Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.mft
File: UWyzDNsJEok_oG5StXA266007_g.mft (raw, json)
Hash identifier: hIpg9RpBp9ENDgz4FdSA5KZ2q+cwZojErwlL1OP4xig=
Subject key identifier: 14:10:72:AB:F3:49:66:F3:9A:18:C6:F1:2E:85:72:D2:4C:C7:F7:4B
Authority key identifier: 51:6C:B3:0C:DB:09:12:89:3F:A0:6E:52:B5:70:36:EB:AD:34:EF:F8
Certificate issuer: /CN=516cb30cdb0912893fa06e52b57036ebad34eff8
Certificate serial: 01A11296FDB5AAB61A87C71DE9E626D8B35D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWyzDNsJEok_oG5StXA266007_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.mft
Manifest number: 0198
Signing time: Tue 06 Oct 2026 19:00:47 +0000
Manifest this update: Tue 06 Oct 2026 19:00:47 +0000
Manifest next update: Wed 07 Oct 2026 19:00:47 +0000
Files and hashes: 1: UWyzDNsJEok_oG5StXA266007_g.crl (hash: 1Z4lSRl0q+lo0J1+GnbvaG/n5iflLXzeBM4zs62vCik=)
2: dHTSZG8TdSuv5jgCShEUGqyvGiw.roa (hash: +ZC5a7s6sH7l7SttQEXeVRNgey70bU4V9g0KHoqIO/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/UWyzDNsJEok_oG5StXA266007_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:96:fd:b5:aa:b6:1a:87:c7:1d:e9:e6:26:d8:b3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=516cb30cdb0912893fa06e52b57036ebad34eff8
Validity
Not Before: Oct 6 19:00:47 2026 GMT
Not After : Oct 7 19:00:47 2026 GMT
Subject: CN=141072abf34966f39a18c6f12e8572d24cc7f74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:fe:66:00:bb:0b:44:1b:66:63:83:23:63:
97:aa:41:9c:3a:97:2e:38:7e:87:ab:b6:ac:c9:af:
42:9f:95:fd:f0:4f:8e:97:c3:9a:6e:08:6d:1b:8f:
7d:09:54:1f:da:f6:c0:7b:9e:83:3a:3f:0e:c2:59:
e2:ec:ba:34:c6:05:61:0f:5c:61:f9:75:ae:4e:3e:
04:45:c6:96:43:15:25:d1:c1:c2:40:65:9f:1a:f6:
b7:04:bb:86:aa:e0:d0:41:fa:0b:45:35:b6:d3:4a:
6e:ae:bb:4b:18:83:ed:b5:7e:b0:c4:75:16:0b:d6:
1a:51:1d:69:db:d9:9e:37:f5:9b:f1:57:ed:87:3f:
e4:d7:5c:c3:8d:b8:30:58:cf:b9:49:86:52:9d:85:
bf:3d:61:35:da:35:86:66:37:de:87:93:76:3e:6c:
ef:48:1d:20:71:a5:4b:bf:c3:26:05:63:be:d0:c0:
e5:2b:81:c2:50:d1:89:c2:72:f0:31:db:fb:cb:6f:
0e:96:0f:41:88:67:8e:bc:d0:cc:74:b8:44:d8:75:
77:5b:92:ef:2c:fe:93:3b:f1:c4:18:dd:c3:89:32:
76:ac:3f:71:9d:16:03:47:9c:3c:47:c2:df:46:63:
46:18:c3:66:db:6f:ae:09:e6:6b:70:f8:ac:d7:3e:
48:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:10:72:AB:F3:49:66:F3:9A:18:C6:F1:2E:85:72:D2:4C:C7:F7:4B
X509v3 Authority Key Identifier:
keyid:51:6C:B3:0C:DB:09:12:89:3F:A0:6E:52:B5:70:36:EB:AD:34:EF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWyzDNsJEok_oG5StXA266007_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:42:6a:d1:65:4d:e5:22:58:db:87:64:70:9a:65:15:42:67:
7f:cb:4d:9b:ba:9e:a5:f2:f2:a5:e0:9f:c1:57:8b:87:58:dc:
28:a4:ad:27:ce:14:90:aa:2c:e1:6c:e3:c5:76:fa:ed:f5:f9:
40:ee:e1:d4:a8:0e:31:bc:85:a2:62:ac:1f:16:f8:29:9d:9b:
95:f1:e1:2d:89:b1:40:03:67:3b:7f:37:25:c7:84:83:f3:09:
07:1c:19:8a:1e:b5:45:25:1d:0b:93:1c:b6:64:e0:53:0e:02:
1f:c4:c3:df:fa:11:31:f3:0f:b2:1c:7e:52:da:8d:96:7a:be:
a3:9a:b0:44:af:cd:d9:a4:bf:bb:9c:eb:c0:a7:da:fc:36:77:
cf:e7:cd:b7:b4:9b:f1:3a:7c:02:40:b2:0e:9b:75:74:1c:3b:
7f:57:fd:e1:44:86:54:c6:97:bb:60:cf:24:de:ee:bd:57:ed:
b7:a1:60:56:0d:86:23:0a:1e:56:2d:ca:66:ae:fd:15:4a:53:
33:b2:25:99:e5:8e:2b:9e:38:e8:f0:75:8a:b0:36:55:0d:de:
f2:64:be:2a:21:7e:6a:c3:b5:dd:bb:74:ab:d2:8a:00:aa:56:
21:77:b8:0c:48:2d:38:33:28:d2:6b:48:13:4f:88:e7:bf:0e:
4c:cf:f7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 03:37:47 2026 by rpki-client