Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File: UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier: BUCe4IhiJrEEpeNW1kHCpDSprCJ0ByrIL9TeZB9fgtA=
Subject key identifier: FF:92:19:01:99:66:9C:C0:4F:D3:25:08:5C:C7:2F:1C:54:7A:C8:1B
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 019F84FA6B520501724BC39DD02272597C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number: 0E6A
Signing time: Tue 21 Jul 2026 14:00:31 +0000
Manifest this update: Tue 21 Jul 2026 14:00:31 +0000
Manifest next update: Wed 22 Jul 2026 14:00:31 +0000
Files and hashes: 1: 1-rvXWbfutRyQsFLB2O2HcSydvn8.roa (hash: G/bEqZr33OdbdPx/abXyN5kc0kY5EzztDY6k+nCMKOc=)
2: 3-EeXmcZRUpj5DL_Om7bylZsefk.roa (hash: kfreAir/SgzDeq1U4ZKMC+PhHkagl1wiR7E5yuELkYE=)
3: FW4uCaBEevcQCVC9KduuJAdmVkk.roa (hash: hi3CRENNqBM7ERn9MrenvqFZvgbgfilYx3/QP3Xqq4k=)
4: KQmQrJ1jEiHHjz1S_0Yk4OXG9xA.roa (hash: tpY9R1aFnUdMqsnHp8rSZAPwxdzHPsIGg6V1ZMmMnOQ=)
5: LLtX3Bw8gzc5rIoJ6gGIoEGZhvk.roa (hash: 8ZMUJCkeXZDA3JqlPtb/Z7fXVQiFb14roMzYlX1mZ98=)
6: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: IFOVUbSepvncZvwjawkfmOSebR6tf8pGIbos3a71hQ8=)
7: nQE3bGEbjM6OpBVVSm2YC_6oWgI.roa (hash: Ho+aVhsVcSM72ZGhR58VKNtxF0cVDscps+IEINsdQjg=)
8: zmXY1OTT6NQXEmsjJD2BX4c7b7c.roa (hash: 26+rkNPDulDua9fC+YQZGyXCc/EBwd+QOh+NkG5ORq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fa:6b:52:05:01:72:4b:c3:9d:d0:22:72:59:7c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Jul 21 14:00:31 2026 GMT
Not After : Jul 22 14:00:31 2026 GMT
Subject: CN=ff92190199669cc04fd325085cc72f1c547ac81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:a7:c4:76:42:d3:26:6a:e5:4e:ac:92:f1:
23:84:50:33:6d:b7:9e:18:10:e1:ae:32:18:10:45:
56:5f:65:ff:f8:6c:ae:ae:64:06:b9:ad:df:b7:e9:
17:30:fd:e9:86:b0:60:04:7d:65:50:05:55:63:5d:
03:e8:bb:4f:0c:3b:01:7e:53:12:e6:48:f8:6c:3e:
c2:64:b8:3b:1e:68:25:84:1d:22:84:a8:02:b6:6b:
0e:46:65:5c:a3:95:2c:0e:0c:40:0a:87:35:20:52:
58:09:0b:32:e4:69:14:5a:06:71:7e:ec:95:b3:c8:
db:42:14:76:eb:a7:e3:8e:b7:23:34:c8:aa:8f:7e:
06:7d:de:da:48:02:06:fd:1e:e8:b0:80:73:62:5e:
90:c5:7c:e4:55:ce:38:0a:33:ad:25:a6:c0:f6:b7:
b1:90:98:c5:60:3c:07:3b:d8:b4:bf:3f:53:a1:60:
65:9d:14:33:6e:d0:03:ed:f2:e1:71:6f:18:b7:8a:
58:8a:1a:2f:1e:12:3f:5b:db:c8:55:c3:40:c9:2f:
2f:01:43:b2:01:81:b7:7c:a8:4a:eb:22:36:e7:07:
5d:d5:fe:86:28:53:ed:98:87:b6:2d:6b:80:c4:74:
81:d4:17:49:37:fd:0b:1b:71:44:82:87:af:b7:d6:
dc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:92:19:01:99:66:9C:C0:4F:D3:25:08:5C:C7:2F:1C:54:7A:C8:1B
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:42:80:1c:db:76:e6:a1:d9:c9:f3:d6:17:6e:d0:8c:14:08:
a8:ba:b1:57:e5:e3:60:f6:e0:43:85:e0:7f:a6:5e:66:85:dc:
dc:31:70:cf:6c:02:2f:6c:98:65:d1:14:ec:5b:2b:7f:8a:1a:
98:ef:be:42:aa:c5:d7:4f:01:bf:48:cd:a6:82:44:b4:2d:93:
20:ca:74:21:97:2e:56:f0:f9:3d:39:0c:f0:80:98:39:7e:71:
14:29:f1:46:d5:68:fd:11:d5:0a:44:b5:1c:ac:a2:fd:1f:89:
29:44:e6:23:fe:5e:4a:1a:6b:65:38:b0:d6:52:76:a8:4d:6c:
80:89:a5:82:97:b1:02:95:d7:17:66:69:f1:b1:44:37:a7:5c:
c1:36:06:ec:66:8f:8d:1a:7b:c0:b2:c5:13:57:66:d1:93:28:
19:22:56:64:90:3a:e3:b5:a4:0f:b3:8e:e5:d5:3c:9b:fc:0b:
20:c7:dd:e3:a0:48:97:f7:02:72:f3:cd:17:49:aa:8a:50:63:
68:4c:30:0a:65:89:0a:de:10:2a:33:39:1e:8e:82:ea:e8:d1:
e3:f8:88:4e:30:bf:eb:6a:0b:7b:0e:ab:43:a3:be:1e:a3:eb:
df:00:88:83:f5:c5:d7:f0:7c:60:92:7e:55:3d:8b:ca:a3:9f:
ec:5f:2c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:28:40 2026 by rpki-client