Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File: UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier: rKKPJMeKLG3WrZ49vqKYWmRFQynVV/SmwE9vgbWidfU=
Subject key identifier: 93:1C:3C:A1:C8:CB:99:20:0C:D3:AF:13:11:09:EB:1F:91:82:9C:BD
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 019F946E01D38357BE6AE366DFE3C4CD55AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number: 0E72
Signing time: Fri 24 Jul 2026 14:01:05 +0000
Manifest this update: Fri 24 Jul 2026 14:01:05 +0000
Manifest next update: Sat 25 Jul 2026 14:01:05 +0000
Files and hashes: 1: 1-rvXWbfutRyQsFLB2O2HcSydvn8.roa (hash: G/bEqZr33OdbdPx/abXyN5kc0kY5EzztDY6k+nCMKOc=)
2: 3-EeXmcZRUpj5DL_Om7bylZsefk.roa (hash: kfreAir/SgzDeq1U4ZKMC+PhHkagl1wiR7E5yuELkYE=)
3: FW4uCaBEevcQCVC9KduuJAdmVkk.roa (hash: hi3CRENNqBM7ERn9MrenvqFZvgbgfilYx3/QP3Xqq4k=)
4: KQmQrJ1jEiHHjz1S_0Yk4OXG9xA.roa (hash: tpY9R1aFnUdMqsnHp8rSZAPwxdzHPsIGg6V1ZMmMnOQ=)
5: LLtX3Bw8gzc5rIoJ6gGIoEGZhvk.roa (hash: 8ZMUJCkeXZDA3JqlPtb/Z7fXVQiFb14roMzYlX1mZ98=)
6: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: n/nJQYHWbUX2VWwSvG1+r8qiKn8GyG+L+ZkYQbLY9KI=)
7: nQE3bGEbjM6OpBVVSm2YC_6oWgI.roa (hash: Ho+aVhsVcSM72ZGhR58VKNtxF0cVDscps+IEINsdQjg=)
8: zmXY1OTT6NQXEmsjJD2BX4c7b7c.roa (hash: 26+rkNPDulDua9fC+YQZGyXCc/EBwd+QOh+NkG5ORq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6e:01:d3:83:57:be:6a:e3:66:df:e3:c4:cd:55:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Jul 24 14:01:05 2026 GMT
Not After : Jul 25 14:01:05 2026 GMT
Subject: CN=931c3ca1c8cb99200cd3af131109eb1f91829cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fb:23:7c:65:ec:75:9d:ec:54:ee:7d:db:d3:
57:55:8d:78:66:a2:d4:9c:44:35:7f:d3:0c:31:5f:
70:83:26:81:c6:b5:51:14:45:c5:6d:d6:51:e8:a3:
42:a1:1a:37:66:e7:57:05:77:02:c7:da:f4:79:92:
de:16:df:fd:a2:13:91:f3:7b:1d:61:0f:0a:52:77:
ad:93:13:c5:6f:82:4b:c9:b3:37:ae:cc:11:e0:d0:
1d:48:9b:57:b5:8a:d0:e2:ce:ef:9c:1a:65:47:fa:
9a:f0:66:87:3d:b8:d1:82:41:7b:24:93:a6:7d:cb:
9f:32:94:0b:da:0e:d2:65:89:a1:03:ba:e9:3f:f3:
22:b6:fd:a4:20:32:e7:60:0e:16:89:a1:b1:ce:22:
c0:bb:50:89:95:5d:4d:04:0e:93:98:42:56:1c:3c:
6d:f5:d3:12:f1:67:45:6b:e1:8a:1f:b5:e8:07:38:
59:13:d8:70:90:15:6b:45:45:74:f2:0e:e4:24:7b:
2e:d7:f3:d5:7f:6c:a1:f8:f4:d4:94:4f:a9:2c:29:
9b:51:84:e5:9d:de:65:8c:b5:07:a5:ed:66:65:9c:
5f:89:dd:a7:49:dc:01:3a:a9:5e:9c:90:63:ba:f8:
8d:41:3b:69:c8:cc:a2:3a:88:0b:a1:67:5e:b8:05:
ad:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1C:3C:A1:C8:CB:99:20:0C:D3:AF:13:11:09:EB:1F:91:82:9C:BD
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:be:fa:c0:f3:17:60:09:aa:1f:f9:7b:9b:f0:95:46:3e:c2:
c3:16:13:fe:a6:27:f3:b9:8a:ad:64:50:56:ea:7c:4e:4a:0d:
44:16:8c:fe:fb:ff:ce:55:e2:5e:c9:54:db:1b:0a:3e:8c:5b:
7e:b2:7e:7d:25:5b:b5:e6:64:25:2d:f6:e2:f4:86:20:ef:3f:
2f:6e:80:a2:90:81:a4:66:1d:c0:6f:82:e8:ed:a2:3d:e6:8c:
ed:8a:aa:e0:7d:08:a8:06:9a:c7:c6:1a:9f:da:11:98:4c:6b:
22:c0:ba:ef:48:3b:2d:c3:02:ff:a5:aa:53:43:29:ed:05:3a:
c4:a8:fb:0a:ef:a7:8a:3f:22:a5:9d:66:5b:38:32:30:ee:60:
04:a7:09:80:fe:6a:19:e8:51:a7:60:83:db:02:fa:dc:0e:5f:
f1:45:2e:2d:32:40:d7:db:28:34:10:17:00:59:3c:e6:ca:e8:
e5:c4:53:b7:a6:a5:5e:91:64:1a:a2:f3:52:b9:37:1d:37:6e:
57:6d:af:57:7c:26:47:02:11:6d:b8:ce:fa:e8:65:8c:14:d6:
9b:79:80:87:74:65:af:bb:28:c5:af:2f:8e:66:f8:09:1d:27:
05:11:83:e5:17:5c:0d:6e:6e:a6:a6:49:af:b2:c0:d4:0e:e6:
2f:ad:cc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:12:15 2026 by rpki-client