Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
File: uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft (raw, json)
Hash identifier: hLA/f0Tfc7MNfFNcifRJagvqQlkY6kc/G4DjIf+1UY0=
Subject key identifier: 8D:12:36:2C:60:69:D1:73:47:98:5D:B2:F4:BF:5E:07:62:6F:0F:80
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial: 019F859F2ED4279AAFCCD373CA43EA309E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
Manifest number: 07B4
Signing time: Tue 21 Jul 2026 17:00:29 +0000
Manifest this update: Tue 21 Jul 2026 17:00:29 +0000
Manifest next update: Wed 22 Jul 2026 17:00:29 +0000
Files and hashes: 1: 845se0I5w_ABtHgN1jpZJhRDX2U.roa (hash: XtKaLfEk8dB6Tywis/naWcuQfxkanpJ2MfBAflauD8s=)
2: DFDpF7Vmbd_GPoD3_0_PfrTTyn0.roa (hash: dUYfJyucIcgSEye6sBcDdNQsfbXuPD7ojWDauTvFvck=)
3: uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl (hash: TTKB1U32Z417fvwZFXJvnO2ykpkJTjyRVTAkgiyKmn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:2e:d4:27:9a:af:cc:d3:73:ca:43:ea:30:9e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Validity
Not Before: Jul 21 17:00:29 2026 GMT
Not After : Jul 22 17:00:29 2026 GMT
Subject: CN=8d12362c6069d17347985db2f4bf5e07626f0f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:e1:86:f6:e2:02:3a:1a:ff:b5:ad:d2:db:
d5:36:d5:d5:7e:9b:f2:a2:99:5c:a4:00:9a:1a:e3:
dd:2d:af:50:1c:6b:33:77:a3:54:eb:7f:5b:33:88:
64:7d:7c:f3:49:6a:fb:fa:b7:52:ec:f0:3c:f8:04:
3f:89:3d:e8:3f:ff:15:fc:22:57:ce:9f:85:c7:ca:
09:4c:c3:50:fe:b9:20:5d:74:80:07:b8:c8:73:42:
12:0d:77:2c:1c:b2:6a:e7:ad:da:ab:f8:39:88:d2:
e0:89:15:a8:22:aa:20:22:21:a5:69:ab:a1:8c:67:
b3:a8:82:ce:ec:0d:53:b2:fe:0a:77:9a:d3:eb:38:
79:35:c8:27:ba:bc:c8:50:60:ee:48:38:67:c6:34:
27:e5:6b:f9:4e:15:33:2a:77:a3:26:a8:72:5e:0a:
1a:ab:16:16:8e:01:f2:a4:0f:e7:68:dc:a1:e9:1f:
91:c0:0c:f3:93:1d:a1:3c:61:f6:bb:ef:aa:11:5e:
12:b3:42:11:ae:1f:bd:6e:a7:11:b7:eb:71:eb:30:
a8:3a:f7:ff:db:62:db:4b:62:3b:ba:99:e2:e4:63:
c9:58:c2:98:5b:47:6f:ab:c7:95:32:eb:68:eb:40:
8a:60:7c:5e:8b:db:ab:18:d5:37:58:cf:21:e7:a9:
12:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:12:36:2C:60:69:D1:73:47:98:5D:B2:F4:BF:5E:07:62:6F:0F:80
X509v3 Authority Key Identifier:
keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7f:b9:90:6a:af:37:bf:86:f5:c5:5d:01:b0:99:f6:8a:87:
25:c5:6f:0f:b2:06:0a:d9:6c:f1:bb:92:7b:b5:fb:37:4c:f5:
3f:9a:2c:8a:f0:9e:a2:82:b1:11:bd:67:b9:99:3e:fd:74:3c:
52:aa:e6:51:cc:c3:ad:0a:0d:22:c5:73:93:2a:e9:52:4c:f6:
fc:0d:2a:54:ea:72:f7:d5:82:f1:a1:dc:a7:cf:dc:9e:da:63:
f0:11:b2:53:04:da:27:20:2d:d1:ca:51:05:9f:56:98:ea:96:
4b:51:d0:78:19:ee:fb:1e:08:8e:79:d2:ff:b3:c7:03:33:b5:
36:4b:4c:80:a8:71:e9:a6:d9:c1:e1:e6:4b:05:54:3a:d5:65:
ed:b3:c0:62:9c:13:d7:b5:7b:99:61:e0:d9:66:02:7a:cb:12:
29:37:38:69:b7:4f:30:b7:4c:55:58:c1:36:25:e7:85:d3:2e:
3b:90:c8:b5:e4:1b:5d:2e:30:72:84:5f:cd:12:b4:c3:a0:63:
7e:47:77:ba:2b:5d:d1:1a:0d:1b:c1:b8:b8:95:20:31:de:84:
9d:1d:9a:08:aa:cf:84:2d:b2:39:2f:fb:4f:35:49:bc:da:ac:
92:b5:b1:60:c8:cd:f9:af:13:b1:4b:35:e8:85:98:df:52:b2:
0f:b5:7a:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Fny7UJ5qvzNNzykPqMJ5nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5M2Q0OTA4ZDljNDNhODVmODViZTE5MzM0YTI2ZjVkNTEz
NTBiY2IwHhcNMjYwNzIxMTcwMDI5WhcNMjYwNzIyMTcwMDI5WjAzMTEwLwYDVQQD
Eyg4ZDEyMzYyYzYwNjlkMTczNDc5ODVkYjJmNGJmNWUwNzYyNmYwZjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPDhhvbiAjoa/7Wt0tvVNtXVfpvy
oplcpACaGuPdLa9QHGszd6NU639bM4hkfXzzSWr7+rdS7PA8+AQ/iT3oP/8V/CJX
zp+Fx8oJTMNQ/rkgXXSAB7jIc0ISDXcsHLJq563aq/g5iNLgiRWoIqogIiGlaauh
jGezqILO7A1Tsv4Kd5rT6zh5NcgnurzIUGDuSDhnxjQn5Wv5ThUzKnejJqhyXgoa
qxYWjgHypA/naNyh6R+RwAzzkx2hPGH2u++qEV4Ss0IRrh+9bqcRt+tx6zCoOvf/
22LbS2I7upni5GPJWMKYW0dvq8eVMuto60CKYHxei9urGNU3WM8h56kS3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0SNixgadFzR5hdsvS/Xgdibw+AMB8GA1UdIwQY
MBaAFLk9SQjZxDqF+FvhkzSib11RNQvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAt
NTI4NzQ2MTFjZDIxLzEvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAtNTI4NzQ2MTFjZDIx
LzEvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKX+5kGqv
N7+G9cVdAbCZ9oqHJcVvD7IGCtls8buSe7X7N0z1P5osivCeooKxEb1nuZk+/XQ8
UqrmUczDrQoNIsVzkyrpUkz2/A0qVOpy99WC8aHcp8/cntpj8BGyUwTaJyAt0cpR
BZ9WmOqWS1HQeBnu+x4IjnnS/7PHAzO1NktMgKhx6abZweHmSwVUOtVl7bPAYpwT
17V7mWHg2WYCessSKTc4abdPMLdMVVjBNiXnhdMuO5DIteQbXS4wcoRfzRK0w6Bj
fkd3uitd0RoNG8G4uJUgMd6EnR2aCKrPhC2yOS/7TzVJvNqskrWxYMjN+a8TsUs1
6IWY31KyD7V6hw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:51:03 2026 by rpki-client