Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
File: UzYQcXlxVgncpCK8B6CYRoxSlFI.mft (raw, json)
Hash identifier: kPniQ6YjwJJk0RLlWLtkjfqve6iyCwvtaiKr/ejFUPM=
Subject key identifier: ED:66:31:1E:A9:E2:7A:3E:F5:1F:C4:7E:A9:33:6B:48:17:22:EA:89
Authority key identifier: 53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
Certificate issuer: /CN=5336107179715609dca422bc07a098468c529452
Certificate serial: 019F81FA4EB2A79A3E90A364856E003A0BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
Manifest number: 19CE
Signing time: Tue 21 Jul 2026 00:01:32 +0000
Manifest this update: Tue 21 Jul 2026 00:01:32 +0000
Manifest next update: Wed 22 Jul 2026 00:01:32 +0000
Files and hashes: 1: 37nBPcU451HQlUl0uacWDYQGvA8.roa (hash: TDhIz0QGXINJqgJRTB4Yk7ckzNjSTwoBFWF/TjcxIyc=)
2: UzYQcXlxVgncpCK8B6CYRoxSlFI.crl (hash: woF1n9j9UirH/yqlUODCgoNlWicJ4wRWY8u7w96kzjk=)
3: ejQtF-IJAcPUsJm2Grb30Iqg1lM.roa (hash: PAnCTRg2QzsK95CrphYN3Z21jLVwZm4bozxHdK4npEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 00:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:fa:4e:b2:a7:9a:3e:90:a3:64:85:6e:00:3a:0b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336107179715609dca422bc07a098468c529452
Validity
Not Before: Jul 21 00:01:32 2026 GMT
Not After : Jul 22 00:01:32 2026 GMT
Subject: CN=ed66311ea9e27a3ef51fc47ea9336b481722ea89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:f1:9a:47:39:22:32:11:15:ea:0a:c8:c5:
fc:b1:de:ae:b5:92:de:58:5d:b6:74:86:1f:51:b8:
f5:fc:7b:77:8f:d0:e6:b1:d7:e3:b9:ce:dd:9c:ba:
52:06:e7:e1:d3:58:6c:39:8b:f5:b9:1f:f0:1f:ba:
7b:b4:f7:4d:a6:7e:57:64:49:11:20:92:15:fe:53:
91:b3:46:b7:bc:11:77:63:69:c2:fb:73:7d:b5:0b:
63:6d:4d:6f:bf:ad:cd:7d:a5:e3:26:27:16:80:54:
34:cf:5d:ac:b5:cc:cc:a9:86:62:f9:e3:dd:bd:7f:
00:0b:cb:56:e3:a4:ed:a5:b3:7e:7b:95:e4:72:ad:
49:da:c3:fb:54:20:2e:d0:a5:9d:bf:aa:6a:f9:23:
90:33:00:76:fb:62:0d:d4:11:8c:0b:55:79:57:b5:
09:c2:17:5c:94:bf:62:76:32:67:bd:b9:15:16:de:
ff:af:c2:a8:ec:07:21:68:10:7d:cc:f4:ab:a2:7c:
ff:e0:1e:f0:08:a7:30:74:21:ca:98:96:f9:43:3f:
bf:f8:b0:bf:08:d3:1e:92:ce:45:c6:f8:eb:1c:84:
ab:91:fc:70:1e:06:69:88:fd:80:06:df:57:76:2b:
c5:49:43:e1:03:af:f7:b5:47:87:5f:1a:ae:18:4c:
28:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:66:31:1E:A9:E2:7A:3E:F5:1F:C4:7E:A9:33:6B:48:17:22:EA:89
X509v3 Authority Key Identifier:
keyid:53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:90:04:3e:0c:38:6e:f0:0d:2b:a0:79:64:2b:c0:e3:0c:ac:
