Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.mft
File: UWyzDNsJEok_oG5StXA266007_g.mft (raw, json)
Hash identifier: zeco24r6ZMCuSuSSLipRAhRe6N9l50euC9sQWzzuUKk=
Subject key identifier: F9:F7:21:7B:1A:76:C5:2A:21:85:8F:50:03:19:F6:40:41:7D:1D:2F
Authority key identifier: 51:6C:B3:0C:DB:09:12:89:3F:A0:6E:52:B5:70:36:EB:AD:34:EF:F8
Certificate issuer: /CN=516cb30cdb0912893fa06e52b57036ebad34eff8
Certificate serial: 019F92491ADE3AD26E277E70139ADD6123D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWyzDNsJEok_oG5StXA266007_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.mft
Manifest number: D1
Signing time: Fri 24 Jul 2026 04:01:32 +0000
Manifest this update: Fri 24 Jul 2026 04:01:32 +0000
Manifest next update: Sat 25 Jul 2026 04:01:32 +0000
Files and hashes: 1: UWyzDNsJEok_oG5StXA266007_g.crl (hash: WDTy7zQ5CVPwSz++YHrM/SyQ7v1lSstFGhJlryiL/HE=)
2: dHTSZG8TdSuv5jgCShEUGqyvGiw.roa (hash: +ZC5a7s6sH7l7SttQEXeVRNgey70bU4V9g0KHoqIO/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/UWyzDNsJEok_oG5StXA266007_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:49:1a:de:3a:d2:6e:27:7e:70:13:9a:dd:61:23:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=516cb30cdb0912893fa06e52b57036ebad34eff8
Validity
Not Before: Jul 24 04:01:32 2026 GMT
Not After : Jul 25 04:01:32 2026 GMT
Subject: CN=f9f7217b1a76c52a21858f500319f640417d1d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6b:ba:7a:fb:c6:a4:87:db:a9:3e:14:5a:e8:
0c:63:0f:af:21:dd:f7:1e:44:d4:f6:79:db:68:2d:
a3:5b:97:37:76:51:c2:9d:5f:f9:f7:72:68:56:3b:
24:93:65:df:57:80:c9:8e:1b:2c:99:d0:26:1e:a8:
29:b6:ff:89:87:91:87:ba:46:51:7b:3d:cb:7d:f6:
35:89:61:22:31:f4:3c:27:a9:03:21:d8:46:96:bf:
48:50:67:14:8a:c0:1f:89:9f:2b:42:ff:dc:ea:c6:
5b:fd:fa:35:63:8d:4c:71:0e:a1:51:d3:51:20:d6:
ef:db:43:8a:3e:46:53:68:c1:e6:9e:76:e9:8c:f8:
12:96:b5:16:74:0c:d1:0f:45:1c:87:cf:71:31:7f:
00:eb:05:a4:f2:91:88:a1:44:f2:8d:73:de:90:66:
e9:d4:d3:a8:73:cc:41:9b:ec:d2:ce:74:b2:19:13:
c3:5f:7f:7d:d2:60:9f:f3:ca:93:27:8c:55:ea:b0:
79:98:4e:a2:87:72:5f:83:90:10:aa:f4:b2:aa:b3:
26:08:f2:35:bb:b6:3e:86:5a:16:17:57:1d:aa:22:
f2:f2:f7:c9:f1:73:41:ad:50:87:77:3d:1a:fb:26:
71:e1:4a:56:c9:a5:c8:ad:3c:06:f6:a9:49:61:1a:
a9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F7:21:7B:1A:76:C5:2A:21:85:8F:50:03:19:F6:40:41:7D:1D:2F
X509v3 Authority Key Identifier:
keyid:51:6C:B3:0C:DB:09:12:89:3F:A0:6E:52:B5:70:36:EB:AD:34:EF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWyzDNsJEok_oG5StXA266007_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5e:14:98:72:2b:25:48:95:a3:f6:e1:03:04:be:d4:50:0c:
