Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
File: UzXKxwoZioXzJL_toPNe15kcKus.mft (raw, json)
Hash identifier: yf3bignAfn9RxH8twNyo26q971QN1pX0NGBG0h3A29s=
Subject key identifier: EB:F5:02:C3:A4:83:C5:77:8D:B0:B8:48:B7:C8:F2:A0:28:69:51:71
Authority key identifier: 53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
Certificate issuer: /CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Certificate serial: 01A0E709F6859102344A390F6BFAEFF52379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
Manifest number: 05C7
Signing time: Mon 28 Sep 2026 08:03:04 +0000
Manifest this update: Mon 28 Sep 2026 08:03:04 +0000
Manifest next update: Tue 29 Sep 2026 08:03:04 +0000
Files and hashes: 1: UzXKxwoZioXzJL_toPNe15kcKus.crl (hash: cAhQLrxG1q0qG9o6yMkPCdXBl4b43nkaUYBL88p7cS0=)
2: u2I4q7xBL8mYLta1M7INCxZpXAY.roa (hash: 3ZlXswl10jzu9dupP4EFIogY6nOqpccwvTneFAi7+uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:09:f6:85:91:02:34:4a:39:0f:6b:fa:ef:f5:23:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Validity
Not Before: Sep 28 08:03:04 2026 GMT
Not After : Sep 29 08:03:04 2026 GMT
Subject: CN=ebf502c3a483c5778db0b848b7c8f2a028695171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f5:89:dc:5a:09:d2:13:32:d5:7b:df:e6:e2:
81:67:47:f1:b6:7d:65:b6:83:94:63:3c:6c:94:64:
ad:25:af:ce:6f:da:18:07:a6:3f:db:3a:ba:45:bb:
13:f0:8f:54:67:50:7f:81:a2:e1:b6:ec:ec:32:20:
18:64:2b:22:b3:fc:24:60:d4:70:ab:c5:27:c0:83:
d0:ed:e3:c3:48:ea:2c:8d:47:b5:99:be:5f:9a:62:
8c:fc:36:82:47:f2:ba:28:77:24:2f:42:30:08:a1:
50:26:f0:7b:d6:e7:d3:31:07:6b:13:3c:e2:e0:61:
d9:b5:00:24:bb:50:53:c9:46:ca:2d:8d:7c:1d:30:
42:7c:65:7e:ec:23:39:4f:10:b8:b8:10:e3:71:de:
ed:8a:84:1f:ea:e7:3a:be:98:40:ba:d3:5b:9e:90:
08:7f:1d:6b:c3:fc:20:7a:30:23:1f:1c:21:85:79:
ab:49:56:c2:bd:11:9d:16:9b:88:04:c0:59:a2:82:
f3:77:2e:d8:f7:f7:1f:a1:b7:8e:ee:2c:f9:1a:3a:
b1:36:ef:ae:20:19:d0:1e:cd:8b:3d:b7:00:31:77:
ad:d4:12:89:1f:13:27:e2:a8:7a:ca:b9:05:d7:e0:
8d:0e:e4:70:3f:4e:e5:48:f4:be:e2:71:79:9e:68:
26:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F5:02:C3:A4:83:C5:77:8D:B0:B8:48:B7:C8:F2:A0:28:69:51:71
X509v3 Authority Key Identifier:
keyid:53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:64:40:30:da:6a:99:d4:d1:93:19:6d:ba:67:4b:48:f3:fc:
89:5c:08:43:9d:36:6f:83:9e:43:fe:91:01:ab:48:0f:2f:ae:
29:5b:99:e9:e3:5a:b6:99:e5:6d:64:c3:d1:f7:3e:31:35:39:
f6:73:40:c6:ae:1e:f1:0b:75:7b:3b:e3:d2:cf:1a:03:6d:55:
0f:90:ba:d6:db:a5:98:47:f5:b2:f9:0a:25:4c:03:66:51:b9:
0c:5c:35:fb:3a:59:a5:bc:e7:dc:d1:64:08:bb:9a:5c:84:dc:
12:7d:b0:c2:b6:ba:3b:36:3d:71:0c:be:ad:6f:11:2a:22:bf:
c0:79:7a:8b:50:75:9a:5e:ee:c0:c0:45:c0:b3:dd:7a:13:b2:
77:78:5d:92:10:f3:e9:89:d4:25:7b:58:2a:33:65:0c:ce:48:
46:f3:d9:35:14:e7:2e:aa:c5:22:d0:12:43:be:05:61:f3:04:
e1:8e:54:85:6d:23:5a:d2:0b:3c:38:1a:83:82:cb:b9:bf:8e:
4c:c8:30:e8:08:d8:21:ae:15:bd:ff:87:19:88:a3:9e:33:26:
ec:75:da:a9:3f:f6:91:08:5e:c7:9f:f5:5c:48:4e:6f:ab:f1:
bc:be:43:3a:03:cc:8a:2f:a0:65:c1:66:55:fc:11:93:0d:64:
5d:89:1b:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDnCfaFkQI0SjkPa/rv9SN5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzVjYWM3MGExOThhODVmMzI0YmZlZGEwZjM1ZWQ3OTkx
YzJhZWIwHhcNMjYwOTI4MDgwMzA0WhcNMjYwOTI5MDgwMzA0WjAzMTEwLwYDVQQD
EyhlYmY1MDJjM2E0ODNjNTc3OGRiMGI4NDhiN2M4ZjJhMDI4Njk1MTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvWJ3FoJ0hMy1Xvf5uKBZ0fxtn1l
toOUYzxslGStJa/Ob9oYB6Y/2zq6RbsT8I9UZ1B/gaLhtuzsMiAYZCsis/wkYNRw
q8UnwIPQ7ePDSOosjUe1mb5fmmKM/DaCR/K6KHckL0IwCKFQJvB71ufTMQdrEzzi
4GHZtQAku1BTyUbKLY18HTBCfGV+7CM5TxC4uBDjcd7tioQf6uc6vphAutNbnpAI
fx1rw/wgejAjHxwhhXmrSVbCvRGdFpuIBMBZooLzdy7Y9/cfobeO7iz5GjqxNu+u
IBnQHs2LPbcAMXet1BKJHxMn4qh6yrkF1+CNDuRwP07lSPS+4nF5nmgmKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOv1AsOkg8V3jbC4SLfI8qAoaVFxMB8GA1UdIwQY
MBaAFFM1yscKGYqF8yS/7aDzXteZHCrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXpYS3h3b1ppb1h6SkxfdG9QTmUxNWtjS3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MGNmM2UtZDQ2OC00NDNjLWFmYTQt
ZjM0YThmNzJlZWM0LzEvVXpYS3h3b1ppb1h6SkxfdG9QTmUxNWtjS3VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi85MGNmM2UtZDQ2OC00NDNjLWFmYTQtZjM0YThmNzJlZWM0
LzEvVXpYS3h3b1ppb1h6SkxfdG9QTmUxNWtjS3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGRAMNpq
mdTRkxltumdLSPP8iVwIQ502b4OeQ/6RAatIDy+uKVuZ6eNatpnlbWTD0fc+MTU5
9nNAxq4e8Qt1ezvj0s8aA21VD5C61tulmEf1svkKJUwDZlG5DFw1+zpZpbzn3NFk
CLuaXITcEn2wwra6OzY9cQy+rW8RKiK/wHl6i1B1ml7uwMBFwLPdehOyd3hdkhDz
6YnUJXtYKjNlDM5IRvPZNRTnLqrFItASQ74FYfME4Y5UhW0jWtILPDgag4LLub+O
TMgw6AjYIa4Vvf+HGYijnjMm7HXaqT/2kQhex5/1XEhOb6vxvL5DOgPMii+gZcFm
VfwRkw1kXYkbZw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 14:31:05 2026 by rpki-client