Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File: UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier: 3GOFPRNa2gMJwvbr97jTrngVwZU73WMat6PswkPtMQk=
Subject key identifier: B4:0E:D9:C2:52:6F:DB:3E:6D:F9:BC:4B:4E:B3:10:E3:F2:3F:F0:0D
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 019E9B4E2DBA1D083010A880A765AD55A099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number: 0DF1
Signing time: Sat 06 Jun 2026 05:00:52 +0000
Manifest this update: Sat 06 Jun 2026 05:00:52 +0000
Manifest next update: Sun 07 Jun 2026 05:00:52 +0000
Files and hashes: 1: 1-rvXWbfutRyQsFLB2O2HcSydvn8.roa (hash: G/bEqZr33OdbdPx/abXyN5kc0kY5EzztDY6k+nCMKOc=)
2: 3-EeXmcZRUpj5DL_Om7bylZsefk.roa (hash: kfreAir/SgzDeq1U4ZKMC+PhHkagl1wiR7E5yuELkYE=)
3: FW4uCaBEevcQCVC9KduuJAdmVkk.roa (hash: hi3CRENNqBM7ERn9MrenvqFZvgbgfilYx3/QP3Xqq4k=)
4: KQmQrJ1jEiHHjz1S_0Yk4OXG9xA.roa (hash: tpY9R1aFnUdMqsnHp8rSZAPwxdzHPsIGg6V1ZMmMnOQ=)
5: LLtX3Bw8gzc5rIoJ6gGIoEGZhvk.roa (hash: 8ZMUJCkeXZDA3JqlPtb/Z7fXVQiFb14roMzYlX1mZ98=)
6: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: y6JHZMYEHFiXabPaEQR6sSGLsOcbhHRvS4tOKF3xwWg=)
7: nQE3bGEbjM6OpBVVSm2YC_6oWgI.roa (hash: Ho+aVhsVcSM72ZGhR58VKNtxF0cVDscps+IEINsdQjg=)
8: zmXY1OTT6NQXEmsjJD2BX4c7b7c.roa (hash: 26+rkNPDulDua9fC+YQZGyXCc/EBwd+QOh+NkG5ORq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:4e:2d:ba:1d:08:30:10:a8:80:a7:65:ad:55:a0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Jun 6 05:00:52 2026 GMT
Not After : Jun 7 05:00:52 2026 GMT
Subject: CN=b40ed9c2526fdb3e6df9bc4b4eb310e3f23ff00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cb:58:6f:70:76:35:dc:1f:a8:2b:c0:d0:b9:
5f:e6:43:81:cc:94:ae:86:e9:5c:c3:61:73:1b:f1:
ae:79:81:b4:b7:42:1c:35:d0:8a:aa:eb:40:2a:90:
d5:9d:29:12:c2:29:38:28:6b:76:54:66:dd:08:c6:
da:27:3d:2a:ec:ea:76:24:47:fe:bb:59:5d:16:e1:
76:0e:4c:4a:36:2d:bb:20:04:6b:34:24:82:74:7e:
18:eb:b7:06:b7:5b:46:e9:84:17:d5:1e:7e:99:fa:
89:f5:6d:56:f8:9c:1e:69:ec:61:21:02:f2:aa:5f:
49:b2:79:18:f4:37:bd:01:4b:b7:9b:b2:76:6c:08:
3d:88:a2:e7:c6:ff:0f:11:cc:8e:df:9c:a3:64:18:
54:61:c1:bb:13:7e:4c:9c:62:c4:bf:21:a5:61:0b:
3e:d3:f3:92:b4:14:d8:ae:63:af:f2:d1:fe:3c:c3:
01:89:c9:d9:1c:a1:23:7c:96:5f:d9:92:f2:d8:2b:
0b:ad:5f:cd:fb:fc:90:db:bd:24:e9:7e:7e:eb:ae:
87:85:52:1f:52:97:70:4d:79:fe:65:1c:9a:af:2c:
50:a8:86:f8:99:f7:74:65:b8:46:2b:62:7a:f5:34:
31:c7:5d:58:a6:20:0d:cb:9b:dc:34:fb:dc:17:81:
40:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0E:D9:C2:52:6F:DB:3E:6D:F9:BC:4B:4E:B3:10:E3:F2:3F:F0:0D
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:1f:06:44:19:df:8e:82:32:b0:fb:56:97:a3:9d:30:c1:10:
41:3c:4c:20:91:e7:f0:24:bf:59:cc:e6:2d:13:0e:22:0c:aa:
21:7a:b9:55:04:71:e5:8b:b8:0b:18:37:c6:78:7f:1a:da:5e:
f3:eb:a9:bf:90:99:15:0e:81:2b:1f:06:45:1e:45:71:79:d3:
2c:c2:58:42:9c:d7:8b:e7:b0:14:2b:3d:a1:4a:3f:db:63:0a:
eb:53:47:16:55:64:ea:22:e9:c1:3c:30:b6:70:be:ab:35:ff:
c7:f2:30:8a:07:e8:5b:44:31:75:86:6e:d4:ef:04:7a:c8:67:
0a:ba:8f:39:a2:78:c6:db:c1:1f:b9:41:f3:50:39:91:73:d7:
0c:3a:6f:c6:6b:cf:10:c7:75:9f:28:3c:12:42:ce:1b:c4:60:
dd:22:07:4d:b0:53:f7:79:f2:ef:73:3b:c5:5b:af:ea:56:e2:
20:c1:12:80:fa:e2:92:77:2b:e3:22:2f:02:39:56:19:52:ce:
03:04:15:56:61:5e:01:dc:e4:fd:d2:cb:46:99:16:f4:c6:f1:
77:40:5a:df:41:45:8e:89:50:2f:fb:43:a8:6b:91:69:a5:2f:
13:3f:a3:48:58:53:f7:8a:2b:01:e5:1e:de:07:5b:bd:6a:b9:
50:76:bb:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6bTi26HQgwEKiAp2WtVaCZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzZhMTA2Y2VjZGViYTkyZTBiODBlNWU5YTVjNzg5YmE3
NGM2MmIwHhcNMjYwNjA2MDUwMDUyWhcNMjYwNjA3MDUwMDUyWjAzMTEwLwYDVQQD
EyhiNDBlZDljMjUyNmZkYjNlNmRmOWJjNGI0ZWIzMTBlM2YyM2ZmMDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MtYb3B2NdwfqCvA0Llf5kOBzJSu
hulcw2FzG/GueYG0t0IcNdCKqutAKpDVnSkSwik4KGt2VGbdCMbaJz0q7Op2JEf+
u1ldFuF2DkxKNi27IARrNCSCdH4Y67cGt1tG6YQX1R5+mfqJ9W1W+JweaexhIQLy
ql9JsnkY9De9AUu3m7J2bAg9iKLnxv8PEcyO35yjZBhUYcG7E35MnGLEvyGlYQs+
0/OStBTYrmOv8tH+PMMBicnZHKEjfJZf2ZLy2CsLrV/N+/yQ270k6X5+666HhVIf
UpdwTXn+ZRyaryxQqIb4mfd0ZbhGK2J69TQxx11YpiANy5vcNPvcF4FA7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQO2cJSb9s+bfm8S06zEOPyP/ANMB8GA1UdIwQY
MBaAFFM2oQbOzeupLguA5emlx4m6dMYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yNjY5ZWUtNGJhNy00MTEwLTgzNzAt
ZGQ4MDNjNWI4NWRiLzEvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8yNjY5ZWUtNGJhNy00MTEwLTgzNzAtZGQ4MDNjNWI4NWRi
LzEvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtB8GRBnf
joIysPtWl6OdMMEQQTxMIJHn8CS/WczmLRMOIgyqIXq5VQRx5Yu4Cxg3xnh/Gtpe
8+upv5CZFQ6BKx8GRR5FcXnTLMJYQpzXi+ewFCs9oUo/22MK61NHFlVk6iLpwTww
tnC+qzX/x/IwigfoW0QxdYZu1O8EeshnCrqPOaJ4xtvBH7lB81A5kXPXDDpvxmvP
EMd1nyg8EkLOG8Rg3SIHTbBT93ny73M7xVuv6lbiIMESgPrikncr4yIvAjlWGVLO
AwQVVmFeAdzk/dLLRpkW9Mbxd0Ba30FFjolQL/tDqGuRaaUvEz+jSFhT94orAeUe
3gdbvWq5UHa7Qg==
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:33:16 2026 by rpki-client