d9:e2:9d:35:fa:ea:6e:ca:af:89:57:37:b7:ec:f2:ec:0f:f4:
4e:4d:f8:84:00:db:75:06:c7:57:57:86:8d:55:ee:f1:c7:6d:
6c:20:b5:1e:79:66:ab:1e:81:8b:c8:0e:a2:af:fe:69:73:30:
e0:1a:ba:47:e3:c9:96:d7:e8:85:6c:12:5f:06:3f:3b:0e:ee:
9e:09:94:0c:7c:7a:e5:3c:fc:eb:e4:a0:72:46:15:a1:47:a3:
69:1b:86:cf:bf:02:e2:1a:14:18:49:6e:9e:09:2d:c4:ba:51:
7a:97:74:9c:ed:9f:53:34:35:de:06:d3:4c:d9:c0:da:d1:e2:
76:bd:cb:b6:75:a7:81:f8:2e:0f:3d:d9:a5:60:33:42:2a:2d:
24:35:94:07:8f:0a:45:08:3b:4d:ba:23:7f:b9:b8:b7:df:67:
6d:b9:18:3a:d4:a6:37:bf:a6:b9:40:2e:a7:ce:85:7f:9c:ef:
c8:6b:2f:be:3e:7c:e8:c2:47:ba:d1:aa:e9:47:fd:67:81:a0:
d3:2f:ce:16:8e:5f:e1:1a:ab:6c:e0:77:c7:44:ae:5b:9b:c6:
de:ba:c2:66:2d:77:43:7c:f3:eb:58:ec:a3:9d:8d:57:e1:6e:
44:da:80:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSRreOtJuJ35wE5rdYSPUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNmNiMzBjZGIwOTEyODkzZmEwNmU1MmI1NzAzNmViYWQz
NGVmZjgwHhcNMjYwNzI0MDQwMTMyWhcNMjYwNzI1MDQwMTMyWjAzMTEwLwYDVQQD
EyhmOWY3MjE3YjFhNzZjNTJhMjE4NThmNTAwMzE5ZjY0MDQxN2QxZDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Wu6evvGpIfbqT4UWugMYw+vId33
HkTU9nnbaC2jW5c3dlHCnV/593JoVjskk2XfV4DJjhssmdAmHqgptv+Jh5GHukZR
ez3LffY1iWEiMfQ8J6kDIdhGlr9IUGcUisAfiZ8rQv/c6sZb/fo1Y41McQ6hUdNR
INbv20OKPkZTaMHmnnbpjPgSlrUWdAzRD0Uch89xMX8A6wWk8pGIoUTyjXPekGbp
1NOoc8xBm+zSznSyGRPDX3990mCf88qTJ4xV6rB5mE6ih3Jfg5AQqvSyqrMmCPI1
u7Y+hloWF1cdqiLy8vfJ8XNBrVCHdz0a+yZx4UpWyaXIrTwG9qlJYRqpowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPn3IXsadsUqIYWPUAMZ9kBBfR0vMB8GA1UdIwQY
MBaAFFFsswzbCRKJP6BuUrVwNuutNO/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVd5ekROc0pFb2tfb0c1U3RYQTI2NjAwN19nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8wZTBmNjItYzQ5YS00ZmZlLWJjNzAt
MTJjNjE3YjBmNjc0LzEvVVd5ekROc0pFb2tfb0c1U3RYQTI2NjAwN19nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8wZTBmNjItYzQ5YS00ZmZlLWJjNzAtMTJjNjE3YjBmNjc0
LzEvVVd5ekROc0pFb2tfb0c1U3RYQTI2NjAwN19nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJV4UmHIr
JUiVo/bhAwS+1FAM2eKdNfrqbsqviVc3t+zy7A/0Tk34hADbdQbHV1eGjVXu8cdt
bCC1Hnlmqx6Bi8gOoq/+aXMw4Bq6R+PJltfohWwSXwY/Ow7ungmUDHx65Tz86+Sg
ckYVoUejaRuGz78C4hoUGElungktxLpRepd0nO2fUzQ13gbTTNnA2tHidr3LtnWn
gfguDz3ZpWAzQiotJDWUB48KRQg7Tbojf7m4t99nbbkYOtSmN7+muUAup86Ff5zv
yGsvvj586MJHutGq6Uf9Z4Gg0y/OFo5f4RqrbOB3x0SuW5vG3rrCZi13Q3zz61js
o52NV+FuRNqAUA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:10:22 2026 by rpki-client