Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File: UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier: YuUDlHaxNqIoI730HJkOhsHzUuLzYSyDmHvJyEpq/j8=
Subject key identifier: 53:7B:5F:69:4F:18:1D:E8:4E:C1:44:3A:03:39:0C:13:BE:F5:02:9B
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 019CC7F5328B46312059F9916E2D4BA764E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number: 0CFF
Signing time: Sat 07 Mar 2026 11:01:00 +0000
Manifest this update: Sat 07 Mar 2026 11:01:00 +0000
Manifest next update: Sun 08 Mar 2026 11:01:00 +0000
Files and hashes: 1: 1-rvXWbfutRyQsFLB2O2HcSydvn8.roa (hash: G/bEqZr33OdbdPx/abXyN5kc0kY5EzztDY6k+nCMKOc=)
2: 3-EeXmcZRUpj5DL_Om7bylZsefk.roa (hash: kfreAir/SgzDeq1U4ZKMC+PhHkagl1wiR7E5yuELkYE=)
3: FW4uCaBEevcQCVC9KduuJAdmVkk.roa (hash: hi3CRENNqBM7ERn9MrenvqFZvgbgfilYx3/QP3Xqq4k=)
4: KQmQrJ1jEiHHjz1S_0Yk4OXG9xA.roa (hash: tpY9R1aFnUdMqsnHp8rSZAPwxdzHPsIGg6V1ZMmMnOQ=)
5: LLtX3Bw8gzc5rIoJ6gGIoEGZhvk.roa (hash: 8ZMUJCkeXZDA3JqlPtb/Z7fXVQiFb14roMzYlX1mZ98=)
6: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: h1LFm1RpNfpbR9yk36hWM9dMc7PRpLNAOz/AZbeMMD8=)
7: nQE3bGEbjM6OpBVVSm2YC_6oWgI.roa (hash: Ho+aVhsVcSM72ZGhR58VKNtxF0cVDscps+IEINsdQjg=)
8: zmXY1OTT6NQXEmsjJD2BX4c7b7c.roa (hash: 26+rkNPDulDua9fC+YQZGyXCc/EBwd+QOh+NkG5ORq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:f5:32:8b:46:31:20:59:f9:91:6e:2d:4b:a7:64:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Mar 7 11:01:00 2026 GMT
Not After : Mar 8 11:01:00 2026 GMT
Subject: CN=537b5f694f181de84ec1443a03390c13bef5029b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:44:24:1e:fa:88:d4:aa:79:d5:74:c7:88:23:
2f:eb:a5:57:19:09:6e:d7:2c:17:cc:bb:3d:58:b0:
bb:39:bb:ae:a9:1e:54:4a:b6:6a:23:c5:32:12:fc:
83:7d:4c:57:63:57:d8:05:ad:07:63:51:e1:e8:03:
6b:ba:30:8f:b3:2c:b2:88:e1:9f:48:31:a1:c5:24:
95:ec:df:04:05:18:76:72:06:19:ed:11:2a:7d:f7:
38:b2:02:d1:a5:5c:a7:2f:e4:b0:23:19:99:a5:dd:
5a:8d:46:20:86:38:60:51:bb:94:8e:8f:ee:d0:d2:
f9:7f:6c:dd:73:a4:d6:92:84:c1:d1:f5:e1:6e:16:
3f:7b:25:bd:38:84:de:83:c9:16:2e:40:51:9e:21:
ef:5f:22:29:20:23:6f:d6:9c:9f:c8:50:3f:ca:af:
0a:df:af:49:83:b1:5c:57:ad:30:7c:a1:97:aa:07:
86:82:fb:e6:fe:74:41:fe:0d:78:f1:af:27:27:6a:
88:34:a3:75:c4:fa:1d:14:c3:6a:61:c8:c3:eb:61:
df:31:bd:a4:ac:a1:3c:d8:f0:6a:2d:9e:25:5d:6f:
cf:f4:78:68:d5:0e:ba:64:3f:40:48:df:e7:23:24:
a0:f6:0b:81:18:5e:84:5f:1e:52:26:50:f1:e6:55:
45:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7B:5F:69:4F:18:1D:E8:4E:C1:44:3A:03:39:0C:13:BE:F5:02:9B
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:24:76:37:ec:b0:7f:31:03:0d:f1:85:a4:37:ca:4f:9c:fa:
bf:d7:ea:73:79:ba:fe:24:fb:0d:53:37:7e:e3:df:23:d3:3e:
ce:92:56:c7:8e:e8:15:cc:b9:20:0d:a0:80:ad:d8:f5:f0:43:
76:9e:fd:15:5f:34:d4:d2:c6:3c:0c:9f:23:af:e0:42:89:ab:
e3:2d:d4:1c:39:c7:f9:d0:02:2f:ad:2c:db:b0:5e:16:71:a5:
5d:6d:4b:33:87:f0:ab:69:66:8c:ba:22:a7:ae:c3:73:e9:a5:
7f:a2:f7:ec:61:72:62:23:cb:72:45:c0:00:e7:e6:89:28:53:
5c:14:51:bc:19:de:8b:cd:92:6d:87:71:ca:34:e1:eb:82:fb:
6e:1a:b2:fa:9c:b3:91:83:23:6b:24:a4:ac:9e:8f:f1:37:83:
1f:fb:dd:2d:58:3d:1a:35:47:c8:4c:9e:3a:19:e2:5a:04:ff:
4b:ed:d2:9f:d4:db:3b:8c:9a:ab:78:33:1d:e2:e8:ef:85:77:
c5:15:46:b6:2c:10:77:3d:00:ce:b1:dc:b0:4f:2b:c2:fb:4b:
e4:a6:08:8b:b0:79:50:87:fa:e7:e6:66:33:ad:b2:0e:c9:fd:
58:cb:d4:4f:78:da:5d:22:f7:ba:89:49:db:17:6b:f4:55:82:
90:be:63:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:18:38 2026 by rpki-client