMT
Subject: CN=5b46d77ebf7131a1d5d754259247ac39b572f610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:44:4e:2a:e0:ee:6f:42:00:00:bd:79:47:
67:04:0f:56:84:5f:c9:68:13:04:9d:c7:1f:e5:6d:
94:7d:e6:6f:de:30:64:58:35:d4:79:95:60:71:78:
92:a7:22:6f:f0:f0:05:25:d2:1a:fe:c3:b4:68:2d:
c7:dd:e0:fa:92:59:28:2b:8c:2f:72:97:33:98:87:
11:6c:4d:3a:38:66:a6:45:f3:65:a1:f5:60:26:9f:
84:0e:93:d0:22:de:85:c9:b7:e3:ee:83:cc:62:11:
f4:d2:cc:57:29:c2:b0:ef:cd:66:9b:57:9b:dc:8d:
1d:0b:18:35:1c:18:42:cb:44:90:71:ca:fd:5e:d6:
f8:66:53:da:67:06:9f:9d:49:2a:e8:ef:d4:d3:4d:
4a:71:47:ef:4f:15:68:c1:bd:cc:19:13:82:6d:7a:
35:b8:4a:82:14:be:7a:99:32:8d:d9:ae:3b:a1:21:
7c:27:c6:60:8c:07:05:5e:0d:39:b6:45:5f:eb:f0:
1b:77:81:d8:77:82:6c:7a:38:68:f2:c0:2c:37:50:
64:20:22:f6:ac:ca:e7:38:5f:0f:b8:51:f0:70:d8:
2b:f4:43:fc:96:f3:5b:71:6d:b6:13:45:ec:9d:6b:
09:5b:72:70:92:da:4c:e6:45:0b:d0:8c:46:90:74:
7d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:46:D7:7E:BF:71:31:A1:D5:D7:54:25:92:47:AC:39:B5:72:F6:10
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:8c:f7:8d:97:eb:10:18:32:b0:c0:fb:01:30:b4:4c:5a:9f:
1c:81:0e:eb:f5:65:93:b5:f6:6b:89:a6:34:1a:79:d3:bc:8c:
27:c6:3e:fe:c4:15:79:1a:f9:c5:28:47:4b:c2:b7:8d:cc:13:
92:8f:dc:9b:8a:f2:37:e3:1e:e1:bf:57:3d:76:74:b5:b8:0a:
4b:e9:76:b6:36:f7:ff:a2:2c:e6:be:c8:92:56:6f:3e:94:39:
2a:b4:3f:3b:de:ac:7e:49:5c:0f:c3:68:68:45:23:53:47:2c:
70:7b:e0:13:4d:5d:2c:7d:b2:0a:b6:02:a5:ca:4d:75:44:d5:
39:a5:8a:76:c0:db:7f:4b:27:29:de:b5:62:8a:fb:ee:68:28:
27:7d:a4:15:c8:05:2f:b3:d3:06:df:da:cc:89:4e:0e:91:6a:
5f:48:90:59:a6:42:d9:74:44:6a:ae:05:aa:23:47:94:49:ad:
3d:b9:9a:b9:68:f3:f7:09:5a:8c:f5:cc:70:7e:e0:9e:f0:1f:
39:27:1d:7c:7c:87:88:e4:aa:91:1d:5d:29:9d:94:a1:b3:27:
c8:62:2d:11:4b:c0:56:72:01:b8:82:4d:5f:29:bf:95:7e:4c:
2c:30:8a:c1:72:63:98:a0:d6:ba:6c:92:72:54:1e:f5:63:38:
f2:8b:53:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:04:32 2026 by rpki-client