Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
File: UzYQcXlxVgncpCK8B6CYRoxSlFI.mft (raw, json)
Hash identifier: wXShTdAieQh7D3EbwgH+4CK63R7vHfbn/tTThojQvpc=
Subject key identifier: 0B:7C:82:F5:E4:17:DD:56:1E:BD:9F:60:49:9C:6D:07:89:B1:98:24
Authority key identifier: 53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
Certificate issuer: /CN=5336107179715609dca422bc07a098468c529452
Certificate serial: 019F916DC84B459BEEDBBC23584B579E75FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
Manifest number: 19D6
Signing time: Fri 24 Jul 2026 00:01:58 +0000
Manifest this update: Fri 24 Jul 2026 00:01:58 +0000
Manifest next update: Sat 25 Jul 2026 00:01:58 +0000
Files and hashes: 1: 37nBPcU451HQlUl0uacWDYQGvA8.roa (hash: TDhIz0QGXINJqgJRTB4Yk7ckzNjSTwoBFWF/TjcxIyc=)
2: UzYQcXlxVgncpCK8B6CYRoxSlFI.crl (hash: /Z3tI+oNR/NjLiO7EC33w5TVZVyvl4e9+yWUA1W3e6I=)
3: ejQtF-IJAcPUsJm2Grb30Iqg1lM.roa (hash: PAnCTRg2QzsK95CrphYN3Z21jLVwZm4bozxHdK4npEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:c8:4b:45:9b:ee:db:bc:23:58:4b:57:9e:75:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336107179715609dca422bc07a098468c529452
Validity
Not Before: Jul 24 00:01:58 2026 GMT
Not After : Jul 25 00:01:58 2026 GMT
Subject: CN=0b7c82f5e417dd561ebd9f60499c6d0789b19824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c5:c1:a1:03:b4:af:33:2d:2e:92:b2:d0:78:
d3:5b:34:6b:de:6d:6c:52:49:d4:8a:45:ed:ff:62:
4b:30:46:40:2d:9c:46:70:3a:ee:82:c8:e8:06:3b:
9b:bf:0b:fc:2c:fe:33:3c:f1:d9:27:76:4c:6e:52:
68:3a:29:a9:f3:fa:d9:5f:83:97:31:a1:3d:d3:74:
df:4e:ff:23:21:63:bb:26:a7:99:1c:eb:aa:3e:e7:
b0:47:65:ef:e8:0d:ad:82:d0:e3:e7:c0:b9:06:13:
b2:ff:ce:7e:8c:2f:80:f2:00:b7:25:04:ce:cd:ab:
23:db:ca:dc:f6:a6:dc:79:5d:ea:dd:71:17:02:a1:
d6:7d:ca:2b:56:86:25:75:63:cc:fe:09:22:6c:fb:
ea:3f:e8:8f:1b:89:eb:60:57:af:2c:73:ca:fb:47:
cb:49:5a:3f:ac:3f:9a:3e:f0:d1:2e:db:4f:f9:dc:
f3:33:de:ba:60:80:b8:9d:ef:77:36:74:1e:76:8e:
3e:17:c4:2d:f2:b7:ac:0c:f1:fd:8a:39:f3:8d:c9:
ba:14:09:36:18:90:b1:45:94:c9:7d:bd:98:37:5e:
e8:3e:f9:7a:cb:ae:5e:c4:f0:a8:db:f3:fa:a6:c5:
e4:8b:bd:1f:b6:c6:10:a8:42:9e:49:22:04:5a:7a:
9e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7C:82:F5:E4:17:DD:56:1E:BD:9F:60:49:9C:6D:07:89:B1:98:24
X509v3 Authority Key Identifier:
keyid:53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:6b:f8:3c:d5:b8:4a:dc:c7:9e:93:d5:7a:71:d2:28:c2:a5:
02:d5:be:2b:ec:8e:11:fb:f3:3b:c9:f5:d9:68:fe:cc:9e:17:
3e:18:e4:7c:ff:fa:f5:a0:18:f7:d7:d0:95:2b:27:53:c7:38:
fc:4c:ec:fd:d1:6a:aa:ef:d0:78:e3:fe:df:c4:83:5c:bf:6e:
a7:df:58:54:88:52:fe:95:02:fa:dd:2f:30:2a:3e:e3:1b:71:
29:5f:8d:e9:e1:e0:c6:58:7f:30:31:1d:82:64:40:6d:4d:9e:
fe:ff:54:ed:89:e7:f8:c0:9b:b8:44:f6:d7:06:d9:2f:a5:af:
50:81:20:4e:33:de:ea:99:d7:67:fd:2d:e2:00:73:f5:47:ed:
a8:d7:2b:be:cd:f4:0f:34:64:1e:1b:fe:75:a9:ba:e3:39:44:
6d:e4:d2:f0:55:0b:1e:58:fd:04:eb:c8:bb:ae:18:a8:77:70:
63:c9:15:58:df:12:04:5d:eb:db:63:ea:c8:cc:e4:e7:c2:3a:
a0:47:a2:82:be:2b:22:59:3a:de:06:ac:5e:4d:1a:fe:e0:03:
4f:e1:00:99:f7:9f:00:5f:cf:5a:53:3f:4a:ba:b1:d1:df:12:
6e:4b:4b:be:93:1d:32:ab:98:04:c2:62:22:50:f7:07:5d:92:
61:e7:4f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:26:35 2026 by rpki-client