Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
File: uFh0CVxMlCK5NZdacVZPB3HNKS4.mft (raw, json)
Hash identifier: e1U9TNnzOUoC2HKJOCOnfVlfYrT3YxT6MBm9ZBDwuJw=
Subject key identifier: B8:06:FE:A8:15:E9:4C:3E:2C:29:A2:EC:46:11:1E:F8:BA:60:03:2A
Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
Certificate issuer: /CN=b85874095c4c9422b935975a71564f0771cd292e
Certificate serial: 019E8E3774C4F99D7CFEB914A528F1C477F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
Manifest number: 08D9
Signing time: Wed 03 Jun 2026 16:00:59 +0000
Manifest this update: Wed 03 Jun 2026 16:00:59 +0000
Manifest next update: Thu 04 Jun 2026 16:00:59 +0000
Files and hashes: 1: onylvAnaX1xJT4oQ_18209fUiQo.roa (hash: uJ5yGGvZ7mIQiDhU+Wu/R2iMU5zPKWhZCJOHY75uE3g=)
2: uFh0CVxMlCK5NZdacVZPB3HNKS4.crl (hash: fq/NfEQIlLaXvdJsi6NX+bNEsz5Jt0zuXZR5iLSNvHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:37:74:c4:f9:9d:7c:fe:b9:14:a5:28:f1:c4:77:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e
Validity
Not Before: Jun 3 16:00:59 2026 GMT
Not After : Jun 4 16:00:59 2026 GMT
Subject: CN=b806fea815e94c3e2c29a2ec46111ef8ba60032a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f8:5e:5c:d8:15:ce:80:ec:3c:4a:f0:00:31:
6f:c2:7c:d3:cf:d7:e2:17:a9:ea:08:de:1d:74:0e:
a9:53:2e:ac:a7:e9:c6:b4:9e:50:b3:c2:42:55:d6:
6e:48:f1:00:af:72:68:9a:24:fe:0f:8c:78:76:49:
23:98:3f:5c:16:2a:bc:3b:a4:3f:52:1f:25:50:51:
49:2e:7c:20:74:01:dc:48:7c:0a:b0:58:1e:08:08:
01:f3:03:14:66:00:15:63:e5:06:49:f3:3e:22:13:
08:0b:83:51:d7:de:e2:1c:80:e1:58:b1:ae:2e:03:
05:92:47:03:14:52:09:81:7f:37:c8:27:11:b3:1d:
bb:02:e3:a1:67:31:43:2b:81:56:53:0e:8b:3d:be:
94:c0:ff:ad:23:83:d0:45:0a:8f:93:f9:3a:f1:14:
b0:c3:09:4a:d9:b2:83:6d:97:f3:61:d9:73:b8:0f:
2d:d9:0f:59:c3:d2:dc:36:a3:58:8b:a5:eb:a7:40:
63:44:35:03:10:a2:bd:5b:a0:52:21:c7:0e:2f:7f:
8d:47:3b:c0:67:59:75:61:cc:3e:18:9b:c1:50:2f:
79:e1:cc:fb:c0:2c:3e:71:5b:e5:85:24:16:77:12:
58:d1:79:61:a5:55:71:6c:39:9f:f7:8b:ec:62:fe:
d5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:06:FE:A8:15:E9:4C:3E:2C:29:A2:EC:46:11:1E:F8:BA:60:03:2A
X509v3 Authority Key Identifier:
keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:36:46:1f:0c:2c:70:b4:2c:3d:40:61:9a:7d:74:93:f9:e6:
79:82:13:69:54:b8:03:88:ec:35:22:7f:68:5a:52:7f:17:0c:
25:6e:c6:da:f7:e1:b0:14:a8:00:b7:0c:04:18:f7:83:7d:ce:
e3:a6:77:0d:41:61:d4:56:07:c8:fe:eb:9a:8d:da:d9:a8:76:
fc:c5:ca:35:ce:3c:ac:1b:cb:89:eb:88:66:34:9e:a8:0c:9d:
63:fd:c3:0e:65:7c:6b:be:c1:b2:af:3d:22:d5:1a:36:d3:41:
32:cf:3d:d0:91:36:4a:5a:7f:e8:21:e1:0e:ab:36:ec:ae:ef:
b5:23:af:80:66:3e:10:c3:8c:70:c6:d7:1e:c6:be:4c:b8:89:
ef:12:a8:a5:d2:1c:4a:39:a8:5e:f8:22:b5:2a:16:d2:01:51:
98:79:16:77:c3:ed:3f:dc:7f:d1:8d:3d:c9:90:3d:90:33:2d:
5d:55:c6:ac:89:84:c0:e7:c3:7b:71:83:88:a6:af:38:51:f8:
88:6b:b7:82:66:8f:a0:7c:55:c7:65:2e:02:85:37:32:d5:47:
3e:fd:6a:83:a3:dd:bb:b5:a6:05:cb:e3:7f:9d:db:7a:ed:1d:
92:6f:51:46:e4:ea:03:54:3b:cd:9a:58:4e:87:f7:b3:26:58:
80:4b:16:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:00:26 2026 by rpki-client