Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
File: UzYQcXlxVgncpCK8B6CYRoxSlFI.mft (raw, json)
Hash identifier: rsQxKTq+MrwBAHGzTKkk9Y1E2JCQQ8X1TUZ676Zly3M=
Subject key identifier: 36:F3:10:6B:D4:04:29:D7:8E:0A:08:DC:3A:D6:7E:D4:6E:07:DC:87
Authority key identifier: 53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
Certificate issuer: /CN=5336107179715609dca422bc07a098468c529452
Certificate serial: 019E1EA33F033471B97A17AC082A8CDFC26C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
Manifest number: 1916
Signing time: Wed 13 May 2026 00:01:15 +0000
Manifest this update: Wed 13 May 2026 00:01:15 +0000
Manifest next update: Thu 14 May 2026 00:01:15 +0000
Files and hashes: 1: 37nBPcU451HQlUl0uacWDYQGvA8.roa (hash: TDhIz0QGXINJqgJRTB4Yk7ckzNjSTwoBFWF/TjcxIyc=)
2: UzYQcXlxVgncpCK8B6CYRoxSlFI.crl (hash: 5Q6kTvzXZ7ZHH7AP+kplwhh4HIizbINKdu4E9vBKs28=)
3: ejQtF-IJAcPUsJm2Grb30Iqg1lM.roa (hash: PAnCTRg2QzsK95CrphYN3Z21jLVwZm4bozxHdK4npEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:3f:03:34:71:b9:7a:17:ac:08:2a:8c:df:c2:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336107179715609dca422bc07a098468c529452
Validity
Not Before: May 13 00:01:15 2026 GMT
Not After : May 14 00:01:15 2026 GMT
Subject: CN=36f3106bd40429d78e0a08dc3ad67ed46e07dc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:04:e4:e0:c5:5f:3b:a0:e5:b3:b7:26:31:72:
a6:dd:3b:c1:c2:70:b3:f6:24:4d:14:dc:f2:46:02:
95:12:ca:67:b3:cd:7b:fb:c5:0b:05:f3:30:8c:40:
7e:eb:ff:e4:00:4b:78:b3:4f:78:0e:72:0f:e3:34:
00:8e:94:fd:11:7c:e4:60:75:de:ac:69:87:6c:fb:
f2:cb:48:42:ff:30:f4:c1:ca:77:b3:60:1f:6b:fd:
f1:ec:7e:76:aa:63:ad:d0:c2:a5:34:9f:93:eb:97:
9a:e3:d5:81:87:70:d4:89:9b:fe:a5:96:82:32:71:
91:04:71:0b:54:13:68:95:da:46:d2:a8:98:19:1f:
f4:db:5c:d5:d7:51:77:e0:d5:58:04:f9:db:2d:85:
49:8f:3e:72:42:7e:ca:ad:33:a6:44:ec:2e:de:c4:
90:4e:34:fd:37:7d:45:2b:91:df:b8:34:20:8d:5f:
72:54:98:22:47:49:1d:e9:de:29:bf:89:b0:94:17:
00:a8:d5:b3:11:17:dd:62:5b:09:88:a2:bf:4f:ba:
fd:1b:17:18:3d:50:64:8d:7c:9a:95:f4:f7:85:2b:
2e:c7:64:e3:b0:24:54:07:da:23:31:4f:cc:12:19:
b6:ef:c3:0f:98:a1:b3:44:d8:da:6e:31:ac:08:a4:
4b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F3:10:6B:D4:04:29:D7:8E:0A:08:DC:3A:D6:7E:D4:6E:07:DC:87
X509v3 Authority Key Identifier:
keyid:53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ef:4c:b3:e4:b8:97:bb:4e:44:fb:70:bf:84:de:5b:fd:f8:
98:25:dc:c1:84:93:be:76:d6:0c:3e:02:7a:04:60:72:3b:77:
bb:a1:2e:20:06:f3:23:78:1f:3b:ef:0d:78:42:7e:b9:d2:94:
52:c3:09:f3:51:eb:d6:86:66:bc:a0:d6:2b:55:4b:06:ad:56:
99:d6:a7:68:e6:73:fc:54:1d:89:ac:f3:50:40:bf:0b:c4:49:
5d:78:ef:89:ee:e1:71:27:a0:a3:85:36:0c:7f:46:2a:4e:e3:
ce:28:62:31:d1:d8:e4:e0:23:b7:ba:b7:1f:61:3a:88:9f:83:
4b:6a:77:1c:60:2f:f5:36:15:77:36:81:c1:39:51:81:cf:43:
01:c6:5c:04:59:4d:68:b6:11:33:55:ee:91:b4:ce:cd:c1:7e:
eb:5d:c9:55:ea:57:68:ef:cd:fc:ce:43:95:23:87:7a:2b:ca:
1d:6b:c8:4a:2d:79:ec:4f:ae:85:7e:e2:2d:64:26:2d:e2:cc:
99:68:53:c8:24:a2:36:5f:f7:b7:f7:67:d4:50:16:4a:6a:ee:
6b:3a:c9:03:be:34:56:d1:cc:82:7b:df:21:40:84:e8:ba:1a:
0a:b9:1f:db:cc:e8:7a:2a:33:62:ff:78:62:3f:ea:b1:b5:d9:
05:1d:21:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:15:56 2026 by rpki-client