Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File: UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier: cjxAwBiUyp3naMxNqRDtEgCpiXGf4raZ3VvQMEKZKQ0=
Subject key identifier: A9:96:38:AE:73:16:7C:56:F1:1F:D6:04:2F:67:F4:16:5B:90:CB:25
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 01A06EA7982B618F1E609AA1A221CBBF1B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number: 0EE3
Signing time: Fri 04 Sep 2026 23:01:12 +0000
Manifest this update: Fri 04 Sep 2026 23:01:12 +0000
Manifest next update: Sat 05 Sep 2026 23:01:12 +0000
Files and hashes: 1: 1-rvXWbfutRyQsFLB2O2HcSydvn8.roa (hash: G/bEqZr33OdbdPx/abXyN5kc0kY5EzztDY6k+nCMKOc=)
2: 3-EeXmcZRUpj5DL_Om7bylZsefk.roa (hash: kfreAir/SgzDeq1U4ZKMC+PhHkagl1wiR7E5yuELkYE=)
3: FW4uCaBEevcQCVC9KduuJAdmVkk.roa (hash: hi3CRENNqBM7ERn9MrenvqFZvgbgfilYx3/QP3Xqq4k=)
4: KQmQrJ1jEiHHjz1S_0Yk4OXG9xA.roa (hash: tpY9R1aFnUdMqsnHp8rSZAPwxdzHPsIGg6V1ZMmMnOQ=)
5: LLtX3Bw8gzc5rIoJ6gGIoEGZhvk.roa (hash: 8ZMUJCkeXZDA3JqlPtb/Z7fXVQiFb14roMzYlX1mZ98=)
6: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: 00DqPTbX8pWf3k8dh9O/kJnM11IUOEptxWAH9XVHRrg=)
7: nQE3bGEbjM6OpBVVSm2YC_6oWgI.roa (hash: Ho+aVhsVcSM72ZGhR58VKNtxF0cVDscps+IEINsdQjg=)
8: zmXY1OTT6NQXEmsjJD2BX4c7b7c.roa (hash: 26+rkNPDulDua9fC+YQZGyXCc/EBwd+QOh+NkG5ORq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:98:2b:61:8f:1e:60:9a:a1:a2:21:cb:bf:1b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Sep 4 23:01:12 2026 GMT
Not After : Sep 5 23:01:12 2026 GMT
Subject: CN=a99638ae73167c56f11fd6042f67f4165b90cb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:42:62:ae:79:64:f6:6f:29:51:5d:08:e6:6e:
91:55:0c:71:d3:8b:28:5b:d4:32:99:d7:07:6e:11:
18:9f:7f:d5:25:95:59:e4:d3:ec:7b:be:78:64:de:
b4:51:9a:98:b8:6c:7a:94:5a:6f:23:83:79:31:21:
76:54:7a:a0:ae:01:e6:27:fb:cd:a6:2f:b4:fe:c4:
37:e4:57:85:c7:28:28:11:be:b1:a4:53:89:67:5f:
97:05:94:f5:b1:49:1a:60:c7:88:df:3c:06:92:cb:
ac:30:97:9e:94:a4:6b:39:4e:9a:e6:cc:fd:e8:dd:
fd:d8:47:d9:48:d8:b3:a0:28:23:a8:09:5c:47:e9:
59:c6:77:f5:c5:a8:5a:e0:2d:9d:70:68:34:88:9c:
4a:fb:a9:ea:8e:6e:68:72:ad:d6:72:be:22:ee:f2:
6c:eb:dd:14:ac:c0:38:75:bd:e7:3c:36:60:6f:01:
9c:10:39:d8:b2:55:9c:da:ed:2b:77:95:04:5e:58:
7c:47:c6:f8:86:4c:34:87:99:91:dc:4b:90:ca:37:
a7:bf:72:a0:d0:a1:df:72:9e:e6:37:eb:44:e7:c7:
23:a3:07:dc:a6:40:9b:6e:fd:db:99:86:eb:e8:e4:
5c:33:52:23:11:f4:d7:37:dc:ec:f5:20:0c:ca:86:
