Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
File: Uo017K6KUozuxk3jvWO3P6QtX0o.mft (raw, json)
Hash identifier: tbsxd0PkaMsfFbclVWMPK4Qnvwg7s8bFWiwN6/gFDm0=
Subject key identifier: 89:E2:A3:B9:2B:66:25:05:CB:EE:6C:3F:27:9A:EA:D5:7F:8F:77:C5
Authority key identifier: 52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A
Certificate issuer: /CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
Certificate serial: 019F95B76D2BD4233339B4FC8C872EA2CA11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
Manifest number: 0DF5
Signing time: Fri 24 Jul 2026 20:00:53 +0000
Manifest this update: Fri 24 Jul 2026 20:00:53 +0000
Manifest next update: Sat 25 Jul 2026 20:00:53 +0000
Files and hashes: 1: Uo017K6KUozuxk3jvWO3P6QtX0o.crl (hash: nyc1cF+44DNmJDYxQq7ujD23mg7C/EXZdyqYGTHST2Q=)
2: jmmeH3G-Gl7O7CxO9eM1m6xDfME.roa (hash: Wq2XWQbDU1erZ3uKJEqO1ZrsNU8Z2zdZsF7YP6SoAlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:6d:2b:d4:23:33:39:b4:fc:8c:87:2e:a2:ca:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
Validity
Not Before: Jul 24 20:00:53 2026 GMT
Not After : Jul 25 20:00:53 2026 GMT
Subject: CN=89e2a3b92b662505cbee6c3f279aead57f8f77c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0c:1d:ef:55:fc:19:2f:dc:78:76:e6:f5:b7:
6d:7b:89:6f:55:67:b4:06:94:9a:df:1f:e4:78:fd:
8e:2e:6f:7b:ce:92:fa:5e:2c:81:64:fc:48:a6:47:
ac:ee:51:25:56:06:26:00:cf:50:e6:c2:cc:3e:48:
65:ac:ab:ff:72:93:6e:4b:49:2b:b2:44:0d:91:5d:
2f:71:68:af:90:0a:ac:cc:2e:8a:59:ee:36:51:bc:
f8:4b:c9:de:3b:a8:22:1e:58:8d:3d:16:7c:69:67:
03:1d:eb:68:93:1a:bb:7f:54:25:89:19:b9:46:94:
25:60:11:a0:59:4a:00:67:60:66:ea:d7:ae:67:1f:
26:a2:03:4a:b2:97:c2:fa:6e:bb:83:a5:a1:ab:ce:
42:bb:e7:86:96:27:0a:52:30:2b:da:e7:20:5e:10:
4a:9a:15:90:3d:cc:bd:75:ce:12:ca:c2:5e:5f:b3:
db:3d:f9:67:64:fe:24:41:58:da:20:a5:78:8f:0c:
8c:47:26:f9:30:35:8f:e4:6e:3b:eb:a4:04:1b:3a:
2b:72:1d:27:30:c1:b9:d4:83:bb:73:34:75:d6:42:
4a:61:0e:4f:19:75:b1:34:7e:1a:93:21:fa:53:5a:
97:2f:4d:45:25:2e:91:2c:ef:15:6d:61:a1:1c:7a:
c7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E2:A3:B9:2B:66:25:05:CB:EE:6C:3F:27:9A:EA:D5:7F:8F:77:C5
X509v3 Authority Key Identifier:
keyid:52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ad:32:e4:44:f4:f9:08:b1:2e:c2:d1:a4:26:c6:9f:69:be:
c7:d6:8a:b1:52:87:ab:6d:a3:93:4a:d3:24:2b:9c:07:b0:b3:
d1:08:1a:4a:05:be:3b:d5:61:dc:2e:ea:99:51:db:47:01:ee:
db:09:46:7e:d3:4b:66:0b:26:4e:12:b7:3d:c9:67:7d:1c:cd:
ef:ab:cd:06:3e:ca:b9:da:27:bc:2e:f0:0d:1f:28:b3:b0:36:
16:e7:e1:e7:75:4d:72:c3:5d:c7:b5:36:6c:6c:37:86:b6:3c:
37:bf:2c:13:e5:cf:25:30:43:e6:34:b5:05:82:2e:20:af:fb:
14:9c:a1:19:b1:93:fc:80:b5:24:ba:83:84:c1:b5:e0:0e:36:
54:27:4a:1f:5b:04:29:80:f4:85:2a:ff:c6:d1:76:18:d0:8f:
6a:0f:94:ce:5d:80:22:da:63:15:da:ae:18:14:e4:02:a6:1b:
f5:70:1e:57:21:04:99:b6:81:c4:43:27:5d:da:b6:f4:8e:02:
95:83:3d:65:98:b1:c7:60:22:15:75:e6:37:1d:96:8b:1c:ea:
e1:e6:a0:70:34:46:a5:c0:ef:af:40:88:bf:dc:a8:41:f3:23:
35:23:6c:8d:ba:63:80:61:4c:b5:e8:27:b4:e3:3e:68:e1:36:
ba:f2:85:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Vt20r1CMzObT8jIcuosoRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyOGQzNWVjYWU4YTUyOGNlZWM2NGRlM2JkNjNiNzNmYTQy
ZDVmNGEwHhcNMjYwNzI0MjAwMDUzWhcNMjYwNzI1MjAwMDUzWjAzMTEwLwYDVQQD
Eyg4OWUyYTNiOTJiNjYyNTA1Y2JlZTZjM2YyNzlhZWFkNTdmOGY3N2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAwd71X8GS/ceHbm9bdte4lvVWe0
BpSa3x/keP2OLm97zpL6XiyBZPxIpkes7lElVgYmAM9Q5sLMPkhlrKv/cpNuS0kr
skQNkV0vcWivkAqszC6KWe42Ubz4S8neO6giHliNPRZ8aWcDHetokxq7f1QliRm5
RpQlYBGgWUoAZ2Bm6teuZx8mogNKspfC+m67g6Whq85Cu+eGlicKUjAr2ucgXhBK
mhWQPcy9dc4SysJeX7PbPflnZP4kQVjaIKV4jwyMRyb5MDWP5G4766QEGzorch0n
MMG51IO7czR11kJKYQ5PGXWxNH4akyH6U1qXL01FJS6RLO8VbWGhHHrHcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInio7krZiUFy+5sPyea6tV/j3fFMB8GA1UdIwQY
MBaAFFKNNeyuilKM7sZN471jtz+kLV9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW8wMTdLNktVb3p1eGszanZXTzNQNlF0WDBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8zMDNhNDMtYTE4NS00OTczLTg2YWIt
N2EzNzIwZDNjZmZjLzEvVW8wMTdLNktVb3p1eGszanZXTzNQNlF0WDBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8zMDNhNDMtYTE4NS00OTczLTg2YWItN2EzNzIwZDNjZmZj
LzEvVW8wMTdLNktVb3p1eGszanZXTzNQNlF0WDBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADK0y5ET0
+QixLsLRpCbGn2m+x9aKsVKHq22jk0rTJCucB7Cz0QgaSgW+O9Vh3C7qmVHbRwHu
2wlGftNLZgsmThK3PclnfRzN76vNBj7KudonvC7wDR8os7A2Fufh53VNcsNdx7U2
bGw3hrY8N78sE+XPJTBD5jS1BYIuIK/7FJyhGbGT/IC1JLqDhMG14A42VCdKH1sE
KYD0hSr/xtF2GNCPag+Uzl2AItpjFdquGBTkAqYb9XAeVyEEmbaBxEMnXdq29I4C
lYM9ZZixx2AiFXXmNx2Wixzq4eagcDRGpcDvr0CIv9yoQfMjNSNsjbpjgGFMtegn
tOM+aOE2uvKFew==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:03 2026 by rpki-client