
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/_uFCR8uC-eVrfl_3tBaq8evFByg.mft
File: _uFCR8uC-eVrfl_3tBaq8evFByg.mft (raw, json)
Hash identifier: hEhUyYGv0ziWAfTWeoIrkZBw/GGSr07+8XS0Gv+mHkc=
Subject key identifier: F2:31:97:C1:99:7C:97:10:56:6A:84:7F:64:4B:C7:4F:BB:30:9A:7B
Authority key identifier: FE:E1:42:47:CB:82:F9:E5:6B:7E:5F:F7:B4:16:AA:F1:EB:C5:07:28
Certificate issuer: /CN=fee14247cb82f9e56b7e5ff7b416aaf1ebc50728
Certificate serial: 019FA0E02F6083C4F740479D9E3C1E05E187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_uFCR8uC-eVrfl_3tBaq8evFByg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/_uFCR8uC-eVrfl_3tBaq8evFByg.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:01:14 +0000
Manifest this update: Mon 27 Jul 2026 00:01:14 +0000
Manifest next update: Tue 28 Jul 2026 00:01:14 +0000
Files and hashes: 1: DmwwyIeryxnXouje06GcnKLjOck.roa (hash: 77qcCPWlKYbSecG3Tkcuy3v3wioir535GQOABIXvPKc=)
2: _uFCR8uC-eVrfl_3tBaq8evFByg.crl (hash: Jujkub9PzIoTELU3khWccO3rORgAKYnEZpNpLP0X/Vg=)
3: nmYhqDzscOD4WXJul6VqdubZXuE.roa (hash: NXKrupN7UtGQb1J9RMrCPRHescON/MpPuAeIS3YOdGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/_uFCR8uC-eVrfl_3tBaq8evFByg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/_uFCR8uC-eVrfl_3tBaq8evFByg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_uFCR8uC-eVrfl_3tBaq8evFByg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:2f:60:83:c4:f7:40:47:9d:9e:3c:1e:05:e1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fee14247cb82f9e56b7e5ff7b416aaf1ebc50728
Validity
Not Before: Jul 27 00:01:14 2026 GMT
Not After : Jul 28 00:01:14 2026 GMT
Subject: CN=f23197c1997c9710566a847f644bc74fbb309a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:5e:0f:5f:a9:ee:3d:66:be:22:b7:df:26:
e9:33:0f:a3:de:a9:db:78:1d:33:22:6b:7b:e8:4d:
eb:cd:14:4c:76:a0:54:04:be:bc:06:d0:fd:22:b0:
b2:49:6e:2e:2d:b9:dd:3a:fa:51:43:cf:30:20:13:
5d:04:e0:90:00:86:0c:04:be:36:db:59:61:d9:7e:
4d:42:6d:a5:5d:68:96:14:b8:9e:35:32:94:de:05:
1b:81:be:e0:b2:fd:ea:4e:ee:6e:21:17:c1:24:1c:
d4:c0:3e:0b:b7:38:a8:17:15:27:df:e5:f7:27:d8:
8e:2b:b6:7b:28:3c:e2:89:71:ad:b6:0a:99:e8:03:
6a:50:88:80:b4:1b:9d:09:dd:ae:4b:ce:92:a8:47:
d4:5c:36:f1:ea:a8:8e:79:e0:e8:12:92:62:40:2a:
78:49:eb:fc:e8:a1:83:6d:f4:c5:e2:2a:f3:78:12:
d1:7c:99:7a:7b:9a:6d:17:a2:5b:eb:33:21:f3:4b:
b0:c2:8e:e9:53:80:73:e4:bf:e1:a8:09:cd:6c:d0:
ec:c6:1a:2f:4a:be:83:fa:93:a5:18:80:67:e9:fe:
38:e8:be:1a:22:b6:1a:1d:31:98:24:00:7b:ee:3c:
40:be:0b:0d:df:71:10:96:bc:b6:3e:92:0f:72:5e:
b5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:31:97:C1:99:7C:97:10:56:6A:84:7F:64:4B:C7:4F:BB:30:9A:7B
X509v3 Authority Key Identifier:
keyid:FE:E1:42:47:CB:82:F9:E5:6B:7E:5F:F7:B4:16:AA:F1:EB:C5:07:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_uFCR8uC-eVrfl_3tBaq8evFByg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/_uFCR8uC-eVrfl_3tBaq8evFByg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/_uFCR8uC-eVrfl_3tBaq8evFByg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:31:3d:99:2d:7d:50:a4:b6:2e:67:7b:16:09:23:9f:c7:ae:
11:68:ef:9b:ad:b5:43:c8:e0:26:d6:f4:fe:fb:f0:d2:b4:1a:
41:f1:7d:c5:b5:ef:e2:b2:e6:8e:de:7a:f9:9a:11:9a:4d:8b:
6b:87:02:b6:d3:f4:ad:3e:f8:99:94:f8:15:27:1e:af:02:fb:
32:a8:7a:30:bd:fc:74:f2:65:88:4a:af:64:7a:f5:3f:0f:5b:
69:fd:02:57:12:8d:ac:4b:e8:2e:4c:0e:6c:52:04:e1:99:13:
6d:a2:a2:63:3d:ab:54:35:ee:97:9b:0d:b1:b3:a4:d1:c6:4f:
65:3d:81:7d:6c:06:88:7e:a6:05:1e:97:e0:dd:9b:fa:38:96:
46:e3:3b:87:13:2e:40:ef:5a:ce:fe:e1:d9:23:86:68:5f:6c:
c8:bd:b4:15:85:0e:d2:1c:c4:e6:0a:7b:66:c4:ba:fb:ee:ca:
c5:bc:54:73:cc:8f:00:21:76:8f:e6:6c:cf:83:ac:10:0c:a6:
92:dd:22:2a:81:b3:17:b6:c4:ba:2c:41:a8:c5:f5:98:b3:fa:
c1:69:2e:37:ea:cb:d4:c9:f6:eb:e1:3c:34:08:25:cf:4a:97:
80:c5:a9:73:85:7b:55:47:23:98:ef:fe:3e:aa:e9:1a:c4:94:
82:6a:fb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:42:49 2026 by rpki-client