Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
File: UzXKxwoZioXzJL_toPNe15kcKus.mft (raw, json)
Hash identifier: KOCl6iSHCeA+2+yH73n7X0D1m3PRfne2u5GKQD+X7wI=
Subject key identifier: B0:28:DA:6D:E8:AC:AF:A2:F5:A2:4C:DE:D2:15:B4:5D:A8:35:D8:06
Authority key identifier: 53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
Certificate issuer: /CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Certificate serial: 019E205A8DF88AF649679F9189064100ABD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
Manifest number: 0457
Signing time: Wed 13 May 2026 08:01:05 +0000
Manifest this update: Wed 13 May 2026 08:01:05 +0000
Manifest next update: Thu 14 May 2026 08:01:05 +0000
Files and hashes: 1: UzXKxwoZioXzJL_toPNe15kcKus.crl (hash: l6Vg6LsDnfUmxEQJTdf72kwGZoQApOcco6UVaxmxjuE=)
2: u2I4q7xBL8mYLta1M7INCxZpXAY.roa (hash: 3ZlXswl10jzu9dupP4EFIogY6nOqpccwvTneFAi7+uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:8d:f8:8a:f6:49:67:9f:91:89:06:41:00:ab:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Validity
Not Before: May 13 08:01:05 2026 GMT
Not After : May 14 08:01:05 2026 GMT
Subject: CN=b028da6de8acafa2f5a24cded215b45da835d806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0d:ad:7d:e7:59:8d:a4:b3:3f:97:ab:07:17:
ca:ca:62:31:d8:40:68:56:ba:56:5a:d2:70:48:2f:
03:f7:20:9f:37:78:9c:2a:3a:a4:21:d4:c4:13:56:
f6:e0:cc:f0:78:2b:fd:dc:d6:e8:98:74:71:03:64:
bd:29:d5:5e:e6:09:d3:e6:d9:7f:4a:1e:21:cb:d1:
08:b4:c3:74:fa:b3:57:e4:99:6f:00:99:b7:61:b5:
30:19:27:cd:8d:a9:0d:92:53:1c:65:1e:b1:51:91:
31:e6:9f:21:86:08:be:5c:c7:0f:93:74:9c:4c:cf:
58:ea:80:87:50:53:3c:63:fc:5f:96:da:49:f0:33:
a8:d5:b1:d0:af:36:72:17:0a:f4:0d:70:1b:15:42:
5b:d6:bd:0d:6c:39:97:24:8c:e7:bd:c7:5c:58:bb:
ae:e5:39:0f:ee:36:b2:d4:92:e9:aa:70:e8:62:1f:
e7:a8:0c:5b:5f:26:ae:08:70:e9:bb:db:28:f0:bb:
4a:89:1f:fd:e1:4d:61:1a:f1:2d:c1:7f:20:46:7a:
72:2a:02:d4:6f:35:05:58:43:58:ad:b4:7b:d7:ee:
77:c8:43:a4:db:0a:04:8c:e3:b7:61:1d:47:7d:35:
72:f2:f6:78:9d:77:c7:fb:33:a7:5c:55:4b:c2:56:
bc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:28:DA:6D:E8:AC:AF:A2:F5:A2:4C:DE:D2:15:B4:5D:A8:35:D8:06
X509v3 Authority Key Identifier:
keyid:53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:24:ae:19:14:9a:e4:a3:4d:54:3a:cc:42:4f:25:4e:a5:44:
f1:77:66:6c:87:8c:dd:54:ce:12:7c:99:f1:8e:6c:d5:1c:74:
cd:17:10:40:e8:98:fe:52:c6:8e:e5:16:80:ac:ab:8e:c5:26:
1d:d2:9c:c4:ef:cb:fb:31:9c:c6:a8:e9:f0:9a:53:aa:e1:be:
f5:ec:14:fc:c0:ab:c9:2a:1d:de:6a:89:96:1f:20:64:6c:69:
71:fd:89:5f:83:a0:7c:98:c4:3a:a2:35:29:f9:c9:7d:37:05:
1b:1b:a7:38:77:4a:81:c4:9b:a8:ac:c7:78:75:4b:8f:25:17:
dd:18:08:fe:b2:65:45:43:be:1d:39:15:62:3b:1b:eb:7a:91:
7e:f6:0c:17:ee:2a:94:87:ed:42:6c:8e:90:f7:16:31:14:b8:
01:42:82:eb:8c:41:b6:0f:3d:c3:fa:4c:6f:98:4a:41:43:22:
11:c6:77:d8:08:e4:77:67:bd:87:b8:01:39:66:8f:00:ea:71:
40:85:0a:fe:6f:4c:64:e0:f5:59:80:5e:eb:de:3d:c8:e0:52:
04:63:3f:41:af:a4:4e:da:f0:27:85:b0:32:4f:05:cb:38:9d:
49:d8:c5:0e:4f:69:32:10:ae:cb:63:b9:7c:d3:44:1e:02:9b:
34:eb:ce:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:51:35 2026 by rpki-client