Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
File: uFh0CVxMlCK5NZdacVZPB3HNKS4.mft (raw, json)
Hash identifier: 1ikZy19jszvLidMtaN4j/EyCzvnPOwuseKGszFmm7Gk=
Subject key identifier: E9:8C:1B:54:5E:86:3C:DF:C2:F9:9A:D5:08:C4:C3:D7:0E:61:EA:92
Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
Certificate issuer: /CN=b85874095c4c9422b935975a71564f0771cd292e
Certificate serial: 019F83430A6C43CBE1908EF88F7AA074AA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
Manifest number: 0958
Signing time: Tue 21 Jul 2026 06:00:36 +0000
Manifest this update: Tue 21 Jul 2026 06:00:36 +0000
Manifest next update: Wed 22 Jul 2026 06:00:36 +0000
Files and hashes: 1: _E-18Yix5OeOjpkpq4btG5ylqEQ.roa (hash: G5MMNAQN+PyBy79Pw9SL7XUT08jrMuESj9HjH5BbLWA=)
2: onylvAnaX1xJT4oQ_18209fUiQo.roa (hash: uJ5yGGvZ7mIQiDhU+Wu/R2iMU5zPKWhZCJOHY75uE3g=)
3: uFh0CVxMlCK5NZdacVZPB3HNKS4.crl (hash: szbIFccOlW9XjyRuw4kjVgqhcS1n0+DHT9hMMtQogUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:43:0a:6c:43:cb:e1:90:8e:f8:8f:7a:a0:74:aa:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e
Validity
Not Before: Jul 21 06:00:36 2026 GMT
Not After : Jul 22 06:00:36 2026 GMT
Subject: CN=e98c1b545e863cdfc2f99ad508c4c3d70e61ea92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a1:c2:28:91:68:08:6c:88:f4:bc:f5:62:c0:
e8:fd:24:c6:39:f5:e0:bb:43:09:3c:df:46:48:d8:
e5:86:b4:7a:ff:d0:d5:77:0c:24:33:f0:25:8c:14:
1d:13:93:28:73:4e:90:1c:7d:03:0b:51:04:51:21:
f2:cc:ac:78:f1:00:85:15:83:df:18:aa:20:c5:30:
97:03:fd:4b:5e:1b:4d:bf:97:84:56:0f:a2:7c:2e:
f5:d6:92:e5:91:84:05:9c:9e:ad:f8:5e:0f:e8:c0:
ae:d3:20:11:f7:9e:26:5c:c6:34:43:cf:c5:a7:ce:
92:4c:95:8e:2e:1f:d6:c3:cf:1a:ec:b7:28:4a:43:
a1:c8:f5:e7:8a:36:2a:d9:0c:0b:81:f4:87:14:00:
48:59:45:3c:cb:6b:42:62:d3:40:a5:b2:d4:6d:8c:
54:7b:5b:52:b4:44:0f:0a:f9:20:59:85:ac:08:6e:
1a:57:d9:3f:7c:5f:5c:28:0d:66:0c:0e:04:57:b1:
ca:64:5a:b1:ea:d6:8b:46:6d:92:54:a3:ba:30:4d:
d0:da:b6:84:a1:0f:01:e4:92:fb:22:5e:70:ec:26:
58:cd:ba:e4:1b:48:55:8d:c0:42:f6:9d:71:8b:af:
c6:c0:1e:b8:1b:85:12:f8:29:fc:4e:9b:7f:10:2a:
3a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8C:1B:54:5E:86:3C:DF:C2:F9:9A:D5:08:C4:C3:D7:0E:61:EA:92
X509v3 Authority Key Identifier:
keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5f:ef:9f:e5:31:f2:61:e5:1e:17:76:04:b3:82:d5:17:e0:
f9:9a:f3:d7:db:a1:4c:7c:e0:c6:10:f9:46:de:43:8f:04:0b:
