Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
File: uncwHhTWWzo9aG2qwW38SaxIx80.mft (raw, json)
Hash identifier: zDH50wpt9HrGwJu0jSt45F2ccLfcbai7OD39XM1iJh4=
Subject key identifier: 75:28:EC:3E:F8:56:02:C6:21:E0:12:88:16:1F:E3:C6:43:D0:5D:1F
Authority key identifier: BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
Certificate issuer: /CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Certificate serial: 019F10E50B9030FC63D393F607E044399EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
Manifest number: 15A2
Signing time: Mon 29 Jun 2026 01:01:13 +0000
Manifest this update: Mon 29 Jun 2026 01:01:13 +0000
Manifest next update: Tue 30 Jun 2026 01:01:13 +0000
Files and hashes: 1: 1LEFsPM_H8xQ-_ougrkdy_5rKNU.roa (hash: vqS3TtpAElEQP9C4hD+5YU/4Tth0LEZ2oFRo5KORXho=)
2: LBsEkxwQTYhHk4PbiWkcMNY_VwM.roa (hash: 3yJGlq/sSfsWxxmZU2mXpZuXHcJRJ3V2hkCfCCtg9JI=)
3: uncwHhTWWzo9aG2qwW38SaxIx80.crl (hash: yulc08B+Gllh3/JpAV+ChcpFycz1Rl1/u6ICmWY9hYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e5:0b:90:30:fc:63:d3:93:f6:07:e0:44:39:9e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Validity
Not Before: Jun 29 01:01:13 2026 GMT
Not After : Jun 30 01:01:13 2026 GMT
Subject: CN=7528ec3ef85602c621e01288161fe3c643d05d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:85:38:46:df:5a:e6:14:4e:50:c9:10:57:ac:
87:49:05:82:40:92:57:55:32:6e:ae:25:f9:3d:16:
12:33:a2:ed:f4:f3:76:ad:7f:f2:3e:f5:61:b3:a8:
bc:fa:15:50:47:c2:b8:82:1a:a5:f7:b9:71:c4:78:
17:5f:a4:5b:bb:ce:51:f4:43:1d:be:1c:83:a7:03:
c4:4f:96:6c:c7:8e:a2:77:ac:df:ae:dc:f7:86:e2:
98:91:df:27:4a:23:a1:ca:11:87:97:bc:8b:07:0c:
8e:98:d5:a6:9d:e4:6a:d9:26:2e:91:97:c9:bb:95:
bf:9b:d9:cb:e8:27:dc:f3:9b:54:06:26:59:ef:c7:
5f:03:0e:40:dd:ad:43:b9:b3:1a:e3:f7:9b:a1:91:
d3:96:ed:23:de:20:aa:ab:ad:81:bc:7c:2c:24:2b:
da:fe:38:3f:8a:63:61:76:c3:2c:91:ec:bc:91:aa:
ab:14:b8:00:5e:64:28:f4:0c:60:2b:f8:a1:c6:1b:
1d:cd:e6:04:e5:7a:57:60:a8:89:4c:2a:90:86:1a:
fe:81:8f:1c:a5:77:b2:08:57:98:bf:b5:53:2b:8a:
25:91:6c:fc:b3:66:b0:6d:67:8b:76:7d:08:f5:ec:
6e:d4:15:fb:f8:e5:20:15:05:76:a1:08:99:f1:b7:
1b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:28:EC:3E:F8:56:02:C6:21:E0:12:88:16:1F:E3:C6:43:D0:5D:1F
X509v3 Authority Key Identifier:
keyid:BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:df:22:e3:02:d8:9f:aa:2a:87:23:a8:c3:8a:f1:38:a7:d6:
24:3c:02:97:10:51:ce:99:73:8d:19:10:ad:2a:58:50:a6:cf:
30:b8:37:a6:e4:83:5d:4a:70:7c:e2:31:e1:5a:a4:f4:17:49:
04:88:d7:19:d2:9e:64:97:99:ca:f3:c1:f2:4f:97:dc:1f:5d:
84:03:0f:c1:2b:eb:29:fa:5d:a8:b4:ce:dd:1b:bd:d6:79:6a:
25:af:be:6b:ce:4b:bd:09:fd:8d:d7:db:8c:54:c8:a2:03:c4:
63:cb:c3:f6:b2:cc:13:66:b3:7f:c0:6b:b4:d0:2c:8f:5a:95:
0b:fd:4d:05:79:62:93:6d:4c:b6:28:4c:9e:4c:57:27:98:de:
59:78:33:6a:e9:29:f8:33:6b:cf:b3:db:88:ad:4c:38:e7:c0:
d9:1a:e4:ca:d4:76:02:9a:2f:33:d7:a0:df:ee:21:57:6f:10:
8c:87:18:d3:77:b8:8f:41:b0:0a:66:86:73:76:28:c5:8f:5f:
9b:5d:6a:6a:14:7c:b4:77:f5:0e:b7:94:95:12:2a:d9:ae:5e:
a7:59:c2:2a:5d:a0:ca:98:1f:99:5c:23:e7:be:d7:52:f8:38:
07:70:f9:d2:2c:9b:b7:db:df:79:8f:ce:7a:57:a0:7e:a7:04:
9d:8f:6b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:43:05 2026 by rpki-client