Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
File: pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft (raw, json)
Hash identifier: F77GBu/wlL9lOspRG9pKwymKPBCA2fmC+mx5yG0QjbQ=
Subject key identifier: 8E:8A:CB:5E:E3:4E:4F:D7:52:00:1D:FC:34:5C:DB:32:9A:5F:63:64
Authority key identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
Certificate issuer: /CN=a5472b1473bc781b70440315c83d119c8abc86fc
Certificate serial: 019F86B2A6271D05FFFD09B789A981A8E3BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
Manifest number: 171C
Signing time: Tue 21 Jul 2026 22:01:22 +0000
Manifest this update: Tue 21 Jul 2026 22:01:22 +0000
Manifest next update: Wed 22 Jul 2026 22:01:22 +0000
Files and hashes: 1: icGxSXDSLuf3bxPbnWFtv-JBVbs.roa (hash: J8P/ZDEioxw2f81tNOKgfIU5hZS6uHNCJdz89yqe1hg=)
2: pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl (hash: 3W3I4Oec5Pl2EUDPP0SPSBVH3KCU/dheBUDS24YKxvI=)
3: vjXtRIEiyB7erWPIwLI15XGZ10k.roa (hash: gnrNiqSgWNnIJJPCLHVFh0qVACCw6Qa1Bcb38Wxj/po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:b2:a6:27:1d:05:ff:fd:09:b7:89:a9:81:a8:e3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5472b1473bc781b70440315c83d119c8abc86fc
Validity
Not Before: Jul 21 22:01:22 2026 GMT
Not After : Jul 22 22:01:22 2026 GMT
Subject: CN=8e8acb5ee34e4fd752001dfc345cdb329a5f6364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f7:49:eb:06:b3:29:43:17:4f:54:d8:55:3b:
94:c5:92:06:04:12:f4:10:e6:cd:2c:16:53:d5:0a:
c5:32:58:db:48:6f:2f:70:d5:28:97:44:1f:06:47:
b3:20:17:2e:2d:2a:27:63:1a:48:65:42:96:59:c5:
1c:39:47:c5:96:2e:a0:c3:e1:d9:0a:ac:7e:f1:07:
88:00:60:fe:b7:ac:df:89:23:f6:eb:f4:1e:5e:db:
dd:b0:b2:f0:61:6e:a8:a2:99:a5:22:95:6a:96:87:
1a:7a:5a:83:ba:e8:34:82:18:52:14:dc:c7:1d:74:
ff:b3:8a:95:5a:18:aa:c6:e9:99:26:75:fb:28:ef:
72:41:63:93:1d:94:f2:14:e6:2a:35:2e:44:58:a9:
39:96:d5:e9:4e:79:9f:43:d6:91:04:48:ef:e6:56:
a2:0d:c5:6d:ee:0d:bf:40:a9:14:43:6c:72:62:8a:
13:48:16:80:ee:d2:b2:63:ab:fe:dd:56:cd:d0:b5:
0c:b5:af:6b:39:33:13:95:a7:5f:7e:26:13:d0:21:
de:b2:31:83:0b:ce:0a:7e:97:a9:64:d2:8c:66:a0:
d2:c7:1d:07:d5:17:71:e6:53:df:99:78:ae:54:43:
88:f7:59:38:91:14:22:ed:fe:1e:75:7e:4e:49:91:
b2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8A:CB:5E:E3:4E:4F:D7:52:00:1D:FC:34:5C:DB:32:9A:5F:63:64
X509v3 Authority Key Identifier:
keyid:A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:81:68:50:03:d6:5a:a0:02:2f:9c:37:f2:d4:07:fa:c8:69:
b0:51:87:62:69:d5:84:e6:44:dc:86:f4:aa:dd:24:a9:84:04:
74:e7:70:0a:4d:2f:e9:12:2f:51:f8:66:fa:67:42:07:48:d3:
89:17:7a:42:89:6f:ef:ff:0e:12:3f:06:40:ee:eb:22:cb:3b:
b1:31:c2:ae:c1:a4:f3:65:c5:3a:cc:a9:6f:cc:e6:12:b2:a7:
d8:cd:41:b6:76:cd:2b:00:41:39:bc:c9:c1:cd:f3:9a:2f:99:
aa:bd:f2:0e:dc:aa:f1:fa:0e:83:f4:89:df:bb:bd:d4:d7:b4:
06:de:09:1a:cb:d1:e3:1d:b9:e3:18:5b:2c:65:21:cb:60:1d:
bb:b3:c7:30:42:ff:9f:28:5a:9c:da:51:87:91:63:15:6e:20:
81:9a:0e:18:75:25:ad:1e:b5:09:35:b7:b2:7c:36:4b:dd:a2:
23:8c:bd:07:b7:82:bb:a2:98:08:f3:34:d7:71:f1:74:95:9a:
6b:e0:41:a6:7f:66:13:27:03:96:61:4b:11:30:1e:7e:d0:aa:
c8:a6:1f:71:9e:3f:38:b7:72:a2:b4:1e:3a:c2:5a:fa:2d:64:
cf:73:bc:e0:d3:b8:77:84:69:13:94:9d:56:87:f5:bd:40:83:
e6:59:a2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:12:25 2026 by rpki-client