23:7b:dc:4b:b1:6c:93:0e:72:4a:0b:6a:9f:59:d0:9c:3c:0f:
b7:11:04:8a:72:72:a6:07:f0:f1:1f:38:4f:9c:48:c4:b9:c8:
52:09:c3:97:b0:27:fe:fe:13:d3:d6:f5:fc:fc:8d:7d:0b:fd:
4f:ee:bc:20:4b:9b:9a:ed:b3:77:e8:ff:7d:04:6b:84:39:1f:
da:0b:ff:70:f2:b1:da:2d:e7:d6:26:b2:c1:1c:96:fe:1e:b2:
ee:f2:31:a9:65:fd:a9:b4:63:fe:a2:1d:ff:68:2d:10:56:7b:
07:1c:32:91:9f:48:dc:20:1b:2c:93:d1:eb:95:4d:52:0b:f3:
49:06:a8:d1:de:b2:d4:7e:70:d8:3a:f6:c4:0f:64:1b:52:db:
9c:d9:ca:88:00:63:fc:76:5b:d0:06:f7:b1:99:80:2f:26:60:
ff:5c:c2:7e:67:43:f1:c0:4f:e3:e1:da:e7:e3:64:e8:00:87:
13:8b:40:3c:fc:13:6a:e3:79:38:4b:48:c8:ef:ed:56:bc:4c:
53:d4:1a:a3:3d:03:92:c9:9f:81:36:b1:9f:1e:e7:01:0c:1c:
83:4e:48:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+DQwpsQ8vhkI74j3qgdKo3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NTg3NDA5NWM0Yzk0MjJiOTM1OTc1YTcxNTY0ZjA3NzFj
ZDI5MmUwHhcNMjYwNzIxMDYwMDM2WhcNMjYwNzIyMDYwMDM2WjAzMTEwLwYDVQQD
EyhlOThjMWI1NDVlODYzY2RmYzJmOTlhZDUwOGM0YzNkNzBlNjFlYTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKHCKJFoCGyI9Lz1YsDo/STGOfXg
u0MJPN9GSNjlhrR6/9DVdwwkM/AljBQdE5Moc06QHH0DC1EEUSHyzKx48QCFFYPf
GKogxTCXA/1LXhtNv5eEVg+ifC711pLlkYQFnJ6t+F4P6MCu0yAR954mXMY0Q8/F
p86STJWOLh/Ww88a7LcoSkOhyPXnijYq2QwLgfSHFABIWUU8y2tCYtNApbLUbYxU
e1tStEQPCvkgWYWsCG4aV9k/fF9cKA1mDA4EV7HKZFqx6taLRm2SVKO6ME3Q2raE
oQ8B5JL7Il5w7CZYzbrkG0hVjcBC9p1xi6/GwB64G4US+Cn8Tpt/ECo6tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmMG1Rehjzfwvma1QjEw9cOYeqSMB8GA1UdIwQY
MBaAFLhYdAlcTJQiuTWXWnFWTwdxzSkuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUZoMENWeE1sQ0s1TlpkYWNWWlBCM0hOS1M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9kODA4NzctN2YxZS00YTUwLTk5NTct
MDcwYTFmNzE4ODVlLzEvdUZoMENWeE1sQ0s1TlpkYWNWWlBCM0hOS1M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9kODA4NzctN2YxZS00YTUwLTk5NTctMDcwYTFmNzE4ODVl
LzEvdUZoMENWeE1sQ0s1TlpkYWNWWlBCM0hOS1M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATl/vn+Ux
8mHlHhd2BLOC1Rfg+Zrz19uhTHzgxhD5Rt5DjwQLI3vcS7Fskw5ySgtqn1nQnDwP
txEEinJypgfw8R84T5xIxLnIUgnDl7An/v4T09b1/PyNfQv9T+68IEubmu2zd+j/
fQRrhDkf2gv/cPKx2i3n1iaywRyW/h6y7vIxqWX9qbRj/qId/2gtEFZ7BxwykZ9I
3CAbLJPR65VNUgvzSQao0d6y1H5w2Dr2xA9kG1LbnNnKiABj/HZb0Ab3sZmALyZg
/1zCfmdD8cBP4+Ha5+Nk6ACHE4tAPPwTauN5OEtIyO/tVrxMU9Qaoz0DksmfgTax
nx7nAQwcg05I/Q==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:44:26 2026 by rpki-client