Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
File: uRHH7b8dPMT7B1OBo392JWuHKF0.mft (raw, json)
Hash identifier: qDB8lYPKseAywI3BpsV1VFZJpG41ibtvHfcW6NIaZv8=
Subject key identifier: 01:A1:1E:F3:63:FD:BC:92:A8:18:CA:3D:14:9A:68:22:30:4D:87:FE
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 019F1943B47F729B0BEBDB48F6A37386C193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 16:01:35 +0000
Manifest this update: Tue 30 Jun 2026 16:01:35 +0000
Manifest next update: Wed 01 Jul 2026 16:01:35 +0000
Files and hashes: 1: 0niShbwHtinfdOcyX-eB9nvMN5U.roa (hash: NxNRyO/CDa98+QF8PESlbVbO+c6T2pxgQCeBwyf4+1Q=)
2: greq7WY7GiIu5wsAhwnBREui5Zw.roa (hash: iT6mrR2gyIJ44Vu53Oggr+gcfc4YnEqZltQEnS0ZISU=)
3: uRHH7b8dPMT7B1OBo392JWuHKF0.crl (hash: +levKKN3fhjUrP8pRDzfMYF5tQV65suuYe2pD6OjLS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:b4:7f:72:9b:0b:eb:db:48:f6:a3:73:86:c1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Jun 30 16:01:35 2026 GMT
Not After : Jul 1 16:01:35 2026 GMT
Subject: CN=01a11ef363fdbc92a818ca3d149a6822304d87fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5a:ec:ad:c0:58:a6:a0:95:cc:1e:50:6e:6a:
40:37:0c:bc:aa:aa:21:9d:71:4c:2b:84:3c:06:3f:
7e:3f:96:e9:36:ba:dc:05:a1:d5:aa:4d:87:09:ca:
cf:63:6a:ae:dd:f7:c5:75:b4:a2:47:b7:bf:ea:11:
a1:9a:f5:23:20:24:4a:82:ca:8c:81:37:e9:97:92:
51:ff:73:aa:1a:75:ba:04:19:a2:1c:34:d2:9d:e1:
b0:8a:43:9a:81:2d:d0:91:a9:3e:c9:63:b3:02:61:
90:bb:ce:2a:cf:0c:8b:e9:7f:d1:82:80:1c:2b:e0:
e8:84:28:ee:93:79:77:df:e5:f6:4d:55:68:ec:dc:
d0:a3:6b:61:b2:1c:4c:60:7d:1a:47:7a:16:63:b4:
bf:fb:73:9c:a8:c9:4e:80:dc:6a:66:28:ae:a8:c1:
41:5f:0b:1d:b7:94:5d:a0:b2:8e:ab:fc:6e:d1:2d:
5e:75:ff:97:03:41:bb:e9:91:92:98:be:b9:5d:1f:
14:8f:cf:ac:62:f3:73:aa:da:a5:58:06:42:28:a8:
6c:e2:7b:3b:6c:16:fa:1c:d1:e6:8e:07:81:22:82:
2e:c1:5d:df:dc:46:17:28:a3:17:dd:7d:2b:27:29:
63:dc:34:6b:d0:6a:be:77:88:42:17:b0:dd:43:4d:
b4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A1:1E:F3:63:FD:BC:92:A8:18:CA:3D:14:9A:68:22:30:4D:87:FE
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7d:48:99:3a:af:ec:ee:43:17:60:de:9b:85:2f:f7:12:56:
86:85:c3:65:f1:b7:62:97:07:7d:30:c6:f4:06:b3:3c:b5:a6:
56:62:fd:9f:d4:26:e3:1f:39:7f:52:22:a6:5d:e5:4a:27:dc:
61:84:98:d0:6d:c0:d6:ae:12:91:53:9f:9a:32:46:56:70:f6:
24:2e:23:ba:b9:a6:06:1e:cf:27:6b:d8:4c:ae:8b:b6:ff:ce:
f8:9d:30:53:f1:62:9d:1d:67:b2:5f:57:36:b0:a6:30:7e:52:
67:8b:49:e1:a7:e7:2f:7f:56:8a:0e:92:50:2b:bc:cf:4d:18:
ed:b6:ff:72:e0:d1:51:23:4c:1c:20:76:9a:49:58:2c:d0:69:
8c:5d:98:68:d4:44:f8:e7:f7:33:02:39:8a:f9:11:d6:5d:ef:
ae:b6:55:2d:82:52:d4:fe:24:2e:42:0a:f2:27:14:12:40:88:
75:40:09:2e:13:02:88:33:38:46:fa:aa:5b:5c:bb:50:ad:b6:
44:e3:49:06:45:41:99:7f:84:16:5d:77:03:63:3e:09:16:4e:
ba:87:dc:db:6e:8a:1d:53:0e:cf:93:68:ea:e4:d0:b4:48:86:
e1:4b:3c:25:98:14:91:d9:1a:61:5c:84:57:16:d5:05:f6:55:
95:12:75:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZQ7R/cpsL69tI9qNzhsGTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTFjN2VkYmYxZDNjYzRmYjA3NTM4MWEzN2Y3NjI1NmI4
NzI4NWQwHhcNMjYwNjMwMTYwMTM1WhcNMjYwNzAxMTYwMTM1WjAzMTEwLwYDVQQD
EygwMWExMWVmMzYzZmRiYzkyYTgxOGNhM2QxNDlhNjgyMjMwNGQ4N2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lrsrcBYpqCVzB5QbmpANwy8qqoh
nXFMK4Q8Bj9+P5bpNrrcBaHVqk2HCcrPY2qu3ffFdbSiR7e/6hGhmvUjICRKgsqM
gTfpl5JR/3OqGnW6BBmiHDTSneGwikOagS3Qkak+yWOzAmGQu84qzwyL6X/RgoAc
K+DohCjuk3l33+X2TVVo7NzQo2thshxMYH0aR3oWY7S/+3OcqMlOgNxqZiiuqMFB
Xwsdt5RdoLKOq/xu0S1edf+XA0G76ZGSmL65XR8Uj8+sYvNzqtqlWAZCKKhs4ns7
bBb6HNHmjgeBIoIuwV3f3EYXKKMX3X0rJylj3DRr0Gq+d4hCF7DdQ020FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGhHvNj/bySqBjKPRSaaCIwTYf+MB8GA1UdIwQY
MBaAFLkRx+2/HTzE+wdTgaN/diVrhyhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8yM2IxNDgtZTBkZC00ZmE2LWFmNDQt
NjEzMDE3ODg2ZThiLzEvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8yM2IxNDgtZTBkZC00ZmE2LWFmNDQtNjEzMDE3ODg2ZThi
LzEvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT31ImTqv
7O5DF2Dem4Uv9xJWhoXDZfG3YpcHfTDG9AazPLWmVmL9n9Qm4x85f1Iipl3lSifc
YYSY0G3A1q4SkVOfmjJGVnD2JC4jurmmBh7PJ2vYTK6Ltv/O+J0wU/FinR1nsl9X
NrCmMH5SZ4tJ4afnL39Wig6SUCu8z00Y7bb/cuDRUSNMHCB2mklYLNBpjF2YaNRE
+Of3MwI5ivkR1l3vrrZVLYJS1P4kLkIK8icUEkCIdUAJLhMCiDM4RvqqW1y7UK22
RONJBkVBmX+EFl13A2M+CRZOuofc226KHVMOz5No6uTQtEiG4Us8JZgUkdkaYVyE
VxbVBfZVlRJ1MQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 22:40:23 2026 by rpki-client