Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
File: UzXKxwoZioXzJL_toPNe15kcKus.mft (raw, json)
Hash identifier: JXnciQMXglEz5UfWzOlCsAZSk7lQvfK/wBkwb7aRQXk=
Subject key identifier: 7F:CB:3A:23:33:6E:CB:76:81:18:B1:94:AC:1D:77:05:5B:26:31:0C
Authority key identifier: 53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
Certificate issuer: /CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Certificate serial: 019D292993A94D813853E29A8BCE5E0EF1DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
Manifest number: 03D7
Signing time: Thu 26 Mar 2026 08:01:23 +0000
Manifest this update: Thu 26 Mar 2026 08:01:23 +0000
Manifest next update: Fri 27 Mar 2026 08:01:23 +0000
Files and hashes: 1: UzXKxwoZioXzJL_toPNe15kcKus.crl (hash: DdfW5B5LhQFQ7PN7qWZa8u+TADfVpWo/xfjvchkFjP8=)
2: u2I4q7xBL8mYLta1M7INCxZpXAY.roa (hash: 3ZlXswl10jzu9dupP4EFIogY6nOqpccwvTneFAi7+uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:93:a9:4d:81:38:53:e2:9a:8b:ce:5e:0e:f1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Validity
Not Before: Mar 26 08:01:23 2026 GMT
Not After : Mar 27 08:01:23 2026 GMT
Subject: CN=7fcb3a23336ecb768118b194ac1d77055b26310c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:18:9a:3c:bb:f4:d7:fa:1f:5e:b7:ad:86:54:
5c:64:b2:fc:26:86:fe:22:80:50:a1:90:54:c4:2f:
bd:8f:38:e9:ec:c1:78:01:b2:07:3d:19:d8:67:92:
d2:75:a3:9d:ac:87:8d:e5:32:0d:ed:fe:97:9a:a5:
01:b8:ca:7c:82:ae:7b:bd:a7:d4:a8:b4:8d:0e:4a:
e6:0a:8d:ea:1d:f8:87:f4:39:6b:f1:1f:0b:f8:91:
d7:b7:7d:ed:42:e6:4e:90:69:cf:2e:00:fd:00:cb:
1e:5f:d9:2e:c6:58:fe:1b:71:44:0e:6a:e8:d2:f3:
1e:0f:cb:4f:16:e4:d7:41:18:6c:a1:60:be:75:3f:
ec:cd:62:4b:89:6f:17:e9:f6:4b:6f:7b:ac:42:e6:
16:03:78:db:34:3f:1e:95:9f:89:54:43:fd:fd:9b:
90:5c:4d:f0:c9:50:ca:e7:31:83:b0:1c:8a:1f:0c:
8e:52:44:c5:d1:62:85:c7:80:bb:a6:25:99:41:5a:
b6:a7:be:09:c2:08:56:4e:34:46:b1:b5:38:1e:8f:
79:7f:35:52:a0:ef:f4:3b:a5:7d:96:c8:5f:30:8c:
84:d7:9f:32:ea:94:dc:b9:44:22:d0:f2:78:7e:7d:
19:84:e2:46:e1:48:ed:ca:f6:49:51:02:2b:d4:f2:
78:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CB:3A:23:33:6E:CB:76:81:18:B1:94:AC:1D:77:05:5B:26:31:0C
X509v3 Authority Key Identifier:
keyid:53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:49:87:f7:1c:8a:ed:9c:22:65:54:81:50:e1:d2:b6:65:36:
a3:d7:34:43:2c:67:bf:5a:46:f2:c7:33:89:be:d3:d2:0c:2a:
92:e9:ba:13:8a:26:31:08:13:01:ca:fc:43:4b:a8:ee:99:24:
cb:fc:39:51:fb:42:5a:54:11:4d:59:bd:2e:9f:88:c9:72:10:
49:39:d2:27:a3:10:4c:96:55:eb:1a:ce:40:6b:ad:4b:51:d1:
59:fe:8a:da:06:35:02:24:03:2c:df:a8:5a:56:fd:02:ec:f4:
29:ee:ec:c1:67:a8:e6:c8:0a:66:86:ae:8a:49:9b:2b:8e:0f:
59:66:54:b6:89:07:13:ed:86:d7:66:a8:d1:17:9b:7b:d5:6a:
e9:50:b3:6b:5c:61:d1:84:4e:1d:1f:74:6d:0d:05:ec:c8:66:
c9:f6:4e:41:20:ba:c0:9c:95:bc:06:25:f9:f5:d0:54:dd:6c:
71:c3:8b:b4:1a:9d:17:9f:f1:8e:13:5e:4e:4e:2c:fa:8e:d0:
72:d7:4e:3a:54:5f:7c:f5:dd:00:0a:17:5b:84:30:9e:ec:e0:
3e:02:e4:57:36:12:a6:1c:99:32:28:73:48:aa:3f:59:12:a8:
2e:75:e9:61:61:fc:e6:8f:f2:b6:2c:d1:0b:04:16:d8:ba:90:
19:36:55:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:32:06 2026 by rpki-client