eb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:96:38:AE:73:16:7C:56:F1:1F:D6:04:2F:67:F4:16:5B:90:CB:25
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:05:a3:c7:ff:80:72:07:a7:d2:05:d1:86:45:0a:1b:41:e2:
76:1e:59:57:91:63:ed:ac:db:20:cb:4d:e2:aa:a3:6b:92:86:
83:6c:93:eb:0c:3f:7f:24:c7:91:f3:97:5d:78:c3:8f:4c:b9:
7b:f9:1f:f2:0a:7a:b9:62:49:b5:f7:76:61:2d:66:23:ba:42:
e2:4f:c4:99:cb:fa:7a:d0:af:06:9f:73:24:b7:b0:89:de:92:
47:14:95:6d:08:d5:9a:7d:53:e6:cc:1a:1a:d2:ec:a6:95:3b:
42:83:2a:b2:34:ac:24:6a:c4:4b:3c:98:53:23:6f:60:c9:69:
26:a9:33:30:0d:c5:3b:62:a5:e5:f6:76:5d:c9:04:de:d5:ba:
f7:11:a4:77:d1:75:18:54:5c:a8:91:83:a0:af:ad:da:bd:35:
ff:f3:b4:ec:54:a0:b5:90:b0:0f:ef:cc:85:a7:b2:b8:1e:38:
e3:a1:bf:ad:da:f2:fd:af:4b:91:89:67:e2:4a:24:ac:19:43:
d3:fb:5b:61:41:95:0c:28:a9:e0:1a:c7:fb:c9:05:88:f1:b2:
ac:58:54:83:a8:a4:9a:45:a4:9e:e2:4c:68:d2:98:53:ab:4d:
88:f8:84:56:5e:a3:d5:3c:a9:d6:4f:ef:b5:8d:d1:55:07:d7:
2b:af:8e:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBup5grYY8eYJqhoiHLvxuUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzZhMTA2Y2VjZGViYTkyZTBiODBlNWU5YTVjNzg5YmE3
NGM2MmIwHhcNMjYwOTA0MjMwMTEyWhcNMjYwOTA1MjMwMTEyWjAzMTEwLwYDVQQD
EyhhOTk2MzhhZTczMTY3YzU2ZjExZmQ2MDQyZjY3ZjQxNjViOTBjYjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEJirnlk9m8pUV0I5m6RVQxx04so
W9QymdcHbhEYn3/VJZVZ5NPse754ZN60UZqYuGx6lFpvI4N5MSF2VHqgrgHmJ/vN
pi+0/sQ35FeFxygoEb6xpFOJZ1+XBZT1sUkaYMeI3zwGksusMJeelKRrOU6a5sz9
6N392EfZSNizoCgjqAlcR+lZxnf1xaha4C2dcGg0iJxK+6nqjm5ocq3Wcr4i7vJs
690UrMA4db3nPDZgbwGcEDnYslWc2u0rd5UEXlh8R8b4hkw0h5mR3EuQyjenv3Kg
0KHfcp7mN+tE58cjowfcpkCbbv3bmYbr6ORcM1IjEfTXN9zs9SAMyobrLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmWOK5zFnxW8R/WBC9n9BZbkMslMB8GA1UdIwQY
MBaAFFM2oQbOzeupLguA5emlx4m6dMYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yNjY5ZWUtNGJhNy00MTEwLTgzNzAt
ZGQ4MDNjNWI4NWRiLzEvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8yNjY5ZWUtNGJhNy00MTEwLTgzNzAtZGQ4MDNjNWI4NWRi
LzEvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwWjx/+A
cgen0gXRhkUKG0Hidh5ZV5Fj7azbIMtN4qqja5KGg2yT6ww/fyTHkfOXXXjDj0y5
e/kf8gp6uWJJtfd2YS1mI7pC4k/Emcv6etCvBp9zJLewid6SRxSVbQjVmn1T5swa
GtLsppU7QoMqsjSsJGrESzyYUyNvYMlpJqkzMA3FO2Kl5fZ2XckE3tW69xGkd9F1
GFRcqJGDoK+t2r01//O07FSgtZCwD+/MhaeyuB4446G/rdry/a9LkYln4kokrBlD
0/tbYUGVDCip4BrH+8kFiPGyrFhUg6ikmkWknuJMaNKYU6tNiPiEVl6j1Typ1k/v
tY3RVQfXK6+OjQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:52:13 2026 by rpki-client