Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
File: UzXKxwoZioXzJL_toPNe15kcKus.mft (raw, json)
Hash identifier: o6kg4w2O8T9MXnQex6OQ/wDFkMFyO2qwOZ0Qjqf5fdw=
Subject key identifier: 8B:74:23:32:8C:65:CA:9C:ED:B3:65:EA:71:2B:27:69:AC:54:A5:58
Authority key identifier: 53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
Certificate issuer: /CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Certificate serial: 019F95121E3CCC50C23C6304BD9C849C2B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
Manifest number: 0518
Signing time: Fri 24 Jul 2026 17:00:20 +0000
Manifest this update: Fri 24 Jul 2026 17:00:20 +0000
Manifest next update: Sat 25 Jul 2026 17:00:20 +0000
Files and hashes: 1: UzXKxwoZioXzJL_toPNe15kcKus.crl (hash: UoEE4UXV3LlXCTSiJlSOS1+GhodcmiVwhukUgqr3ToI=)
2: u2I4q7xBL8mYLta1M7INCxZpXAY.roa (hash: 3ZlXswl10jzu9dupP4EFIogY6nOqpccwvTneFAi7+uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:1e:3c:cc:50:c2:3c:63:04:bd:9c:84:9c:2b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Validity
Not Before: Jul 24 17:00:20 2026 GMT
Not After : Jul 25 17:00:20 2026 GMT
Subject: CN=8b7423328c65ca9cedb365ea712b2769ac54a558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f8:5c:44:db:51:02:8c:41:49:4a:d3:d6:f2:
c7:26:af:fe:b7:74:df:a2:5c:10:b4:e5:19:0a:ae:
05:72:cd:fb:02:e9:2a:76:41:c4:79:3a:3e:a3:e4:
64:23:91:74:04:75:00:ea:80:96:cc:0f:5d:17:d3:
b5:7d:bb:27:50:ad:10:fe:67:62:4e:7a:39:65:00:
b8:ff:82:4a:be:3a:52:0e:80:e3:32:65:da:18:fd:
28:57:c3:a3:7a:b7:f8:7c:41:cd:f3:01:dd:21:8f:
68:00:80:2b:29:08:de:8f:30:a6:c2:72:0c:24:13:
2a:f6:29:7d:51:79:98:77:53:7c:c1:82:e0:69:c5:
23:29:39:03:73:70:c8:08:36:8c:99:94:10:1b:b1:
cb:d9:99:0b:59:03:01:80:69:6c:81:c2:e2:cb:20:
6f:aa:0b:15:e6:57:a3:a6:31:33:1c:e5:ba:53:d6:
40:57:46:09:f3:94:5e:3b:30:5a:e5:eb:b6:73:8a:
51:5c:29:42:53:d3:ec:7c:0f:61:e5:e7:40:b0:19:
35:b3:ba:4c:a8:dc:49:0a:bd:15:95:d3:91:77:23:
7f:ca:f8:52:42:4e:ec:4d:c0:98:c6:47:1e:23:70:
c9:cc:e4:f5:9b:36:4d:d6:97:fe:e1:c5:83:97:6d:
fe:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:74:23:32:8C:65:CA:9C:ED:B3:65:EA:71:2B:27:69:AC:54:A5:58
X509v3 Authority Key Identifier:
keyid:53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ec:8a:78:97:c6:ee:7d:4c:50:03:ce:e9:ba:8a:44:a9:43:
ff:f9:57:61:94:4a:0e:af:30:e2:03:74:20:6b:46:bb:1e:62:
5e:9c:58:0e:d5:01:9c:1b:d7:c2:62:8e:46:dc:38:7f:aa:d4:
53:51:e3:01:6b:a5:32:fa:d5:0e:f8:c4:3d:21:2c:3d:7c:b0:
e0:fe:78:63:d9:2d:ab:00:3b:53:94:87:0d:65:e4:b8:2c:3e:
67:b4:8c:ac:a0:2b:aa:db:4f:85:e3:80:95:df:42:95:59:6c:
0a:2a:6d:39:13:37:75:a6:4e:85:ca:79:8b:67:8a:b7:b9:b9:
2d:d8:fa:b0:3e:b9:cd:ae:98:71:6a:34:b6:32:5d:c3:87:b7:
b1:fc:7c:63:87:06:e6:4c:0d:d5:b5:24:46:7d:94:47:12:2c:
2b:1a:07:66:7d:6b:ce:ec:26:e0:3a:a3:45:89:18:fc:31:6e:
96:cb:ca:ff:bf:8a:89:40:d6:97:ad:80:e8:8a:9a:97:04:fe:
d9:6c:ae:40:57:47:93:d4:bd:6e:5a:e4:11:3b:9e:f2:39:fd:
92:10:e9:c2:6f:ba:52:4e:2c:8b:a0:8d:c1:0e:a1:42:a4:14:
00:bd:86:95:92:98:7c:34:2e:e5:ae:b0:54:e7:0f:58:40:b7:
12:46:30:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:01:14 2026 by rpki-client