Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier: 9Y9Y8v8Oj/HfkhbPaeHSI5QAsbEEKbn52QWX+leZnu8=
Subject key identifier: F2:10:1D:10:6F:FC:85:BA:18:15:29:EB:96:C2:04:9D:89:46:2A:BE
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 019F8531A56CCCC34E0135CB5A0136354A7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number: 114F
Signing time: Tue 21 Jul 2026 15:00:50 +0000
Manifest this update: Tue 21 Jul 2026 15:00:50 +0000
Manifest next update: Wed 22 Jul 2026 15:00:50 +0000
Files and hashes: 1: Ba1hxRfH-k7ceH0oHPq1VVBsp6Q.roa (hash: YEBGA5Gf6yekIAoZS5i0FB3qMgjIsEWg2cbxv2B3zMs=)
2: SwYgBW9ALm4cVPOKM-XYBIFXbys.roa (hash: 19/i8e+hgUTh6yjnRYpTxmz4YU3y1nqkTgNB/sr2lZs=)
3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: rU/HxTLDI9bfFBOmCDNSMo1JOp6vCg9xwuo73NnM4Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:31:a5:6c:cc:c3:4e:01:35:cb:5a:01:36:35:4a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Jul 21 15:00:50 2026 GMT
Not After : Jul 22 15:00:50 2026 GMT
Subject: CN=f2101d106ffc85ba181529eb96c2049d89462abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:57:88:2e:1e:74:4f:f6:f1:95:e6:e4:00:a8:
5f:a7:d2:57:18:0a:01:57:c4:af:05:66:1b:74:0f:
52:2f:ba:cf:5c:54:4f:a5:c2:ee:88:82:a3:15:2a:
84:4b:76:98:39:4c:6d:df:8f:ef:45:54:01:a3:0d:
e7:ba:be:5b:18:f7:80:2d:18:a1:27:df:57:0c:e8:
83:2e:ab:ad:5d:39:bd:76:01:17:9d:8f:14:5a:67:
35:bd:b8:2b:2f:de:d1:1c:76:27:ee:ec:db:3e:52:
b4:79:2b:49:c1:1b:58:3a:dd:93:e7:18:1e:ea:48:
d7:1e:de:f4:dd:5c:1c:e4:3b:e7:78:e2:32:19:79:
e7:0b:65:6b:24:77:01:e6:ba:3c:69:d5:e7:82:82:
95:a8:7a:27:e5:61:72:d8:18:7a:72:cc:35:b9:4b:
69:e4:7d:e0:99:f0:2d:4f:a2:c2:ec:42:30:64:fe:
96:ac:68:e7:40:37:45:c2:4b:47:ee:20:a6:ef:3f:
95:e1:76:6e:40:cc:e5:51:3a:6b:cc:52:82:78:24:
dc:10:3b:98:da:ca:d0:4a:7b:d6:70:04:a4:fd:91:
2a:6d:bb:be:e9:7d:e7:22:03:cc:b4:48:47:8d:9d:
53:2a:be:ca:11:c1:d9:61:05:67:74:d0:c1:b7:db:
9a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:10:1D:10:6F:FC:85:BA:18:15:29:EB:96:C2:04:9D:89:46:2A:BE
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:76:93:57:d0:27:cb:18:9e:00:57:f9:f5:28:d7:02:46:a8:
57:55:d0:ec:62:cb:a5:cb:e5:69:aa:9d:ef:ee:55:41:be:47:
b5:b7:01:78:54:39:82:f3:5f:08:99:8c:30:a8:d5:cc:84:14:
0a:45:ef:56:f2:05:73:c9:f8:41:31:eb:30:44:c4:98:bd:38:
43:66:d8:89:0a:ca:f5:7b:46:3b:ee:e9:79:91:34:3f:3a:90:
e0:bb:0b:33:2c:8b:bc:dd:17:a0:86:8e:4f:36:c4:a5:5f:d2:
fa:eb:e9:f9:c4:43:ef:e3:04:35:fa:b4:22:c0:45:95:81:fe:
e1:68:6c:3b:aa:9c:bf:e5:3a:74:b7:77:ab:7d:15:86:fc:ca:
f0:cb:52:3b:b6:d6:55:01:1a:fe:08:5b:a0:26:3a:58:fd:56:
54:5f:ea:13:16:d0:cb:d3:77:69:a3:28:64:a8:fb:95:60:ab:
ed:09:c3:e7:3d:cf:ab:88:c4:6a:63:27:e5:1f:47:5e:b9:db:
e5:7f:cb:a6:9f:0c:33:99:75:44:38:ee:48:07:82:1b:b0:f0:
a7:8f:32:94:bc:57:f6:7f:5e:c2:75:24:95:ff:08:b6:b2:3d:
78:d9:c3:cb:4d:71:d6:d5:e3:74:de:54:b3:a6:3d:8e:0d:f5:
dd:19:0e:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+FMaVszMNOATXLWgE2NUp7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNDczMTg4NGJhMGY1NzNmYTYxOGI2ZTdhZDUwM2ExMmM5
NjVhZjMwHhcNMjYwNzIxMTUwMDUwWhcNMjYwNzIyMTUwMDUwWjAzMTEwLwYDVQQD
EyhmMjEwMWQxMDZmZmM4NWJhMTgxNTI5ZWI5NmMyMDQ5ZDg5NDYyYWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFeILh50T/bxlebkAKhfp9JXGAoB
V8SvBWYbdA9SL7rPXFRPpcLuiIKjFSqES3aYOUxt34/vRVQBow3nur5bGPeALRih
J99XDOiDLqutXTm9dgEXnY8UWmc1vbgrL97RHHYn7uzbPlK0eStJwRtYOt2T5xge
6kjXHt703Vwc5DvneOIyGXnnC2VrJHcB5ro8adXngoKVqHon5WFy2Bh6csw1uUtp
5H3gmfAtT6LC7EIwZP6WrGjnQDdFwktH7iCm7z+V4XZuQMzlUTprzFKCeCTcEDuY
2srQSnvWcASk/ZEqbbu+6X3nIgPMtEhHjZ1TKr7KEcHZYQVndNDBt9ua6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIQHRBv/IW6GBUp65bCBJ2JRiq+MB8GA1UdIwQY
MBaAFLtHMYhLoPVz+mGLbnrVA6EsllrzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jMjEyYTItMzdlOS00YWQ2LWJiZTYt
ODM1YTU4NDJiOTRjLzEvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jMjEyYTItMzdlOS00YWQ2LWJiZTYtODM1YTU4NDJiOTRj
LzEvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXaTV9An
yxieAFf59SjXAkaoV1XQ7GLLpcvlaaqd7+5VQb5HtbcBeFQ5gvNfCJmMMKjVzIQU
CkXvVvIFc8n4QTHrMETEmL04Q2bYiQrK9XtGO+7peZE0PzqQ4LsLMyyLvN0XoIaO
TzbEpV/S+uvp+cRD7+MENfq0IsBFlYH+4WhsO6qcv+U6dLd3q30VhvzK8MtSO7bW
VQEa/ghboCY6WP1WVF/qExbQy9N3aaMoZKj7lWCr7QnD5z3Pq4jEamMn5R9HXrnb
5X/Lpp8MM5l1RDjuSAeCG7Dwp48ylLxX9n9ewnUklf8ItrI9eNnDy01x1tXjdN5U
s6Y9jg313RkOow==
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:26:50 2026 by rpki-client