Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
File: UZpqm-tS7_KWRGWblDKgpZI3MUw.mft (raw, json)
Hash identifier: HjOcOwFk127wQM52TZTS+RzhXUmT0O9+pRRYhq0QM9w=
Subject key identifier: AF:46:6B:FE:A5:A9:34:5C:FB:C9:1F:F1:3B:15:9C:80:A3:AD:7A:AD
Authority key identifier: 51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
Certificate issuer: /CN=519a6a9beb52eff29644659b9432a0a59237314c
Certificate serial: 019EB7A0A73499C042B6AF98A690FD502B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
Manifest number: 16A1
Signing time: Thu 11 Jun 2026 17:00:19 +0000
Manifest this update: Thu 11 Jun 2026 17:00:19 +0000
Manifest next update: Fri 12 Jun 2026 17:00:19 +0000
Files and hashes: 1: UZpqm-tS7_KWRGWblDKgpZI3MUw.crl (hash: GFO/reiPTBprnwugMMhmwlcjrM0v0t0XECahYRcqR8U=)
2: gQeDlAB2b-yz40wa6y4f9jvVDIs.roa (hash: gxyp6+EX2f9gbDwhqzkUqdu0QE4bPoPhIRtQBnEAra0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:a7:34:99:c0:42:b6:af:98:a6:90:fd:50:2b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519a6a9beb52eff29644659b9432a0a59237314c
Validity
Not Before: Jun 11 17:00:19 2026 GMT
Not After : Jun 12 17:00:19 2026 GMT
Subject: CN=af466bfea5a9345cfbc91ff13b159c80a3ad7aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f7:d0:d6:9c:ef:09:e2:5d:a0:56:d4:e8:bf:
c3:dc:ec:4c:d7:3d:ce:ca:98:71:9d:d9:1d:fa:38:
4a:73:83:43:51:39:7d:0b:e3:54:4d:77:74:cc:c0:
32:19:fa:89:90:b5:8a:51:f6:b4:ec:46:f0:67:04:
9b:60:ef:0c:cc:75:18:d5:0b:b3:92:73:d0:e9:8e:
d9:0d:53:2d:c2:5a:3c:55:e0:73:f0:cb:4a:95:36:
0e:c5:3d:ca:80:e5:f9:ac:55:e5:55:8c:2a:88:6f:
43:a0:ea:cb:45:39:18:d9:14:b1:5d:83:80:b3:82:
15:9f:f9:e3:dd:55:e8:dc:5a:14:e7:29:d7:a0:47:
b3:81:e4:16:a3:16:a7:63:bd:23:e8:e9:92:75:19:
a0:93:fc:73:21:21:55:d7:fd:e6:40:c3:c4:5f:29:
c5:28:7a:de:f1:b4:df:74:7b:04:cc:91:16:c7:27:
25:18:87:2c:9f:2d:58:c7:aa:16:29:41:a1:a4:cb:
df:cb:c7:ee:e3:57:ec:f3:76:0a:a9:0f:55:28:3e:
66:e5:d9:d9:c8:ed:30:c4:5c:64:08:92:86:a9:d0:
44:f6:39:b8:4e:97:94:d4:76:f9:39:ce:5b:aa:a1:
3c:a1:5e:22:17:6e:11:d9:ce:32:78:7c:cf:29:e2:
07:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:46:6B:FE:A5:A9:34:5C:FB:C9:1F:F1:3B:15:9C:80:A3:AD:7A:AD
X509v3 Authority Key Identifier:
keyid:51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:45:bc:f6:ec:cd:2d:d1:5c:85:f7:3d:53:2b:d9:d9:eb:a1:
11:78:2a:c7:49:bc:88:20:80:dc:ec:ec:67:79:c6:04:19:6c:
8a:01:db:8a:a0:0d:97:ca:98:84:07:9f:e9:c3:5b:bc:51:02:
0e:ed:6a:be:0d:fc:ad:31:6e:2e:cc:93:3c:f7:96:da:ea:f7:
4e:f8:82:dc:3d:6b:27:0b:0f:9d:f0:8f:77:01:d7:41:ce:f9:
fc:fe:64:09:91:58:39:20:3f:a5:bb:57:25:3b:90:0c:d4:41:
42:0b:77:b9:35:3a:bd:68:36:fe:da:3a:29:b9:58:04:d1:63:
21:d9:1a:f1:c4:96:ab:5c:c5:09:3f:61:3c:b9:0b:fe:d6:81:
5a:aa:b0:df:51:90:bc:01:6c:31:ac:84:e6:e0:8d:0e:17:f1:
25:08:0b:e3:cf:3a:00:e3:55:a1:3e:ee:7e:6a:ef:d9:82:ac:
a0:67:02:6d:c8:af:4f:76:22:60:21:73:9a:5c:b2:b8:36:dc:
34:c5:2f:90:ba:d2:2a:e3:6a:9a:d0:41:9b:73:84:a0:e0:43:
77:1a:67:4e:95:47:69:3b:45:2a:ce:9d:70:82:32:c0:b4:5a:
4d:a0:77:1a:93:f5:98:f6:2d:66:e7:a3:b9:10:dd:e8:fb:9f:
a5:07:01:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:07:20 2026 by rpki-client