Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
File: uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft (raw, json)
Hash identifier: 6OwU34DgwzmnfBTEIhDv3HRwAUWYCOlBnO9mJmiordw=
Subject key identifier: B6:50:A7:FD:41:E8:E5:DA:23:52:AA:A2:66:CD:D1:F8:B1:CD:F9:09
Authority key identifier: B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
Certificate issuer: /CN=b9930359b5469112e6e2bfae8595b05485551d37
Certificate serial: 019F86B2725B841B4BBE59362B6AF1FFD50A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
Manifest number: 068E
Signing time: Tue 21 Jul 2026 22:01:09 +0000
Manifest this update: Tue 21 Jul 2026 22:01:09 +0000
Manifest next update: Wed 22 Jul 2026 22:01:09 +0000
Files and hashes: 1: q9QiwiBtUXaeGzcn9qnTTXCRaYI.roa (hash: /RSQuO4wSBepnb5WctoxBJfzvDfZfmxsmBSRIpoN6ic=)
2: uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl (hash: 8KfW8+bcn/+FUGhXZ8chU4kScDTbwgY3QvWfWoRSRnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:b2:72:5b:84:1b:4b:be:59:36:2b:6a:f1:ff:d5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9930359b5469112e6e2bfae8595b05485551d37
Validity
Not Before: Jul 21 22:01:09 2026 GMT
Not After : Jul 22 22:01:09 2026 GMT
Subject: CN=b650a7fd41e8e5da2352aaa266cdd1f8b1cdf909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:05:14:ee:38:fb:be:d2:7b:ce:bb:e0:ae:44:
70:90:0c:5b:31:4a:81:b5:a4:29:fb:16:1f:b3:60:
6d:b6:f0:0b:54:58:54:3f:c7:96:6d:84:af:aa:fd:
e9:5b:42:8c:34:b5:3b:5d:3e:23:f4:c1:8a:59:27:
48:67:30:fb:e0:62:32:65:6c:23:25:59:b8:84:70:
90:f8:e1:0f:27:09:6d:b8:f5:ac:49:db:28:5f:e3:
5e:7e:ca:69:83:20:cf:a3:14:20:36:c2:6b:7e:a5:
7b:93:7c:ad:f8:d5:73:87:a8:3e:4e:41:67:e3:4c:
5b:24:81:9e:94:1a:3b:a3:59:ca:4d:bc:f8:15:4d:
65:3d:98:ea:f6:32:68:d1:52:35:5c:df:04:62:42:
47:9b:eb:84:60:6c:0f:26:d8:55:e8:56:67:f9:a4:
9d:a1:30:51:e9:65:9d:44:64:b9:4d:68:44:03:fd:
d4:db:60:b3:32:5a:9e:01:7b:4b:9c:68:0c:15:f4:
ba:08:87:74:c4:81:18:cf:57:77:da:ab:7e:96:32:
fc:ff:37:99:05:de:57:27:d2:92:4c:6d:27:6a:14:
b3:09:15:1a:ed:96:46:ad:8e:95:25:e9:b6:8a:ce:
42:05:5e:df:4c:80:80:f7:48:c1:a8:02:d5:1f:b3:
12:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:50:A7:FD:41:E8:E5:DA:23:52:AA:A2:66:CD:D1:F8:B1:CD:F9:09
X509v3 Authority Key Identifier:
keyid:B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:80:98:a8:67:d5:2e:54:c4:03:f4:62:b2:1c:c5:b0:8d:f4:
45:3c:82:79:6c:05:fa:e3:86:5b:29:f5:37:3f:b5:7a:44:43:
17:22:a9:d6:bb:2d:9b:17:e0:af:ff:dd:44:10:33:4b:36:d4:
70:d8:8d:89:f7:21:59:63:3e:1f:0e:92:1c:73:ab:4b:eb:03:
3a:73:76:08:c3:ea:e0:68:7d:f3:52:49:60:0d:e2:e8:ac:c1:
f7:43:24:54:da:65:99:b8:f3:64:5b:94:5f:ec:4a:8e:ce:85:
d7:83:e1:93:b5:8b:c1:a2:92:bc:2a:73:56:60:24:3a:85:6b:
92:ff:f4:bb:2a:b1:61:93:0d:e6:82:ea:9e:5c:d4:89:de:c1:
0c:48:71:e7:42:f5:16:74:42:a9:52:15:9f:44:0a:53:50:fb:
9a:9b:27:b8:de:f2:7c:b9:dd:fc:4d:04:5d:5e:4d:7c:0f:84:
be:ad:bc:d1:1c:54:54:a1:4f:46:f8:b3:fa:92:89:4a:6f:b2:
aa:c0:a2:1b:32:95:75:e1:55:70:a9:42:7b:23:db:e2:45:73:
6b:a4:06:b7:d7:d1:0c:ad:69:9b:ca:e4:c5:21:65:ab:43:57:
96:7a:16:98:e1:dc:a0:69:d3:5d:74:d1:a4:0b:39:a4:81:e2:
19:82:7a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 06:01:18 2026 by rpki-client