Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
File: UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json)
Hash identifier: OYpi9bgDpjOjzdC+foHFEwdI95Cwl3/su4tvRxWIvrw=
Subject key identifier: 9A:6D:0A:1E:8E:91:EA:80:04:29:DA:71:08:4C:54:6C:3B:30:89:B8
Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
Certificate issuer: /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Certificate serial: 019D2A0461DA6A2265A2FCFC3EEDD73C76B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
Manifest number: 185A
Signing time: Thu 26 Mar 2026 12:00:23 +0000
Manifest this update: Thu 26 Mar 2026 12:00:23 +0000
Manifest next update: Fri 27 Mar 2026 12:00:23 +0000
Files and hashes: 1: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: zb5jSWRb0EUXKA+NspHmLxPx7vZhlppvXmjxYI1tT1Y=)
2: ZsE_mt7ku7Fr5hPoQLALle6qg7o.roa (hash: HUKBNWBBwbvfcuNQzCGO+9wjMStLGidRG99eNbwf4fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:61:da:6a:22:65:a2:fc:fc:3e:ed:d7:3c:76:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Validity
Not Before: Mar 26 12:00:23 2026 GMT
Not After : Mar 27 12:00:23 2026 GMT
Subject: CN=9a6d0a1e8e91ea800429da71084c546c3b3089b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:f2:bf:20:92:4f:7b:23:12:de:a1:82:29:
ac:62:16:71:b5:43:70:27:8c:32:61:0d:44:db:9b:
7d:23:b2:e6:4d:fb:21:4e:a4:48:53:89:52:4a:37:
de:90:1f:64:fb:a9:e4:3b:29:22:e9:62:68:70:d4:
11:b2:23:53:13:e3:4a:5b:15:89:c2:5f:c1:7b:4b:
cb:25:4c:ea:d2:d6:53:e2:19:b1:5c:64:5b:1c:f9:
67:aa:ca:24:db:c9:91:31:cf:64:cf:4c:59:ea:b7:
ef:5f:8a:52:00:78:bc:f8:82:4e:7c:5a:d9:3b:b9:
56:ae:66:f2:af:58:8d:83:83:a1:66:06:f7:ba:55:
54:a0:07:93:96:7c:ee:d4:09:21:b5:8d:f3:b4:16:
cb:ad:a4:58:e7:aa:7d:99:ec:3d:d7:fa:16:e6:3b:
46:87:ae:68:bf:52:f9:0e:10:63:cc:34:1e:08:4c:
69:8f:fd:56:54:1f:d1:fb:ee:1b:f4:f3:aa:82:9c:
f0:59:65:6a:44:74:af:0c:90:2d:c6:9f:0a:6e:b7:
c7:85:a6:eb:28:ec:2c:df:a3:82:bb:9b:34:d2:3e:
84:2f:87:bd:2e:40:25:45:81:53:36:4c:69:50:f1:
82:89:bf:a6:d5:64:c5:97:c5:ec:d5:0d:e7:a7:1c:
22:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6D:0A:1E:8E:91:EA:80:04:29:DA:71:08:4C:54:6C:3B:30:89:B8
X509v3 Authority Key Identifier:
keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:0d:4e:8d:8b:03:f8:69:b3:09:d0:d3:6e:2b:de:a4:1f:e4:
29:e7:b6:c7:6e:5c:14:75:6d:de:48:d9:fa:f4:b9:5c:35:e1:
ee:aa:f2:f1:a5:c3:a3:e3:65:d3:bb:72:a1:c9:f2:f1:4b:c4:
c3:48:76:78:90:ac:0e:1a:81:b1:07:25:a5:65:89:d1:12:ef:
86:f1:87:c5:ef:74:72:f1:f2:b0:78:8b:13:b4:c2:67:84:07:
a9:50:e0:54:1e:48:aa:bd:a4:09:9c:0e:c2:26:9c:e3:0f:4b:
45:cd:0e:af:5d:c4:00:b2:92:a9:32:0f:b3:30:8a:94:77:b8:
8f:50:1e:92:61:a9:f8:9c:59:2c:7d:41:8b:8b:a5:a9:ab:9c:
9b:fd:fa:f2:c1:79:e6:f1:6d:12:e7:c9:c7:8d:61:41:10:fa:
27:a8:fd:78:5e:fe:7a:ee:8d:ba:83:91:95:ce:e0:0d:e0:63:
b9:10:9d:4b:9a:f8:93:3e:e8:e0:37:7f:06:33:78:5a:5a:79:
24:97:57:95:a8:f9:d0:59:04:59:43:6f:8a:67:34:18:d4:07:
16:a3:b5:09:86:05:7d:51:e0:d0:ba:a4:98:86:cd:21:ba:b3:
38:59:80:f2:89:54:14:74:c5:4d:92:b5:fa:3f:98:b9:9f:1d:
51:56:b3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:36 2026 by rpki-client