Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
File: uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft (raw, json)
Hash identifier: NtXNUljAOY5xCM4+tT7ShTeHriH9h4DGlzApgFB1780=
Subject key identifier: 85:49:36:8E:EC:B7:85:A0:51:BE:EF:16:31:6A:65:35:3F:B8:3D:1F
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 019F8230E238C37201074BBD57CFA27BE0FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
Manifest number: 0747
Signing time: Tue 21 Jul 2026 01:01:09 +0000
Manifest this update: Tue 21 Jul 2026 01:01:09 +0000
Manifest next update: Wed 22 Jul 2026 01:01:09 +0000
Files and hashes: 1: IExsRHcTMBXn-QPHNfck7eqcJw4.roa (hash: kmkVoL4lFJb7JpYN+pxxD7SRkj9rplMRE3kxSY06eG0=)
2: uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl (hash: G6pdlk1JPd+PJexq0RNoxTNhd131rjoWTdwyBJfOtSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:30:e2:38:c3:72:01:07:4b:bd:57:cf:a2:7b:e0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Jul 21 01:01:09 2026 GMT
Not After : Jul 22 01:01:09 2026 GMT
Subject: CN=8549368eecb785a051beef16316a65353fb83d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5a:9b:62:df:8a:6d:4a:70:3c:a0:82:52:df:
d9:19:aa:f8:91:e6:c1:3b:17:ef:24:13:c7:8c:3f:
40:72:c2:8d:4c:b4:62:ef:72:10:ba:0d:2e:b1:21:
07:69:39:99:88:b5:f6:91:1b:4e:ad:a2:a7:c4:45:
3f:05:b4:e9:4d:1c:dc:0a:2d:12:e5:df:50:d4:4b:
4a:44:47:76:86:e0:5f:f4:81:02:8a:07:23:c3:64:
19:50:df:e3:51:89:ba:72:8e:75:86:e3:8f:44:35:
f9:25:b1:57:a7:aa:e9:2c:c6:e2:59:54:b9:99:a8:
3c:2c:ff:46:f6:be:97:08:4e:7c:77:28:fe:73:25:
d0:46:98:f3:44:89:41:34:74:20:9d:cb:04:a9:03:
07:3c:be:f2:7b:06:77:94:c3:8c:64:f4:7b:ad:63:
62:e7:84:52:fa:5b:0d:3e:a6:77:43:c7:80:b5:ba:
31:ae:28:0c:a2:45:f1:48:36:45:cc:c0:ad:de:31:
b2:c0:49:a7:7b:5c:f0:db:21:d8:3b:94:7a:22:68:
80:13:8d:88:09:f1:d3:79:3b:de:05:e6:38:45:84:
88:cd:18:04:35:45:b7:eb:62:e3:66:3b:0c:ec:85:
12:3e:c8:2d:b2:ca:6b:04:b7:e7:af:a6:6b:31:6c:
46:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:49:36:8E:EC:B7:85:A0:51:BE:EF:16:31:6A:65:35:3F:B8:3D:1F
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a5:35:bb:e9:c0:0a:09:cf:82:df:ff:f5:81:b3:d0:05:d4:
d8:47:b6:af:ae:7b:09:68:16:5a:de:2f:c2:b1:ae:ef:2f:eb:
4d:48:1e:01:bf:67:f8:0f:7a:d6:c1:a0:e7:ba:23:48:0f:6d:
ac:c6:ba:42:59:65:1d:ab:c7:7c:a3:06:59:56:f7:47:44:a9:
e9:1a:73:f0:cd:f3:4f:8e:3d:7c:76:e8:dc:b4:79:5b:97:b9:
70:27:63:8a:ac:cb:65:1a:bd:a6:32:52:41:d7:cb:e7:49:57:
62:e1:f3:96:37:e1:ed:77:e5:67:8a:a6:19:63:49:12:99:2a:
dd:16:40:22:25:07:fc:25:6b:08:3d:27:4b:83:b0:d5:ce:05:
a1:da:f2:95:2c:f3:fe:20:9c:8d:da:3e:57:da:c9:89:41:3a:
2a:4c:45:33:e7:72:79:3e:42:94:19:05:c9:4d:d6:19:de:aa:
cd:8e:42:b2:c5:32:31:34:8b:17:5a:bd:4b:6e:18:c9:cc:95:
a7:a5:f4:c1:06:39:60:b4:1d:1e:b4:21:f4:15:bb:94:f4:66:
4b:91:14:85:d8:59:b3:0d:d9:09:cf:d5:18:fb:91:44:09:5d:
68:c9:77:89:05:06:a0:4f:b6:d0:5a:c7:7c:15:f1:c3:9f:09:
3f:5d:60:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:04:41 2026 by rpki-client