Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
File: UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json)
Hash identifier: WB5oJfhmLp3HNKzpq+diGCp4Jmje0U/2oWcCx/8iGps=
Subject key identifier: B1:90:EA:07:EA:07:51:CD:8E:C9:7D:DE:42:B3:75:5C:64:2C:E5:33
Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
Certificate issuer: /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Certificate serial: 019F93FFD2E4EA96702CE6AC73868DEF7D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
Manifest number: 199A
Signing time: Fri 24 Jul 2026 12:00:44 +0000
Manifest this update: Fri 24 Jul 2026 12:00:44 +0000
Manifest next update: Sat 25 Jul 2026 12:00:44 +0000
Files and hashes: 1: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: i129fBaXMbmSo61OgJNoqPBXW2VdUUwiFf/zFOqBvEM=)
2: ZsE_mt7ku7Fr5hPoQLALle6qg7o.roa (hash: HUKBNWBBwbvfcuNQzCGO+9wjMStLGidRG99eNbwf4fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:d2:e4:ea:96:70:2c:e6:ac:73:86:8d:ef:7d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Validity
Not Before: Jul 24 12:00:44 2026 GMT
Not After : Jul 25 12:00:44 2026 GMT
Subject: CN=b190ea07ea0751cd8ec97dde42b3755c642ce533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:6e:8c:6d:ae:fc:cd:e1:ed:ff:e6:f5:47:
f5:2a:97:87:8b:11:03:de:95:7f:1e:d3:61:31:eb:
a8:75:8a:c3:dd:78:61:79:61:0e:b3:8d:59:14:e2:
09:39:38:64:60:ad:78:5c:63:9d:47:25:a4:78:67:
ad:6c:e5:20:81:12:42:c8:ae:d0:d6:91:7b:c8:a0:
c1:e2:45:67:3d:10:e0:29:1d:e3:27:fd:0d:74:3c:
fc:a3:8e:6b:74:11:17:fe:a9:d9:4f:98:05:f7:6f:
5f:f4:17:4b:45:fd:11:58:75:db:fe:3f:33:c4:62:
08:f1:7d:c2:30:aa:be:c4:4b:1b:e3:db:90:a7:f1:
22:2c:25:c7:58:16:d7:d7:9a:a0:43:91:7c:56:35:
e5:fb:f9:47:57:b0:8c:68:ee:73:fa:44:96:e9:8c:
79:5c:9b:6d:73:86:b3:60:6c:85:91:45:81:90:fb:
e5:b7:ee:86:eb:80:c2:cf:72:f1:b2:27:56:65:00:
09:ce:17:4e:29:fb:3e:2f:dc:b6:2a:02:b7:cf:21:
3e:3f:6d:25:4f:69:56:1a:e8:0d:85:af:f7:2e:a4:
18:54:33:33:0d:e1:52:64:e1:0c:02:66:a5:aa:df:
aa:31:84:6c:4f:ba:4e:dc:5c:24:6e:04:62:78:0c:
2b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:90:EA:07:EA:07:51:CD:8E:C9:7D:DE:42:B3:75:5C:64:2C:E5:33
X509v3 Authority Key Identifier:
keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b6:e9:6c:f8:80:75:28:22:90:2c:24:ae:67:92:69:9e:e7:
82:b0:09:98:9b:85:b9:e5:d3:7c:ec:14:69:99:87:69:db:9f:
d8:f2:6a:a3:5f:4d:9b:87:75:0e:f0:e5:aa:dd:c2:a7:dc:f5:
48:26:6a:2e:5c:1b:9c:c0:07:86:16:94:74:58:7b:70:68:8b:
75:4a:a3:30:0e:e6:2f:42:35:ae:c7:51:b0:76:74:42:9e:bf:
1c:e4:27:06:9c:2d:2e:54:8d:54:7f:b9:0c:72:d6:78:32:07:
80:33:b9:fa:6d:f3:40:2f:06:d4:a0:ec:85:dd:52:ec:a2:7d:
de:a1:d3:85:e0:d9:6d:6a:eb:30:79:84:d5:45:56:88:21:bc:
a0:83:8c:e7:61:c0:54:97:7d:3a:8d:b1:7d:c2:31:cf:33:ab:
4a:9b:a3:18:26:15:7d:39:3d:2d:01:fb:15:5e:66:d5:6d:ba:
18:17:fe:5b:ee:b8:38:ff:19:1b:64:e1:84:c2:ba:72:70:a1:
0f:cd:36:df:71:7f:13:ac:be:1f:40:db:cd:32:c1:42:8e:14:
6c:4e:41:3e:55:34:5b:9f:a4:0a:c2:62:c7:e5:0b:89:d2:f7:
89:92:6e:1c:2e:87:61:4e:3c:d8:32:01:fd:03:70:b7:d2:a9:
69:eb:a0:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+T/9Lk6pZwLOasc4aN730kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzkwYjEzYzllZjRhZmNmZDA4MTI0MTExZTZmNjNkYzMw
MTY1YWEwHhcNMjYwNzI0MTIwMDQ0WhcNMjYwNzI1MTIwMDQ0WjAzMTEwLwYDVQQD
EyhiMTkwZWEwN2VhMDc1MWNkOGVjOTdkZGU0MmIzNzU1YzY0MmNlNTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqVujG2u/M3h7f/m9Uf1KpeHixED
3pV/HtNhMeuodYrD3XhheWEOs41ZFOIJOThkYK14XGOdRyWkeGetbOUggRJCyK7Q
1pF7yKDB4kVnPRDgKR3jJ/0NdDz8o45rdBEX/qnZT5gF929f9BdLRf0RWHXb/j8z
xGII8X3CMKq+xEsb49uQp/EiLCXHWBbX15qgQ5F8VjXl+/lHV7CMaO5z+kSW6Yx5
XJttc4azYGyFkUWBkPvlt+6G64DCz3LxsidWZQAJzhdOKfs+L9y2KgK3zyE+P20l
T2lWGugNha/3LqQYVDMzDeFSZOEMAmalqt+qMYRsT7pO3FwkbgRieAwryQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGQ6gfqB1HNjsl93kKzdVxkLOUzMB8GA1UdIwQY
MBaAFFM5CxPJ70r8/QgSQRHm9j3DAWWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84OWM0YWItOTg0Yi00ZjZjLWJkZDAt
MzNkN2FjMzcwOTc5LzEvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84OWM0YWItOTg0Yi00ZjZjLWJkZDAtMzNkN2FjMzcwOTc5
LzEvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7bpbPiA
dSgikCwkrmeSaZ7ngrAJmJuFueXTfOwUaZmHaduf2PJqo19Nm4d1DvDlqt3Cp9z1
SCZqLlwbnMAHhhaUdFh7cGiLdUqjMA7mL0I1rsdRsHZ0Qp6/HOQnBpwtLlSNVH+5
DHLWeDIHgDO5+m3zQC8G1KDshd1S7KJ93qHTheDZbWrrMHmE1UVWiCG8oIOM52HA
VJd9Oo2xfcIxzzOrSpujGCYVfTk9LQH7FV5m1W26GBf+W+64OP8ZG2ThhMK6cnCh
D80233F/E6y+H0DbzTLBQo4UbE5BPlU0W5+kCsJix+ULidL3iZJuHC6HYU482DIB
/QNwt9KpaeugXQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:27:12 2026 by rpki-client