Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File: UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier: MUvn9KCVIamxoBfLaE4VNyPps7e9uvygrYY8hSJWjbk=
Subject key identifier: E0:10:96:FB:43:B0:E6:98:6D:47:90:F2:A0:86:00:6C:E4:36:BA:D9
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 019CC606F721F1912112465C6BC5CEDE8F11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number: 0CFE
Signing time: Sat 07 Mar 2026 02:01:10 +0000
Manifest this update: Sat 07 Mar 2026 02:01:10 +0000
Manifest next update: Sun 08 Mar 2026 02:01:10 +0000
Files and hashes: 1: 1-rvXWbfutRyQsFLB2O2HcSydvn8.roa (hash: G/bEqZr33OdbdPx/abXyN5kc0kY5EzztDY6k+nCMKOc=)
2: 3-EeXmcZRUpj5DL_Om7bylZsefk.roa (hash: kfreAir/SgzDeq1U4ZKMC+PhHkagl1wiR7E5yuELkYE=)
3: FW4uCaBEevcQCVC9KduuJAdmVkk.roa (hash: hi3CRENNqBM7ERn9MrenvqFZvgbgfilYx3/QP3Xqq4k=)
4: KQmQrJ1jEiHHjz1S_0Yk4OXG9xA.roa (hash: tpY9R1aFnUdMqsnHp8rSZAPwxdzHPsIGg6V1ZMmMnOQ=)
5: LLtX3Bw8gzc5rIoJ6gGIoEGZhvk.roa (hash: 8ZMUJCkeXZDA3JqlPtb/Z7fXVQiFb14roMzYlX1mZ98=)
6: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: f3Ypx+oH7FIvrCR5w0VJrTYS2yrn7H0HVBYma+3tFx0=)
7: nQE3bGEbjM6OpBVVSm2YC_6oWgI.roa (hash: Ho+aVhsVcSM72ZGhR58VKNtxF0cVDscps+IEINsdQjg=)
8: zmXY1OTT6NQXEmsjJD2BX4c7b7c.roa (hash: 26+rkNPDulDua9fC+YQZGyXCc/EBwd+QOh+NkG5ORq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c6:06:f7:21:f1:91:21:12:46:5c:6b:c5:ce:de:8f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Mar 7 02:01:10 2026 GMT
Not After : Mar 8 02:01:10 2026 GMT
Subject: CN=e01096fb43b0e6986d4790f2a086006ce436bad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:56:d2:0d:40:73:e7:06:b0:1c:55:e2:b9:a9:
91:41:51:2d:53:ad:f8:dd:86:a8:80:c3:f7:78:6a:
9c:3c:d8:0d:97:24:ee:a3:f6:6b:37:c4:1b:da:a8:
4f:0d:e4:1f:4c:44:46:03:05:a1:f0:ab:ff:e5:e6:
17:ae:8b:3a:5e:70:44:30:6e:4a:87:6a:6b:eb:e3:
08:4c:ef:9c:20:a8:40:6b:67:4f:bf:25:85:74:64:
39:51:f8:6a:59:ea:23:6d:bb:b6:62:ee:4a:ca:c5:
c7:56:de:5f:0c:2c:93:a5:c3:19:a2:3c:2a:a5:08:
5f:80:cb:36:df:ea:03:b7:2e:0f:cb:72:58:e3:2a:
81:70:01:6c:cd:78:87:5c:b5:b2:9a:e4:91:19:f5:
1c:53:94:aa:e8:b2:30:4d:4c:ee:44:6b:24:c0:9d:
ef:c8:62:a2:fc:7d:98:60:ad:69:17:88:64:c7:9a:
65:df:a8:16:c8:31:31:f3:a3:cf:a6:cf:1b:ed:7b:
89:f6:ca:b3:f6:b1:e0:c4:12:69:64:c8:8a:ae:1d:
79:7a:64:e1:4b:24:92:6a:cb:a7:cf:f3:14:49:fa:
f0:4b:8e:31:c5:22:2d:69:3c:10:ae:b1:78:67:a1:
74:19:81:2d:5d:31:0d:91:00:33:f9:6f:55:ec:38:
00:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:10:96:FB:43:B0:E6:98:6D:47:90:F2:A0:86:00:6C:E4:36:BA:D9
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:42:52:91:33:c4:f4:46:dc:08:30:8e:51:a1:e5:56:8c:ea:
58:b6:f9:ae:02:38:69:29:c5:4d:d7:90:69:0f:af:43:53:2f:
62:0e:c7:64:48:86:d9:2f:7d:80:10:17:d4:21:06:55:8a:d2:
2e:73:5a:ad:ee:ee:e1:4b:88:32:ec:5c:71:86:21:5f:ec:78:
83:b3:eb:d9:15:29:ed:9d:b5:ff:83:98:87:6d:3a:3d:49:49:
23:f6:3e:01:54:de:b8:c7:0f:94:c9:bd:ec:a1:40:c4:6f:27:
ab:77:3f:81:e7:52:2e:a7:02:a7:fa:aa:44:a7:29:87:d6:80:
e9:e3:34:00:48:14:7c:69:22:6c:19:82:32:b5:37:b1:a0:21:
1c:0a:5d:f6:72:fd:ad:b8:ee:7e:63:ff:b2:61:79:26:9a:c0:
94:39:87:e3:63:27:29:ca:71:2a:c0:a7:a3:72:56:d6:50:d6:
d1:9a:41:3a:c3:35:b3:86:e5:10:46:84:ec:83:04:3c:61:b7:
48:78:cc:cb:6b:a7:38:05:26:3c:f8:db:f1:d1:82:01:da:dd:
b5:d8:1b:08:91:3b:f7:43:06:c0:f2:fb:b3:53:6a:7c:c1:d3:
09:79:b0:dc:5e:77:4a:3c:13:5b:34:8e:26:54:44:7b:34:fd:
28:80:63:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:49:18 2026 by rpki-client