5d:14:39:68:4e:88:76:22:16:de:6e:c5:1a:78:ab:ee:18:57:
04:12:88:18:31:32:8e:90:d5:a8:1a:e5:11:3f:90:78:71:f0:
66:94:c8:47:66:03:29:a0:b3:f0:60:21:e2:48:d8:22:38:f4:
d0:e8:99:80:1a:2f:57:88:3e:56:6e:f7:2a:65:ab:50:5a:27:
5d:7c:75:55:fc:4d:77:86:73:b0:30:75:af:8c:08:83:57:fe:
f1:90:26:be:d5:26:6d:59:31:7c:45:3d:b9:03:ea:f2:8c:b0:
13:72:f4:32:ce:dc:ce:1b:12:fd:a1:cb:23:39:21:78:f2:bc:
c8:54:5f:f9:9a:74:48:ae:9f:8a:e5:21:03:d4:34:99:03:85:
32:fc:be:3a:25:e9:0b:22:5d:d3:93:89:f1:02:4e:1e:7f:64:
fb:78:b9:3e:ee:a9:83:6c:17:53:bc:f3:4b:ba:be:0b:79:dd:
88:b8:84:13:c1:a9:bf:fe:dd:cd:bc:eb:e7:e6:68:1d:7f:70:
55:71:68:62:8f:cd:68:8e:9f:71:31:88:9e:63:38:ba:bf:db:
8b:d1:2b:7c:87:85:1b:88:66:60:c2:3b:07:b7:19:1d:a6:74:
04:9e:81:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+B+k6yp5o+kKNkhW4AOgvFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzYxMDcxNzk3MTU2MDlkY2E0MjJiYzA3YTA5ODQ2OGM1
Mjk0NTIwHhcNMjYwNzIxMDAwMTMyWhcNMjYwNzIyMDAwMTMyWjAzMTEwLwYDVQQD
EyhlZDY2MzExZWE5ZTI3YTNlZjUxZmM0N2VhOTMzNmI0ODE3MjJlYTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG3xmkc5IjIRFeoKyMX8sd6utZLe
WF22dIYfUbj1/Ht3j9Dmsdfjuc7dnLpSBufh01hsOYv1uR/wH7p7tPdNpn5XZEkR
IJIV/lORs0a3vBF3Y2nC+3N9tQtjbU1vv63NfaXjJicWgFQ0z12stczMqYZi+ePd
vX8AC8tW46TtpbN+e5Xkcq1J2sP7VCAu0KWdv6pq+SOQMwB2+2IN1BGMC1V5V7UJ
whdclL9idjJnvbkVFt7/r8Ko7AchaBB9zPSronz/4B7wCKcwdCHKmJb5Qz+/+LC/
CNMeks5FxvjrHISrkfxwHgZpiP2ABt9XdivFSUPhA6/3tUeHXxquGEwoZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1mMR6p4no+9R/Efqkza0gXIuqJMB8GA1UdIwQY
MBaAFFM2EHF5cVYJ3KQivAegmEaMUpRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXpZUWNYbHhWZ25jcENLOEI2Q1lSb3hTbEZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS84MWRmMzMtNzUzOC00MGQ4LWI4MWUt
ZDE4NjEwMDc1ZWZjLzEvVXpZUWNYbHhWZ25jcENLOEI2Q1lSb3hTbEZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS84MWRmMzMtNzUzOC00MGQ4LWI4MWUtZDE4NjEwMDc1ZWZj
LzEvVXpZUWNYbHhWZ25jcENLOEI2Q1lSb3hTbEZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5AEPgw4
bvANK6B5ZCvA4wysXRQ5aE6IdiIW3m7FGnir7hhXBBKIGDEyjpDVqBrlET+QeHHw
ZpTIR2YDKaCz8GAh4kjYIjj00OiZgBovV4g+Vm73KmWrUFonXXx1VfxNd4ZzsDB1
r4wIg1f+8ZAmvtUmbVkxfEU9uQPq8oywE3L0Ms7czhsS/aHLIzkhePK8yFRf+Zp0
SK6fiuUhA9Q0mQOFMvy+OiXpCyJd05OJ8QJOHn9k+3i5Pu6pg2wXU7zzS7q+C3nd
iLiEE8Gpv/7dzbzr5+ZoHX9wVXFoYo/NaI6fcTGInmM4ur/bi9ErfIeFG4hmYMI7
B7cZHaZ0BJ6BGw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 10:17:09 2026 by rpki-client